Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

oxdef
May 23, 2017
Programming
0
29

HTTPS by default - no more clear

Phdays 2017

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
oxdef
0
160
Keynote at ZeroNights X (2021)
oxdef
0
130
Security Culture: Here be Hackers
oxdef
0
480
OWASP Top 10 - 2017 What’s inside?
oxdef
0
500
И разработчик станет хакером!
oxdef
0
40
Implementing Content Security Policy at a Large Scale
oxdef
0
520
Security in developer’s life: knowledge is power
oxdef
0
330
Web Application Security: future standards and technologies
oxdef
0
330
Content Security Policy - the panacea for XSS or placebo?
oxdef
0
360

Other Decks in Programming

See All in Programming
Jakarta EE meets AI
ivargrimstad
0
230
Mermaid x AST x 生成AI = コードとドキュメントの完全同期への道
shibuyamizuho
0
160
StarlingMonkeyを触ってみた話 - 2024冬
syumai
3
270
Effective Signals in Angular 19+: Rules and Helpers @ngbe2024
manfredsteyer
PRO
0
130
rails stats で紐解く ANDPAD のイマを支える技術たち
andpad
1
290
Refactor your code - refactor yourself
xosofox
1
260
The Efficiency Paradox and How to Save Yourself and the World
hollycummins
1
440
[JAWS-UG横浜 #76] イケてるアップデートを宇宙いち早く紹介するよ！
maroon1st
0
450
talk-with-local-llm-with-web-streams-api
kbaba1001
0
170
Symfony Mapper Component
soyuka
2
730
Go の GC の不得意な 部分を克服したい
taiyow
2
760
CSC305 Lecture 25
javiergs
PRO
0
130

Featured

See All Featured
Why Our Code Smells
bkeepers
PRO
335
57k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
127
18k
Code Review Best Practice
trishagee
65
17k
Build your cross-platform service in a week with App Engine
jlugia
229
18k
CSS Pre-Processors: Stylus, Less & Sass
bermonpainter
356
29k
Chrome DevTools: State of the Union 2024 - Debugging React & Beyond
addyosmani
2
160
Building Your Own Lightsaber
phodgson
103
6.1k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
aki_iinuma
111
49k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
mongodb
44
9.3k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
507
140k
Testing 201, or: Great Expectations
jmmastey
40
7.1k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
169
50k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]