Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
35
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
260
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
220
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
560
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
650
И разработчик станет хакером!
Avatar for oxdef oxdef
0
62
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
670
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
400
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
410
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
440

Other Decks in Programming

See All in Programming
iOS機能開発のAI環境と起きた変化
Avatar for Ryu-nakayama ryunakayama
0
190
運転動画を検索可能にする〜Cosmos-Embed1とDatabricks Vector Searchで〜/cosmos-embed1-databricks-vector-search
Avatar for 開発室Graph studio_graph
1
430
10年分の技術的負債、完済へ ― Claude Code主導のAI駆動開発でスポーツブルを丸ごとリプレイスした話
Avatar for nero15 takuya_houshima
0
2.6k
PCOVから学ぶコードカバレッジ #phpcon_odawara
Avatar for hideki kinjyo o0h
PRO
0
280
2026_04_15_量子計算をパズルとして解く
Avatar for HideakiTakechi hideakitakechi
0
110
NakouPAY説明用
Avatar for Annouim0 annouim0
0
260
ついに来た！本格的なマルチクラウド時代の Google Cloud
Avatar for maroon1st maroon1st
0
240
属人化しないコード品質の作り方_2026.04.07.pdf
Avatar for Masaki Murano muraaano
0
230
Agentic Elixir
Avatar for Andrea Leopardi whatyouhide
0
400
第3木曜LT会 #28
Avatar for Tsubasa SEKIGUCHI tinykitten
PRO
0
110
Don't Prompt Harder, Structure Better
Avatar for Yusuke Kita kitasuke
0
780
Going Multiplatform with Your Android App (Android Makers 2026)
Avatar for Márton Braun zsmb
2
450

Featured

See All Featured
エンジニアに許された特別な時間の終わり
Avatar for watany watany
106
240k
Producing Creativity
Avatar for Steve Smith orderedlist
PRO
348
40k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
Avatar for Addy Osmani addyosmani
10
1.1k
Building the Perfect Custom Keyboard
Avatar for Naoto Takai takai
2
740
AI Search: Implications for SEO and How to Move Forward - #ShenzhenSEOConference
Avatar for Aleyda Solis aleyda
1
1.2k
Prompt Engineering for Job Search
Avatar for Mfonobong Umondia mfonobong
0
280
The innovator’s Mindset - 
Leading Through an Era of Exponential Change - McGill University 2025
Avatar for Jean-Marc De Jonghe jdejongh
PRO
1
160
Noah Learner - AI + Me: how we built a GSC Bulk Export data pipeline
Avatar for Tech SEO Connect techseoconnect
PRO
0
170
Navigating the Design Leadership Dip - Product Design Week Design Leaders+ Conference 2024
Avatar for Andy Polaine apolaine
0
280
Fashionably flexible responsive web design (full day workshop)
Avatar for Andy Clarke malarkey
408
66k
Visual Storytelling: How to be a Superhuman Communicator
Avatar for David Neal reverentgeek
2
520
Applied NLP in the Age of Generative AI
Avatar for Ines Montani inesmontani
PRO
4
2.2k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]