Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
37
0

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
280
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
230
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
580
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
670
И разработчик станет хакером!
Avatar for oxdef oxdef
0
65
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
690
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
420
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
420
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
450

Other Decks in Programming

See All in Programming
jsmini JavaScript Engine を作ってみた話
Avatar for Yosuke Furukawa yosuke_furukawa
PRO
0
330
5分で問診！Composer セキュリティ健康診断
Avatar for コドモン開発チーム codmoninc
0
1k
使いながら育てる Claude Code — 開発フローの1コマンド化 × 繰り返し指摘の自動仕組み化
Avatar for endo shiki shiki_kakaku
0
1.8k
KotlinConf Extended South Korea 2026 Keynote
Avatar for HyunWoo Lee l2hyunwoo
0
110
GDG Korea Android: 2026 I/O Extended ~ What's new in Android development tools
Avatar for pluulove (노현석) pluu
0
230
いまどきの Codex で開発する visionOS アプリの開発スタイルについて
Avatar for kazuhiro hara karad
0
150
Foundation Models frameworkで画像分析
Avatar for リョウ ryodeveloper
1
620
そこに3びきプロダクトがいるじゃろう——生成AI時代における“価値が届かない理由”の構造
Avatar for kosuke T kosuket
0
510
変わらないものが、変わるものを決める — 意図駆動開発 × イベントソーシング × イミュータブル | What Doesn't Change Decides What Can — IDD × Event Sourcing × Immutability
Avatar for Tomohisa Takaoka tomohisa
0
1.8k
自動化したのに回らないテスト運用の壁ーAI時代の品質責任と生産性
Avatar for Masahiko Funaki(舟木 将彦) mfunaki
1
140
How I Won Prize Money at a Hackathon Using Codex and Symphony Alpha
Avatar for yasei no otoko yasei_no_otoko
0
110
Go 1.27 における memory allocation の高速化
Avatar for ANDPAD inc andpad
0
240

Featured

See All Featured
Performance Is Good for Brains [We Love Speed 2024]
Avatar for Tammy Everts tammyeverts
12
1.8k
Agile that works and the tools we love
Avatar for Rasmus Luckow-Nielsen rasmusluckow
331
22k
The Impact of AI in SEO - AI Overviews June 2024 Edition
Avatar for Aleyda Solis aleyda
5
1.2k
SEO for Brand Visibility & Recognition
Avatar for Aleyda Solis aleyda
0
4.7k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
Avatar for soudai sone soudai
PRO
201
75k
Reflections from 52 weeks, 52 projects
Avatar for Jefferson Lam jeffersonlam
356
21k
Being A Developer After 40
Avatar for Adrian Kosmaczewski akosma
91
590k
The Art of Programming - Codeland 2020
Avatar for Erika Heidi erikaheidi
57
14k
Building an army of robots
Avatar for Kyle Neath kneath
306
46k
Beyond borders and beyond the search box: How to win the global "messy middle" with AI-driven SEO
Avatar for David Carrasco davidcarrasco
3
210
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
Avatar for Eileen M. Uchitelle eileencodes
141
35k
[RailsConf 2023] Rails as a piece of cake
Avatar for Vladimir Dementyev palkan
59
6.9k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]