Emerging Web Security Standards
summary
Shows that HTTPS deployment is already faster than ever with over half of page loads on secure pages and huge uptake after Let's Encrypt launches, explains concrete HTTP/2 gains like multiplexing, server push and header compression plus Brotli shrinking pages ~30%, gives precise operational steps: add a DNS CAA record to restrict which CAs can issue, log certificates to public Certificate Transparency (browser enforcement April), and flip cookie flags using SameSite and cookie prefixes to neutralize CSRF and catch misconfigurations.
AI-written summary · about
chapters (6)
- 0:00Start
- 14:51Certificate Authority Authorisation
- 17:03Certificate Transparency
- 23:39Same-Site Cookies
- 26:27Cookie Prefixes
- 28:09The Perfect Cookie
related talks
22mEncrypt the Web For $0
58m25 Years of SSL - Secure(ish) Sockets Layer
40mWhirlwind tour through the HTTP2 spec
47mHTTP 2.0 from the Developer's Viewpoint
37mHTTPS Is Better than Ever Before. Now Its Your Turn.
01h 00mHTTP/2 - The future of the web today
30mWhirlwind Tour through the HTTP2 Spec
19mHTTP/2 is here, now let's make it easy