Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

oxdef
May 23, 2017
Programming
0
30

HTTPS by default - no more clear

Phdays 2017

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
oxdef
0
170
Keynote at ZeroNights X (2021)
oxdef
0
140
Security Culture: Here be Hackers
oxdef
0
490
OWASP Top 10 - 2017 What’s inside?
oxdef
0
510
И разработчик станет хакером!
oxdef
0
40
Implementing Content Security Policy at a Large Scale
oxdef
0
520
Security in developer’s life: knowledge is power
oxdef
0
330
Web Application Security: future standards and technologies
oxdef
0
340
Content Security Policy - the panacea for XSS or placebo?
oxdef
0
370

Other Decks in Programming

See All in Programming
Jaspr Dart Web Framework 박제창 @Devfest 2024
itsmedreamwalker
0
150
PHPカンファレンス 2024｜共創を加速するための若手の技術挑戦
weddingpark
0
130
生成AIでGitHubソースコード取得して仕様書を作成
shukob
0
630
CQRS+ES の力を使って効果を感じる / Feel the effects of using the power of CQRS+ES
seike460
PRO
0
240
サーバーゆる勉強会 DBMS の仕組み編
kj455
1
300
PHPUnitしか使ってこなかった 一般PHPerがPestに乗り換えた実録
mashirou1234
0
420
ISUCON14感想戦で85万点まで頑張ってみた
ponyo877
1
580
Внедряем бюджетирование, или Как сделать хорошо?
lamodatech
0
930
Androidアプリの One Experience リリース
nein37
0
1.1k
情報漏洩させないための設計
kubotak
5
1.3k
見えないメモリを観測する: PHP 8.4 `pg_result_memory_size()` とSQL結果のメモリ管理
kentaroutakeda
0
930
Beyond ORM
77web
11
1.6k

Featured

See All Featured
Navigating Team Friction
lara
183
15k
Making the Leap to Tech Lead
cromwellryan
133
9k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
127
18k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
44
7k
Build The Right Thing And Hit Your Dates
maggiecrowley
33
2.5k
Side Projects
sachag
452
42k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
eileencodes
33
2k
Embracing the Ebb and Flow
colly
84
4.5k
What's in a price? How to price your products and services
michaelherold
244
12k
For a Future-Friendly Web
brad_frost
176
9.5k
Building Adaptive Systems
keathley
38
2.4k
The Straight Up "How To Draw Better" Workshop
denniskardys
232
140k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]