Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
0
33

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
220
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
180
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
530
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
600
И разработчик станет хакером!
Avatar for oxdef oxdef
0
46
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
630
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
370
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
390
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
410

Other Decks in Programming

See All in Programming
Advance Your Career with Open Source
Avatar for ivargrimstad ivargrimstad
0
520
『毎日の移動』を支えるGoバックエンド内製開発
Avatar for yutautsugi yutautsugi
2
240
Go言語の特性を活かした公式MCP SDKの設計
Avatar for hond hond0413
1
230
Range on Rails ―「多重範囲型」という新たな選択肢が、複雑ロジックを劇的にシンプルにしたワケ
Avatar for RIZAPテクノロジーズ rizap_tech
0
130
NixOS + Kubernetesで構築する自宅サーバーのすべて
Avatar for ichi-h ichi_h3
0
750
Flutterで分数(Fraction)を表示する方法
Avatar for kouki.miura koukimiura
0
130
ALL CODE BASE ARE BELONG TO STUDY
Avatar for uzulla uzulla
18
3.4k
After go func(): Goroutines Through a Beginner’s Eye
Avatar for Vaibhav Gupta 97vaibhav
0
390
kiroとCodexで最高のSpec駆動開発を！！数時間で web3ネイティブなミニゲームを作ってみたよ！
Avatar for Haruki Kondo mashharuki
0
170
uniqueパッケージの内部実装を支えるweak pointerの話
Avatar for magavel magavel
0
1k
CSC509 Lecture 05
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
300
Web フロントエンドエンジニアに開かれる AI Agent プロダクト開発 - Vercel AI SDK を観察して AI Agent と仲良くなろう！ #FEC余熱NIGHT
Avatar for Masayuki Izumi izumin5210
3
530

Featured

See All Featured
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
271
21k
How To Stay Up To Date on Web Technology
Avatar for Chris Coyier chriscoyier
791
250k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
Avatar for Marc Duiker marcduiker
32
2.3k
Building Adaptive Systems
Avatar for Chris Keathley keathley
43
2.8k
Navigating Team Friction
Avatar for Lara Hogan lara
190
15k
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
6
240
The Power of CSS Pseudo Elements
Avatar for Geoffrey Crofte geoffreycrofte
79
6k
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
75
5.1k
Fashionably flexible responsive web design (full day workshop)
Avatar for Andy Clarke malarkey
407
66k
Statistics for Hackers
Avatar for Jake VanderPlas jakevdp
799
220k
Product Roadmaps are Hard
Avatar for C. Todd Lombardo iamctodd
PRO
54
11k
GraphQLの誤解/rethinking-graphql
Avatar for sonatard sonatard
73
11k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]