Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
0
32

HTTPS by default - no more clear

Phdays 2017
Avatar for oxdef

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
200
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
160
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
510
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
570
И разработчик станет хакером!
Avatar for oxdef oxdef
0
43
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
590
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
360
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
370
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
400

Other Decks in Programming

See All in Programming
UPDATEがシステムを複雑にする？ イミュータブルデータモデルのすすめ
Avatar for a.shimomura shimomura
1
550
Select API from Kotlin Coroutine
Avatar for Matsuda Jumpei jmatsu
1
170
GraphRAGの仕組みまるわかり
Avatar for とすり tosuri13
7
430
Javaのルールをねじ曲げろ！禁断の操作とその代償から学ぶメタプログラミング入門 / A Guide to Metaprogramming: Lessons from Forbidden Techniques and Their Price
Avatar for nrs nrslib
3
2k
try-catchを使わないエラーハンドリング！？ PHPでResult型の考え方を取り入れてみよう
Avatar for Takuma Kajikawa kajitack
3
520
Development of an App for Intuitive AI Learning - Blockly Summit 2025
Avatar for Teba_eleven teba_eleven
0
120
イベントストーミングから始めるドメイン駆動設計
Avatar for おだかとしゆき jgeem
4
860
Javaに鉄道指向プログラミング (Railway Oriented Pro　gramming) のエッセンスを取り入れる/Bringing the Essence of Railway-Oriented Programming to Java
Avatar for takumi.okamoto cocet33000
2
580
SODA - FACT BOOK
Avatar for SODA inc. sodainc
1
1k
XSLTで作るBrainfuck処理系
Avatar for MakKi makki_d
0
210
Using AI Tools Around Software Development
Avatar for inouehi inouehi
0
1.2k
Gleamという選択肢
Avatar for Comamoca comamoca
6
740

Featured

See All Featured
Rebuilding a faster, lazier Slack
Avatar for samanthasiow samanthasiow
81
9k
Put a Button on it: Removing Barriers to Going Fast.
Avatar for kastner kastner
60
3.9k
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
43
2.4k
No one is an island. Learnings from fostering a developers community.
Avatar for Antonio thoeni
21
3.3k
Code Reviewing Like a Champion
Avatar for maltzj maltzj
524
40k
The Success of Rails: Ensuring Growth for the Next 100 Years
Avatar for Eileen M. Uchitelle eileencodes
45
7.4k
What's in a price? How to price your products and services
Avatar for Michael Herold michaelherold
245
12k
The Language of Interfaces
Avatar for Des Traynor destraynor
158
25k
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
51
3.3k
Reflections from 52 weeks, 52 projects
Avatar for Jefferson Lam jeffersonlam
351
20k
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
46
14k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
Avatar for Chris Coyier chriscoyier
507
140k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]