[B! https] InoHiroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

InoHiro id:InoHiro

httpsã«é–¢ã™ã‚‹InoHiroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

å®Œå…¨HTTPSåŒ–ã®ãƒ¡ãƒªãƒƒãƒˆã¨æ¥µæ„ã‚’å¤§è¦æ¨¡Webã‚µãƒ¼ãƒ“ã‚¹â€•â€•ãƒ”ã‚¯ã‚·ãƒ–ã€ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ã€ãƒ¤ãƒ•ãƒ¼ã®äº‹ä¾‹ã‹ã‚‰æŽ¢ã‚‹
å®Œå…¨HTTPSåŒ–ã®ãƒ¡ãƒªãƒƒãƒˆã¨æ¥µæ„ã‚’å¤§è¦æ¨¡Webã‚µãƒ¼ãƒ“ã‚¹â€•â€•ãƒ”ã‚¯ã‚·ãƒ–ã€ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ã€ãƒ¤ãƒ•ãƒ¼ã®äº‹ä¾‹ã‹ã‚‰æŽ¢ã‚‹ï¼šå¤§è¦æ¨¡HTTPSå°Žå…¥Night 2017å¹´6æœˆ21æ—¥ã€ãƒ”ã‚¯ã‚·ãƒ–ã®ã‚ªãƒ•ã‚£ã‚¹ã§ã€åŒç¤¾ä¸»å‚¬ã®ã€Œå¤§è¦æ¨¡HTTPSå°Žå…¥Nightã€ãŒé–‹å‚¬ã•ã‚ŒãŸã€‚å¤§è¦æ¨¡Webã‚µãƒ¼ãƒ“ã‚¹ã§å®Œå…¨HTTPSåŒ–ã‚’è¡Œã†ã«å½“ãŸã£ã¦ã®æŠ€è¡“çš„ã€ãŠã‚ˆã³éžæŠ€è¡“çš„ãªæ‚©ã¿ã‚„æˆæžœã‚’ãƒ†ãƒ¼ãƒžã«ã€ãƒ¤ãƒ•ãƒ¼ã€ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ã€ãƒ”ã‚¯ã‚·ãƒ–ã®3ç¤¾ãŒã€ãã‚Œãžã‚Œã®äº‹ä¾‹ã«ã¤ã„ã¦èªžã‚Šåˆã£ãŸã€‚ 2017å¹´6æœˆ21æ—¥ã€ãƒ”ã‚¯ã‚·ãƒ–ã®ã‚ªãƒ•ã‚£ã‚¹ã§ã€åŒç¤¾ä¸»å‚¬ã®ã€Œå¤§è¦æ¨¡HTTPSå°Žå…¥Nightã€ãŒé–‹å‚¬ã•ã‚ŒãŸã€‚å¤§è¦æ¨¡Webã‚µãƒ¼ãƒ“ã‚¹ã§å®Œå…¨HTTPSåŒ–ã‚’è¡Œã†ã«å½“ãŸã£ã¦ã®æŠ€è¡“çš„ã€ãŠã‚ˆã³éžæŠ€è¡“çš„ãªæ‚©ã¿ã‚„æˆæžœã‚’ãƒ†ãƒ¼ãƒžã«ã€ãƒ¤ãƒ•ãƒ¼ã€ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ã€ãƒ”ã‚¯ã‚·ãƒ–ã®3ç¤¾ãŒã€ãã‚Œãžã‚Œã®äº‹ä¾‹ã«ã¤ã„ã¦èªžã‚Šåˆã†ã‚¤ãƒ™ãƒ³ãƒˆã¨ãªã£ãŸã€‚ æœ¬ç¨¿ã§ã¯ã€å„è¬›æ¼”ã®è¦ç‚¹ã‚’ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã§ç´¹ä»‹ã™ã‚‹ã€‚ pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹ã¾ã§ã®é“
InoHiro 2017/07/14
https
ãƒªãƒ³ã‚¯
Web ã‚µãƒ¼ãƒ“ã‚¹ã®å®Œå…¨ HTTPS åŒ– - ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰é–‹ç™ºè€…ãƒ–ãƒã‚°
ã‚¤ãƒ³ãƒ•ãƒ©ã‚¹ãƒˆãƒ©ã‚¯ãƒãƒ£ãƒ¼éƒ¨é•·ã®æ˜Ÿ (@kani_b) ã§ã™ã€‚ 2017å¹´1æœˆ5æ—¥ã‚’ã‚‚ã£ã¦ã€ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ ã«ãŠã‘ã‚‹å…¨ãƒšãƒ¼ã‚¸ã§ HTTPS ãŒä½¿ã‚ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ å®Œå…¨ HTTPS åŒ–ã‚’ã™ã‚‹ã«ã‚ãŸã‚Šã€ãã®ç†ç”±ã‚„å…·ä½“çš„ãªé€²ã‚æ–¹ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ ä»¥å‰ SRE Tech Talks #2 ã«ã¦ä¸€éƒ¨ç™ºè¡¨ã—ãŸå†…å®¹ã‚‚å«ã¿ã¾ã™ã®ã§ã€ã”èˆˆå‘³ã®ã‚ã‚‹æ–¹ã¯ã‚ã‚ã›ã¦ã‚¹ãƒ©ã‚¤ãƒ‰ã‚‚ã”è¦§ãã ã•ã„ã€‚ å®Œå…¨ HTTPS åŒ–ã«è¸ã¿åˆ‡ã£ãŸç†ç”± ä»¥å‰ã®ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ã¯ã€ãƒã‚°ã‚¤ãƒ³ã‚„ç™»éŒ²æƒ…å ±ã®å‚ç…§ãªã©ã€ã„ã‚ã‚†ã‚‹å€‹äººæƒ…å ±ã‚„èªè¨¼æƒ…å ±ã‚’æ‰±ã†ç®‡æ‰€ã®ã¿ã« HTTPS ãŒä½¿ã‚ã‚Œã¦ã„ã¾ã—ãŸã€‚ ã“ã®ã‚ˆã†ã«ã€Œå¿…è¦ãªç®‡æ‰€ã«ã®ã¿ HTTPS ã‚’ä½¿ã†ã€æ§‹æˆã¯ã€ã‚ã‚‹ç¨‹åº¦æ´å²ã®ã‚ã‚‹ Web ã‚µãƒ¼ãƒ“ã‚¹ã«ãŠã„ã¦ã‚ˆãä½¿ã‚ã‚Œã¦ã„ã‚‹æ§‹æˆã§ã™ã€‚ ã“ã®çŠ¶æ…‹ã‹ã‚‰ã€å®Œå…¨ HTTPS åŒ–ã«è¸ã¿åˆ‡ã£ãŸç†ç”±ã‚’èª¬æ˜Žã—ã¾ã™ã€‚ ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã‚ˆã‚Šã‚»ã‚ãƒ¥ã‚¢ã«ã™ã‚‹ãŸã‚ HTTPS ã®åˆ©ç”¨ã‚’è€ƒãˆã‚‹ã«
InoHiro 2017/04/20
cookpad

