Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS and You

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Tim Nash Tim Nash
January 01, 2017
Programming
0
1k

HTTPS and You

Brief Lightning talk on TLS

Avatar for Tim Nash

Tim Nash

January 01, 2017
Tweet

More Decks by Tim Nash

See All by Tim Nash
Testing Fortifications - WordCamp Brighton
Avatar for Tim Nash timnashcouk
0
470
Come to the dark side, they have cookies
Avatar for Tim Nash timnashcouk
0
1.3k
Come to the dark side
Avatar for Tim Nash timnashcouk
0
68
Practical WordPress Security 2018
Avatar for Tim Nash timnashcouk
0
410
Practical WordPress Security
Avatar for Tim Nash timnashcouk
0
1.7k
Baking Security into your workflow - Early
Avatar for Tim Nash timnashcouk
0
990
Security is Everyone responsibility
Avatar for Tim Nash timnashcouk
0
1.1k

Other Decks in Programming

See All in Programming
dchart: charts from deck markup
Avatar for Anthony Starks ajstarks
3
990
開発者から情シスまで - 多様なユーザー層に届けるAPI提供戦略 / Postman API Night Okinawa 2026 Winter
Avatar for tasshi tasshi
0
190
15年続くIoTサービスの SREエンジニアが挑む 分散トレーシング導入
Avatar for Melonps melonps
2
170
FOSDEM 2026: STUNMESH-go: Building P2P WireGuard Mesh Without Self-Hosted Infrastructure
Avatar for Date Huang tjjh89017
0
150
余白を設計しフロントエンド開発を 加速させる
Avatar for karacoro / からころ tsukuha
7
2.1k
Honoを使ったリモートMCPサーバでAIツールとの連携を加速させる！
Avatar for とすり tosuri13
1
170
CSC307 Lecture 09
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
1
830
プロダクトオーナーから見たSOC2 _SOC2ゆるミートアップ#2
Avatar for Kenta Suzuki kekekenta
0
200
コマンドとリード間の連携に対する脅威分析フレームワーク
Avatar for Aja9tochin pandayumi
1
440
Architectural Extensions
Avatar for Denys Poltorak denyspoltorak
0
270
Vibe Coding - AI 驅動的軟體開發
Avatar for Micky Li mickyp100
0
170
Grafana：建立系統全知視角的捷徑
Avatar for Blueswen blueswen
0
320

Featured

See All Featured
Reality Check: Gamification 10 Years Later
Avatar for Sebastian Deterding codingconduct
0
2k
From π to Pie charts
Avatar for Rasagy Sharma rasagy
0
120
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
37
7.1k
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
273
21k
Paper Plane
Avatar for Katie Cordina Lindsey katiecoart
PRO
0
46k
For a Future-Friendly Web
Avatar for Brad Frost brad_frost
182
10k
How To Speak Unicorn (iThemes Webinar)
Avatar for Michelle Schulp Hunt marktimemedia
1
380
The Spectacular Lies of Maps
Avatar for Per Axbom axbom
PRO
1
510
Discover your Explorer Soul
Avatar for Emna emna__ayadi
2
1.1k
Efficient Content Optimization with Google Search Console & Apps Script
Avatar for Katarina Dahlin katarinadahlin
PRO
0
310
Google's AI Overviews - The New Search
Avatar for Barry Adams badams
0
900
The Anti-SEO Checklist Checklist. Pubcon Cyber Week
Avatar for Ryan Jones ryanjones
0
55

Transcript

  1. HTTPS:// and you… Tim Nash [UK] https://timnash.co.uk

  2. Tim Nash - WordPress Platform Lead & Developer Advocate at

  3. HTTPS

  4. HTTPS (HTTP over SSL)

  5. SSL (Secure Socket Layer)

  6. It’s all a LIE!!!!!

  7. HTTP over TLS1.2

  8. HTTPS (HTTP (secure)Encrypted)

  9. None

  10. Browser Server Request Packet Response Packet

  11. Browser Server Request Packet Response Packet Client ‘Hello’ Server ‘Hello’

    Cryptographic information Server Certificate Client Key Exchange Send’s Key info signed with servers key Sends Client Certificate Client ‘finished’ Server ‘finished’
  12. None

  13. Pitfalls

  14. Force everything…

  15. search replace http:// https://

  16. Better still 301 all HTTP requests as well

  17. Mixed Content

  18. None

  19. If it loads over HTTP it needs to load over

    HTTPS

  20. Third Party Scripts: Google Analytics, Forms

  21. DEVELOPERS! Don’t hard code URLs

  22. Certificate issues aka Red Screen of death

  23. https://www.ssllabs.com/ssltest/

  24. HTTP/2

  25. Browser Server Requests Packets Response Packets Client ‘Hello’ Server ‘Hello’

    Client Key Exchange Client ‘finished’ Server ‘finished’

  26. Tim Nash timnash.co.uk @tnash 34SP.com [email protected]