HTTPS and You

Brief Lightning talk on TLS

Transcript

1. HTTPS:// and you… Tim Nash [UK] https://timnash.co.uk
2. Tim Nash - WordPress Platform Lead & Developer Advocate at
3. HTTPS
4. HTTPS (HTTP over SSL)
5. SSL (Secure Socket Layer)
6. It’s all a LIE!!!!!
7. HTTP over TLS1.2
8. HTTPS (HTTP (secure)Encrypted)
10. Browser Server Request Packet Response Packet
11. Browser Server Request Packet Response Packet Client ‘Hello’ Server ‘Hello’ Cryptographic information Server Certificate Client Key Exchange Send’s Key info signed with servers key Sends Client Certificate Client ‘finished’ Server ‘finished’
13. Pitfalls
14. Force everything…
15. search replace http:// https://
16. Better still 301 all HTTP requests as well
17. Mixed Content
19. If it loads over HTTP it needs to load over HTTPS
20. Third Party Scripts: Google Analytics, Forms
21. DEVELOPERS! Don’t hard code URLs
22. Certificate issues aka Red Screen of death
23. https://www.ssllabs.com/ssltest/
24. HTTP/2
25. Browser Server Requests Packets Response Packets Client ‘Hello’ Server ‘Hello’ Client Key Exchange Client ‘finished’ Server ‘finished’
26. Tim Nash timnash.co.uk @tnash 34SP.com tim.nash@34sp.com