Modern TLS in the Enterprise - BSides Winnipeg 2015

The state of TLS/SSL is changing at a rapid pace over the last year and its use and implementation is being dragged around by the ear by the browser vendors. What are the consequences of implementing modern TLS in complicated and regulated environments? How has TLS been used in these environments to date? How do we design services which implement all of the benefits of TLS but also limit their impact to infrastructure and regulatory costs? Are TLS and PKI strategies identical and aligned across application stacks and portfolios? This talk will give examples of the ways TLS has been used in Enterprise infrastructure over the years and will discuss possible solutions and strategies to meld the seemingly incompatible requirements of regulatory compliance and end-to-end security.