Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

HTTPS and You

Avatar for Tim Nash Tim Nash
January 01, 2017
Programming
1k
0

HTTPS and You

Brief Lightning talk on TLS

Avatar for Tim Nash

Tim Nash

January 01, 2017

More Decks by Tim Nash

See All by Tim Nash
Testing Fortifications - WordCamp Brighton
Avatar for Tim Nash timnashcouk
0
480
Come to the dark side, they have cookies
Avatar for Tim Nash timnashcouk
0
1.4k
Come to the dark side
Avatar for Tim Nash timnashcouk
0
80
Practical WordPress Security 2018
Avatar for Tim Nash timnashcouk
0
450
Practical WordPress Security
Avatar for Tim Nash timnashcouk
0
1.7k
Baking Security into your workflow - Early
Avatar for Tim Nash timnashcouk
0
990
Security is Everyone responsibility
Avatar for Tim Nash timnashcouk
0
1.1k

Other Decks in Programming

See All in Programming
フロントエンドUIフレームワークのこれまでとこれから
Avatar for TOMIKAWA Sotaro ssssota
5
2.6k
自分的「カンファレンスの楽しみ方」
Avatar for syumai syumai
0
200
海上で動くGoサーバー: goroutineとchannelでさばく航行データストリーム
Avatar for Atsuki Seo atsuki_seo
0
330
LLMは4年分のCompose移行を再現できるのか？実プロダクト279件のXMLで探る自動化の境界線
Avatar for makun makun
0
820
更なる可用性を求めて、5年間運用したKotlinのアプリケーションをGoでリプレイスする話
Avatar for Kensuke Taguchi ken_tunc
0
160
Webの地図
Avatar for Yosuke Furukawa yosuke_furukawa
PRO
6
4.4k
From 6 People Classroom Meetup to 100 People Regional Conference / FOSS4G Hiroshima 2026
Avatar for YFurukawa furukawayasuto
0
190
App Intentsのビルドプロセスを支える技術
Avatar for kntk kntkymt
0
350
AGENTS.md Is Not Enough: Build Skills, Don't Download Them
Avatar for Alex T lx_t
0
110
仕様駆動開発による爆速プロダクト開発 / Bakusoku Spec Driven Development
Avatar for Keisuke Kobayashi kobakei
0
110
Family mrubyの進捗
Avatar for Katsuhiko Kageyama kishima
1
120
AHC070解法紹介
Avatar for eijirou eijirou
0
110

Featured

See All Featured
How to Talk to Developers About Accessibility
Avatar for Jason CranfordTeague jct
2
550
brightonSEO & MeasureFest 2025 - Christian Goodrich - Winning strategies for Black Friday CRO & PPC
Avatar for Christian Goodrich cargoodrich
3
840
Site-Speed That Sticks
Avatar for Harry Roberts csswizardry
13
1.5k
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
7.9k
Marketing to machines
Avatar for Jono Alderson jonoalderson
1
5.8k
How to train your dragon (web standard)
Avatar for Monica Dinculescu notwaldorf
97
6.8k
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
55
8.3k
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
Avatar for AKADEMIYA2063 akademiya2063
PRO
1
350
Git: the NoSQL Database
Avatar for Brandon Keepers bkeepers
PRO
432
67k
職位にかかわらず全員がリーダーシップを発揮するチーム作り / Building a team where everyone can demonstrate leadership regardless of position
Avatar for MADOX madoxten
69
65k
Paper Plane
Avatar for Katie Cordina Lindsey katiecoart
PRO
3
53k
Claude Code どこまでも/ Claude Code Everywhere
Avatar for nwiizo nwiizo
67
58k

Transcript

  1. HTTPS:// and you… Tim Nash [UK] https://timnash.co.uk

  2. Tim Nash - WordPress Platform Lead & Developer Advocate at

  3. HTTPS

  4. HTTPS (HTTP over SSL)

  5. SSL (Secure Socket Layer)

  6. It’s all a LIE!!!!!

  7. HTTP over TLS1.2

  8. HTTPS (HTTP (secure)Encrypted)

  9. None

  10. Browser Server Request Packet Response Packet

  11. Browser Server Request Packet Response Packet Client ‘Hello’ Server ‘Hello’

    Cryptographic information Server Certificate Client Key Exchange Send’s Key info signed with servers key Sends Client Certificate Client ‘finished’ Server ‘finished’
  12. None

  13. Pitfalls

  14. Force everything…

  15. search replace http:// https://

  16. Better still 301 all HTTP requests as well

  17. Mixed Content

  18. None

  19. If it loads over HTTP it needs to load over

    HTTPS

  20. Third Party Scripts: Google Analytics, Forms

  21. DEVELOPERS! Don’t hard code URLs

  22. Certificate issues aka Red Screen of death

  23. https://www.ssllabs.com/ssltest/

  24. HTTP/2

  25. Browser Server Requests Packets Response Packets Client ‘Hello’ Server ‘Hello’

    Client Key Exchange Client ‘finished’ Server ‘finished’

  26. Tim Nash timnash.co.uk @tnash 34SP.com [email protected]