Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
0
32

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
210
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
170
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
520
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
580
И разработчик станет хакером!
Avatar for oxdef oxdef
0
43
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
600
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
370
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
370
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
400

Other Decks in Programming

See All in Programming
可変性を制する設計: 構造と振る舞いから考える概念モデリングとその実装
Avatar for Akira Suenami a_suenami
10
1.4k
Flutterと Vibe Coding で個人開発！
Avatar for Hayami Shuhei hyshu
1
210
Reactの歴史を振り返る
Avatar for つちのこ tutinoko
1
160
202507_ADKで始めるエージェント開発の基本 〜デモを通じて紹介〜（奥田りさ）The Basics of Agent Development with ADK — A Demo-Focused Introduction
Avatar for RisaTube risatube
PRO
6
1.3k
Git Sync を超える！OSS で実現する CDK Pull 型デプロイ / Deploying CDK with PipeCD in Pull-style
Avatar for Tetsuya Kikuchi tkikuc
4
500
What's new in Adaptive Android development
Avatar for Sungyong An fornewid
0
130
CEDEC 2025 『ゲームにおけるリアルタイム通信への QUIC導入事例の紹介』
Avatar for SEGADevTech segadevtech
2
660
Strands Agents で実現する名刺解析アーキテクチャ
Avatar for omiya omiya0555
1
110
ソフトウェア設計とAI技術の活用
Avatar for 増田 亨 masuda220
PRO
25
7.2k
Bedrock AgentCore ObservabilityによるAIエージェントの運用
Avatar for matsukada licux
8
540
Go製CLIツールをnpmで配布するには
Avatar for syumai syumai
2
1k
CIを整備してメンテナンスを生成AIに任せる
Avatar for Hazumi Ichijo hazumirr
0
450

Featured

See All Featured
StorybookのUI Testing Handbookを読んだ
Avatar for Shingo Yamazaki zakiyama
30
6k
A Tale of Four Properties
Avatar for Chris Coyier chriscoyier
160
23k
A better future with KSS
Avatar for Kyle Neath kneath
238
17k
The Illustrated Children's Guide to Kubernetes
Avatar for Chris Short chrisshort
48
50k
Producing Creativity
Avatar for Steve Smith orderedlist
PRO
346
40k
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
48
2.9k
Easily Structure & Communicate Ideas using Wireframe
Avatar for Afnizar Nur Ghifari afnizarnur
194
16k
Unsuck your backbone
Avatar for Amy Palamountain ammeep
671
58k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
53
2.9k
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
29
2.8k
Navigating Team Friction
Avatar for Lara Hogan lara
188
15k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
Avatar for mongodb mongodb
47
9.6k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]