Upgrade to Pro — share decks privately, control downloads, hide ads and more …

HTTPS and You

Avatar for Tim Nash Tim Nash
January 01, 2017
Programming
1k
0

HTTPS and You

Brief Lightning talk on TLS

Avatar for Tim Nash

Tim Nash

January 01, 2017

More Decks by Tim Nash

See All by Tim Nash
Testing Fortifications - WordCamp Brighton
Avatar for Tim Nash timnashcouk
0
480
Come to the dark side, they have cookies
Avatar for Tim Nash timnashcouk
0
1.4k
Come to the dark side
Avatar for Tim Nash timnashcouk
0
79
Practical WordPress Security 2018
Avatar for Tim Nash timnashcouk
0
440
Practical WordPress Security
Avatar for Tim Nash timnashcouk
0
1.7k
Baking Security into your workflow - Early
Avatar for Tim Nash timnashcouk
0
990
Security is Everyone responsibility
Avatar for Tim Nash timnashcouk
0
1.1k

Other Decks in Programming

See All in Programming
エンジニアにデザインハーネスを 〜デザインプロセスを規定するためのハーネス〜 / Design harness from an engineer's perspective
Avatar for r-kagaya rkaga
2
1.7k
FDEが実現するAI駆動経営の現在地
Avatar for ryuta sakamoto gonta
2
220
【やさしく解説 設計編 #1】「ドメイン駆動」と「実装駆動」ってなに？ 〜設計の考え方を、たとえ話で学ぼう〜
Avatar for HideyukiKitao panda728
PRO
1
130
Apache Hive: Toward a Cloud Native Lakehouse
Avatar for okumin okumin
0
160
音楽のための関数型プログラミング言語mimiumにおける多段階計算の活用
Avatar for Tomoya Matsuura tomoyanonymous
1
360
琵琶湖の水は止められてもNet--HTTPのリトライは止められない / You might be able to stop the water flow of Lake Biwa but you can't stop Net::HTTP retries
Avatar for luccafort luccafort
PRO
0
440
ITヒヤリハットを整理してみた ～ライフサイクルと原因から考える再発防止策～
Avatar for kouki.miura koukimiura
1
110
【やさしく解説 設計編・中級 #6】良いアーキテクチャとは ～ 一本の登り道の、行き先 ～
Avatar for HideyukiKitao panda728
PRO
0
180
為什麼你並不需要ViewModel / No, you don't need a ViewModel
Avatar for Elvis Shi lovee
1
340
Prismを使った型安全な暗号化_関数型まつり2026
Avatar for _fhhmm _fhhmm
0
150
Claude Team Plan導入・ガイド
Avatar for tk3fftk tk3fftk
0
240
yield再入門 #phpcon
Avatar for hideki kinjyo o0h
PRO
0
740

Featured

See All Featured
Hiding What from Whom? A Critical Review of the History of Programming languages for Music
Avatar for Tomoya Matsuura tomoyanonymous
3
1k
From Legacy to Launchpad: Building Startup-Ready Communities
Avatar for Dug Song dugsong
0
270
YesSQL, Process and Tooling at Scale
Avatar for Rocio Delgado rocio
174
15k
Darren the Foodie - Storyboard
Avatar for Kevinho.art khoart
PRO
3
3.5k
Building Applications with DynamoDB
Avatar for Matt Wood mza
96
7.1k
ピンチをチャンスに：未来をつくるプロダクトロードマップ #pmconf2020
Avatar for Aki / @LoveIdahoBurger aki_iinuma
128
56k
AI: The stuff that nobody shows you
Avatar for John Nunemaker jnunemaker
PRO
9
840
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
31
3.3k
Ruling the World: When Life Gets Gamed
Avatar for Sebastian Deterding codingconduct
0
290
The SEO identity crisis: Don't let AI make you average
Avatar for Varn varn
0
520
Un-Boring Meetings
Avatar for Sebastian Deterding codingconduct
0
350
Google's AI Overviews - The New Search
Avatar for Barry Adams badams
0
1.1k

Transcript

  1. HTTPS:// and you… Tim Nash [UK] https://timnash.co.uk

  2. Tim Nash - WordPress Platform Lead & Developer Advocate at

  3. HTTPS

  4. HTTPS (HTTP over SSL)

  5. SSL (Secure Socket Layer)

  6. It’s all a LIE!!!!!

  7. HTTP over TLS1.2

  8. HTTPS (HTTP (secure)Encrypted)

  9. None

  10. Browser Server Request Packet Response Packet

  11. Browser Server Request Packet Response Packet Client ‘Hello’ Server ‘Hello’

    Cryptographic information Server Certificate Client Key Exchange Send’s Key info signed with servers key Sends Client Certificate Client ‘finished’ Server ‘finished’
  12. None

  13. Pitfalls

  14. Force everything…

  15. search replace http:// https://

  16. Better still 301 all HTTP requests as well

  17. Mixed Content

  18. None

  19. If it loads over HTTP it needs to load over

    HTTPS

  20. Third Party Scripts: Google Analytics, Forms

  21. DEVELOPERS! Don’t hard code URLs

  22. Certificate issues aka Red Screen of death

  23. https://www.ssllabs.com/ssltest/

  24. HTTP/2

  25. Browser Server Requests Packets Response Packets Client ‘Hello’ Server ‘Hello’

    Client Key Exchange Client ‘finished’ Server ‘finished’

  26. Tim Nash timnash.co.uk @tnash 34SP.com [email protected]