Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS by default - no more clear

Avatar for oxdef oxdef
May 23, 2017
Programming
0
33

HTTPS by default - no more clear

Phdays 2017

Avatar for oxdef

oxdef

May 23, 2017
Tweet

More Decks by oxdef

See All by oxdef
How to improve software security with OWASP open source initiatives
Avatar for oxdef oxdef
0
220
Keynote at ZeroNights X (2021)
Avatar for oxdef oxdef
0
180
Security Culture: Here be Hackers
Avatar for oxdef oxdef
0
530
OWASP Top 10 - 2017 What’s inside?
Avatar for oxdef oxdef
0
600
И разработчик станет хакером!
Avatar for oxdef oxdef
0
46
Implementing Content Security Policy at a Large Scale
Avatar for oxdef oxdef
0
630
Security in developer’s life: knowledge is power
Avatar for oxdef oxdef
0
370
Web Application Security: future standards and technologies
Avatar for oxdef oxdef
0
390
Content Security Policy - the panacea for XSS or placebo?
Avatar for oxdef oxdef
0
410

Other Decks in Programming

See All in Programming
All About Angular's New Signal Forms
Avatar for Manfred Steyer manfredsteyer
PRO
0
180
CSC509 Lecture 06
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
260
私はどうやって技術力を上げたのか
Avatar for Yusuke Wada yusukebe
44
19k
CSC305 Lecture 08
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
230
アメ車でサンノゼを走ってきたよ！
Avatar for Shigure Shimotori s_shimotori
0
230
Range on Rails ―「多重範囲型」という新たな選択肢が、複雑ロジックを劇的にシンプルにしたワケ
Avatar for RIZAPテクノロジーズ rizap_tech
0
6.7k
Claude Agent SDK を使ってみよう
Avatar for Hayami Shuhei hyshu
0
1.2k
『毎日の移動』を支えるGoバックエンド内製開発
Avatar for yutautsugi yutautsugi
2
250
なぜあの開発者はDevRelに伴走し続けるのか / Why Does That Developer Keep Running Alongside DevRel?
Avatar for nrs nrslib
3
410
CSC509 Lecture 05
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
0
300
Railsだからできる 例外業務に禍根を残さない 設定設計パターン
Avatar for えいえい ei_ei_eiichi
0
940
AIと人間の共創開発！OSSで試行錯誤した開発スタイル
Avatar for mae616 mae616
1
670

Featured

See All Featured
Practical Orchestrator
Avatar for Shlomi Noach shlominoach
190
11k
KATA
Avatar for Megan Lloyd mclloyd
PRO
32
15k
The Success of Rails: Ensuring Growth for the Next 100 Years
Avatar for Eileen M. Uchitelle eileencodes
46
7.7k
How To Stay Up To Date on Web Technology
Avatar for Chris Coyier chriscoyier
791
250k
Designing Experiences People Love
Avatar for Jonathan Moore moore
142
24k
Typedesign – Prime Four
Avatar for Hannes Fritz hannesfritz
42
2.8k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
9
980
Six Lessons from altMBA
Avatar for Skipper Chong Warson skipperchong
29
4k
Designing for humans not robots
Avatar for Tammie Lister tammielis
254
26k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
Avatar for Michelle Schulp Hunt marktimemedia
31
2.5k
Thoughts on Productivity
Avatar for Jon Yablonski jonyablonski
70
4.9k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
37
2.6k

Transcript

  1. Яндекс

  2. Я HTTPS by default - no more clear text in

    the web! Taras Ivashchenko, Product security team, Y andex ндекс
  3. None

  4. Global HTTPS usage

  5. Why so slow?!

  6. None

  7. Forward Secrecy

  8. HTTPS only for the auth page is not enough!

  9. Really big project Not only web protocols Internal knowledge base

    and tools Trainings Deep tech things: TLS sessions, double certificate scheme All services moved to “HTTPS by default” mode Improved world around us ;-) At Y andex
  10. None

  11. Q&A

  12. Taras Ivashchenko Product security team Contacts [email protected]