Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for oxdef oxdef
May 23, 2017
Programming
37
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
270
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
230
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
580
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
660
И разработчик станет хакером!
Avatar for oxdef oxdef
0
65
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
680
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
420
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
420
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
450

Other Decks in Programming

See All in Programming
Hatena Engineer Seminar #37「言語モデルの活用に関する研究」
Avatar for SlashNephy slashnephy
0
270
スマートグラスで並列バイブコーディング
Avatar for Hayami Shuhei hyshu
0
260
エージェンティックRAGにAWSで入門しよう！
Avatar for Har1101 har1101
9
1.8k
どこまでゆるくて許されるのか
Avatar for tk3fftk tk3fftk
0
260
dRuby over BLE
Avatar for makicamel makicamel
2
390
AI 輔助遺留系統現代化的經驗分享
Avatar for James Wang jame2408
1
1.1k
TAKTでAI駆動開発の品質を設計する
Avatar for かとじゅん j5ik2o
7
1.6k
ローカルLLMでどこまでコードが書けるか -拡張版 /　How much code can be written on a local LLM Extended
Avatar for Naoki Kishida kishida
12
4.5k
正しくソフトウェアを作る、前提を疑うための認知の視点 / doubt-premise
Avatar for MinoDriven minodriven
21
7.1k
任せる範囲はこう広がった / How the Scope of AI Delegation Has Expanded
Avatar for nrs nrslib
0
170
Semantic Version 単位で戦略を柔軟に変えて、パッケージアップデートを自動化する
Avatar for daitasu daitasu
1
320
Skillsは効率化、Agentsは"自分の拡張"——Builder時代のエージェント編成（CC Night 2026）
Avatar for Hiroki Uemura wemra
1
170

Featured

See All Featured
Crafting Experiences
Avatar for Bethany Jepchumba bethany
1
190
Making the Leap to Tech Lead
Avatar for Ryan Cromwell cromwellryan
135
9.9k
Rails Girls Zürich Keynote
Avatar for Gregor Martynus gr2m
96
14k
The Organizational Zoo: Understanding Human Behavior Agility Through Metaphoric Constructive Conversations (based on the works of Arthur Shelley, Ph.D)
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
370
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
Avatar for AKADEMIYA2063 akademiya2063
PRO
1
160
Agile Leadership in an Agile Organization
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
170
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
Avatar for Rebecca Miller-Webster rmw
35
3.5k
The Curious Case for Waylosing
Avatar for Cassini Nazir cassininazir
1
410
How To Stay Up To Date on Web Technology
Avatar for Chris Coyier chriscoyier
790
250k
Testing 201, or: Great Expectations
Avatar for Joseph Mastey jmmastey
46
8.2k
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
191
11k
How to Think Like a Performance Engineer
Avatar for Harry Roberts csswizardry
28
2.7k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]