Look Who it Was Random video

Making SSL Warnings Work - Adrienne Porter Felt - OWASP AppSec California 2015

352 views · Published 30 April 2015 · 51:30 · Indexed 4 November 2026

Channel: OWASP Foundation · 2015 · Science & Technology

Watch on YouTube

AppSec California 2015 - Day 1, Track 3, Slot 5

Title

Making SSL Warnings Work

Abstract

HTTPS is an important tool for protecting the privacy of online communication. However, SSL warnings are a weak point in this system. Often, the browser can’t tell whether a certificate validation error is indicative of an attack or a simple server misconfiguration. The user is asked to decide what to do, even though s/he probably isn’t equipped to make that decision. My team is trying to make SSL warnings more effective (and helpful) in Chrome. In this talk, I’ll describe how we’re trying to automatically identify and resolve common sources of false positive warnings. I’ll also discuss how we redesigned SSL warnings to be more understandable by end users.

Bio

Adrienne Porter Felt is a software engineer on the Google Chrome security team. Her mission is to make it easy to stay safe on the web. Adrienne leads Chrome’s usable security efforts, including: making security warnings understandable, improving warning accuracy, and encouraging developers to use HTTPS correctly. Previously, she was a research scientist on Google’s security research team.

-

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project

More from this channel