Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
43
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
290
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
240
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
590
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
680
И разработчик станет хакером!
Avatar for oxdef oxdef
0
69
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
700
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
430
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
430
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
460

Other Decks in Programming

See All in Programming
Herb in Rails 8.2: Your ERB views, now HTML-aware @ Rails World 2026, Austin, Texas
Avatar for Marco Roth marcoroth
0
220
コーディング自動化の次へ。人の介入をゼロにするファクトリーとサポートAIによる実践
Avatar for Seiji Takahashi timakin
4
3.5k
Compiling a real-world CLI tool to native with Static Hermes
Avatar for Tzvetan Mikov tmikov2023
0
120
R8 の設定見直しでアプリサイズ削減
Avatar for ANDPAD inc andpad
0
220
Long Living Tokens, Die, Die, Die! (or: The One Ring is Banned in Modern)
Avatar for sylph01 sylph01
0
300
パズルゲームの作り方 / how to make puzzle games
Avatar for kaityo256 kaityo256
PRO
2
290
ソニーのクラウド共通基盤の変遷と AI時代の開発スタイルに合わせた進化 / The Journey of Sony’s Common Cloud Platform and Its Evolution for AI-Native Development
Avatar for KenjiYoneyama kenjiyoneyama
0
270
FactoryBotをやめればRSpecは速くなるのか？
Avatar for nissyi yuta_onishi_97
0
330
Jetpack Compose Mechanisms
Avatar for Jaewoong skydoves
3
820
Domain-Driven Transformation
Avatar for Henning Schwentner hschwentner
2
2.3k
Herb in Rails 8.2: Your ERB views, now HTML-aware @ Kaigi on Rails 2026, Tokyo, Japan
Avatar for Marco Roth marcoroth
2
220
當我們開始不讀 Code - AI Agent 時代，Code Review 與 Clean Code 還剩下什麼？
Avatar for James Wang jame2408
1
210

Featured

See All Featured
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
46
8.3k
So, you think you're a good person
Avatar for Per Axbom axbom
PRO
2
2.2k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
Avatar for mongodb mongodb
50
10k
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
12k
ReactJS: Keep Simple. Everything can be a component!
Avatar for Pedro Nauck pedronauck
666
130k
Navigating the moral maze — ethical principles for Al-driven product design
Avatar for Skipper Chong Warson skipperchong
2
630
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k
The Director’s Chair: Orchestrating AI for Truly Effective Learning
Avatar for Mike Taylor tmiket
1
330
Statistics for Hackers
Avatar for Jake VanderPlas jakevdp
799
230k
Side Projects
Avatar for Sacha Greif sachag
456
43k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
141
35k
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
55
10k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]