Главная
Study mode:
on
1
Intro
2
Welcome
3
About Dirk
4
Motivation
5
What if
6
HTTPS
7
HTTP
8
Why HTTPS is nonsense
9
Packet capture
10
Clearing
11
OCSP
12
Fingerprinting
13
TLS Exceptions
14
TLS fingerprinting
15
Client Hello
16
Client Time Off
17
Packets
18
Application Data
19
Website fingerprinting
20
trackers
21
security
22
Android
23
Conclusion
24
Privacy
Description:
Explore the limitations and misconceptions surrounding HTTPS in this 46-minute conference talk from AppSecEU 2016 in Rome. Delve into topics such as packet capture, OCSP, TLS exceptions, fingerprinting techniques, and privacy concerns related to HTTPS implementation. Gain insights into why HTTPS is not equivalent to a VPN and understand its implications for web security and user privacy across various platforms, including Android.

Calm Down: HTTPS Is Not a VPN

OWASP Foundation
Add to list
0:00 / 0:00