Hynek Schlawack: The Sorry State of SSL - PyCon 2014

Why watch

A 2014 PyCon talk examining critical flaws in SSL/TLS implementations that make "secure" websites vulnerable. Schlawack demonstrates how certificate validation can be bypassed, explains HTTPS stripping attacks, and discusses CA trust model weaknesses. For Python developers building web applications who want to understand real-world SSL/TLS security pitfalls and how to properly configure the Python ssl module.