Subscribe to receive notifications of new posts:

Cloudflare Crypto Meetup #4: November 22

2016-11-02

2 min read

Come join us on Cloudflare HQ in San Francisco on Tuesday, November 22 for another cryptography meetup. We had such a great time at the last one, we decided to host another.

We’ll start the evening at 6:00p.m. with time for networking, followed up with short talks by leading experts starting at 6:30p.m. Pizza and beer are provided! RSVP here.

Here are the confirmed speakers:

Emily Stark

Emily Stark is a software engineer on the Google Chrome security team, where she focuses on making TLS more usable and secure. She spends lots of time analyzing field data about the HTTPS ecosystem and improving web platform features like Referrer Policy and Content Security Policy that help developers migrate their sites to HTTPS. She has also worked on the DevTools security panel and the browser plumbing that supports other security UI surfaces like the omnibox. (That green lock icon is more complicated than you'd think!)

Previously, she was a core developer at Meteor Development Group, where she worked on web framework security and internal infrastructure, and a graduate student researching client-side cryptography in web browsers. Emily has a master's degree from MIT and a bachelor's degree from Stanford, both in computer science.

How hard is it to send an HTTPS request?

In theory, sending an HTTP request over TLS is a simple matter of performing a handshake and validating a certificate chain. In practice, however, client, server, and network misconfigurations get in the way, causing hundreds of millions of HTTPS errors in Chrome every month. This talk will describe projects and results from the Chrome security team's work to understand these errors, fix as many of them as possible, and prevent new problems from cropping up.

Jon McLachlan

Jon McLachlan leads security engineering at Symphony. Prior to joining Symphony he was a senior security engineer at Apple where he worked on foundational protection mechanisms for iTunes as well as digital rights management. Jon has 8 patents to his name, all in the area of security. He is a passionate biker and husband.

Symphony has taken a unique approach to delivering enterprise-grade secure communications. During the presentation you will learn how most cloud services today require an act of faith on behalf of the customer who must ‘trust’ the service provider. Symphony’s approach means that Symphony employees are unable to see customer data – it’s protected using keys controlled by customer-owned infrastructure. Symphony sets a new benchmark for safe and secure cloud communications.

An Introduction to Symphony Security

An Introduction to Symphony Security will explore how we selected our threat model, some of the technical challenges that the threat model presented, and how we overcame these technical challenges to deliver a secure, seamless communication platform.

Special Guest

Eric Rescorla from Mozilla will be speaking about TLS 1.3

Videos from last time

We had a great turnout last time. Here are some videos of the talks:

Brian Warner: Magic Wormhole.

Zakir Durumeric: Real World Email Delivery Security.

Cloudflare's connectivity cloud protects entire corporate networks, helps customers build Internet-scale applications efficiently, accelerates any website or Internet application, wards off DDoS attacks, keeps hackers at bay, and can help you on your journey to Zero Trust.

Visit 1.1.1.1 from any device to get started with our free app that makes your Internet faster and safer.

To learn more about our mission to help build a better Internet, start here. If you're looking for a new career direction, check out our open positions.
EventsTLS 1.3TLSSecurityMeetUpCloudflare MeetupsCryptography

Follow on X

Nick Sullivan|@grittygrease
Cloudflare|@cloudflare

Related posts

October 08, 2024 1:00 PM

Cloudflare acquires Kivera to add simple, preventive cloud security to Cloudflare One

The acquisition and integration of Kivera broadens the scope of Cloudflare’s SASE platform beyond just apps, incorporating increased cloud security through proactive configuration management of cloud services. ...

October 06, 2024 11:00 PM

Enhance your website's security with Cloudflare’s free security.txt generator

Introducing Cloudflare’s free security.txt generator, empowering all users to easily create and manage their security.txt files. This feature enhances vulnerability disclosure processes, aligns with industry standards, and is integrated into the dashboard for seamless access. Strengthen your website's security today!...

October 02, 2024 1:00 PM

How Cloudflare auto-mitigated world record 3.8 Tbps DDoS attack

Over the past couple of weeks, Cloudflare's DDoS protection systems have automatically and successfully mitigated multiple hyper-volumetric L3/4 DDoS attacks exceeding 3 billion packets per second (Bpps). Our systems also automatically mitigated multiple attacks exceeding 3 terabits per second (Tbps), with the largest ones exceeding 3.65 Tbps. The scale of these attacks is unprecedented....