Spearing Superfish with HPKP w/ Stuart Larsen
Channel: HACK NYC
Date: 23/06/2015

Stuart Larsen - Spearing Superfish with HPKP - NYC Cyber Security meetup, MongoDB NYC on May 20 2015.

ABSTRACT
HTTP Public Key Pinning (HPKP) is a new HTTP header that tells web clients to associate a specific cryptographic public key with a web server to prevent MITM attacks with forged certificates. This talk will give an introduction to HPKP, discuss why it’s useful, and how it can be used to stop Superfish and other forged certificate SSL/TLS attacks.

SLIDES
https://c0nrad.io/hpkp.pdf­

SPEAKER
Stuart Larsen - http://c0nrad.io/

EVENT PAGE
http://www.meetup.com/OWASP-NYC/events/219961013/

EVENT ORGANIZER
OWASP NYC Chapter - https://www.owasp.org/index.php/NYC

VIDEO SPONSOR:
Internet Society NY Chapter - http://isoc-ny.org

ABOUT OWASP:
The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks.
https://www.owasp.org/