Protecting data in the browser: the first line of defence
Dan Draper, CEO & Founder CipherStash
We’ve never relied more on web and mobile technologies than we do now. Whether for essential services or a cheeky late night burger delivery (ok, maybe that’s essential, too!), you’d be hard-pressed to go more than a day without relying on some HTML, JavaScript or a flex-box just to get by in the world.
So as the first entry-point to the online world, how secure is the browser and the code we write for it? In this talk I’ll recap some of the basics of security in the browser and show how modern encryption can shed new light on old problems.
Browsers Are Magical Creatures
Stephen Rees-Carter, Friendly Hacker Valorin Security
Web browsers are magical creatures that include A LOT of features. Buried within this multitude, you’ll find a number of security tools waiting for you, kinda like the chatty stranger in the bar, trying to flog off their wares. Although unlike that stranger, the browser lets you use them all for free, and you can use as many as you want!
You might have heard of Content Security Policies (CSP), and HTTP Strict Transport Security (HSTS), and Same-Site Cookies, or seen headers like X-Content-Type-Options and X-Frame-Options in your web server configuration. What about the confusingly named CORP, COOP, CORS and COEP, or Trusted Types, and a Permissions-Policy?
The point is, like secrets in a cave, there are a lot of security tools hidden in your browser. You won’t want or need all of them on every site, but if you’re aware of what's available, you’ll know what you can and should enable, to add that extra layer of security to your sites. I’m just not sure they’ll help you slay that dragon though...
The State of front end performance
Ben Schwarz, Founder, CEO Calibre
Since the arrival of Core Web Vitals, understanding and optimizing front end performance has never been more critical.
So Ben Schwarz whose life revolves around performance will shed light on the current state of front end performance, focusing on central metrics and the latest developments in performance measurement and enhancement, particularly Core Web Vitals (CWV) with an emphasis on Interaction to Next Paint (INP) as the latest metric to watch.
Drawing on extensive data, Ben will identify common pitfalls in performance optimization efforts and provide actionable insights for teams to track, avoid, or rectify these issues, ensuring a seamless user experience.