https
ãƒªãƒ³ã‚¯
cookpad.com å…¨ HTTPS åŒ–ã®è»Œè·¡
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹…å½“è€…ã‹ã‚‰è¦‹ãŸ re:Invent ã¨ AWS Security Hub / Impression of re:Invent and AWS Security Hub
InoHiro 2017/01/30
https

cookpad
ãƒªãƒ³ã‚¯
Google Public DNS over HTTPS ã‚’è©¦ã™ | IIJ Engineers Blog
ã€2018/11/16 è¿½è¨˜ã€‘ æœ¬è¨˜äº‹ã¯ã€2016 å¹´ 4 æœˆã« Google Public DNS ã‚µãƒ¼ãƒã«å®Ÿè£…ã•ã‚ŒãŸã€å®Ÿé¨“çš„ãª DNS over HTTPS ãƒ—ãƒãƒˆã‚³ãƒ«ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ã¾ã™ã€‚DNS over HTTPS ãƒ—ãƒãƒˆã‚³ãƒ«ã¯ãã®å¾Œ IETF ã® doh ãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ã«ã¦æ¨™æº–åŒ–ãŒé€²ã‚ã‚‰ã‚Œã€2å¹´åŠå¾Œã® 2018 å¹´ 10 æœˆã« RFC8484 ã¨ã—ã¦å‡ºç‰ˆã•ã‚Œã¾ã—ãŸã€‚æœ¬è¨˜äº‹ã§ç´¹ä»‹ã—ãŸãƒ—ãƒãƒˆã‚³ãƒ«ã¯ RFC8484 ã«è¦å®šã•ã‚ŒãŸãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã¯ã„ãã¤ã‚‚ã®ç‚¹ã§ç•°ãªã£ã¦ã„ã‚‹ã“ã¨ã«ã”æ³¨æ„ãã ã•ã„ã€‚ Google Inc. ãŒå…¬é–‹ DNS ã‚µãƒ¼ãƒã‚’é‹å–¶ã—ã¦ã„ã‚‹ã“ã¨ã¯ã”å˜çŸ¥ã§ã—ã‚‡ã†ã‹? Google Public DNS ã¨å‘¼ã°ã‚Œã‚‹ã“ã®å…¬é–‹ DNS ã‚µãƒ¼ãƒã¯ã€â€8.8.8.8â€³ ã¨ã„ã†ç‰¹å¾´çš„ãª IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã§å…¨ä¸–ç•Œã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ã«å¯¾ã—ã¦ç„¡æ–™ã® DNS ã‚µãƒ¼ãƒ(ãƒ•ãƒ«ãƒ¬ã‚¾ãƒ«ãƒ)ã‚’æä¾›ã—
InoHiro 2016/08/16
https

dns
ãƒªãƒ³ã‚¯
HTTPS ã‚’ãƒ©ãƒ³ã‚ãƒ³ã‚° ã‚·ã‚°ãƒŠãƒ«ã«ä½¿ç”¨ã—ã¾ã™
+1 ãƒœã‚¿ãƒ³ 2 AMP 11 API 3 App Indexing 8 CAPTCHA 1 Chrome 2 First Click Free 1 Google ã‚¢ã‚·ã‚¹ã‚¿ãƒ³ãƒˆ 1 Google ãƒ‹ãƒ¥ãƒ¼ã‚¹ 1 Google ãƒ—ãƒ¬ã‚¤ã‚¹ 2 Javascript 1 Lighthouse 4 Merchant Center 8 NoHacked 4 PageSpeed Insights 1 reCAPTCHA v3 1 Search Console 101 speed 1 ã‚¤ãƒ™ãƒ³ãƒˆ 25 ã‚¦ã‚§ãƒ–ãƒžã‚¹ã‚¿ãƒ¼ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ 57 ã‚¦ã‚§ãƒ–ãƒžã‚¹ã‚¿ãƒ¼ã‚¯ã‚¤ã‚º 2 ã‚¦ã‚§ãƒ–ãƒžã‚¹ã‚¿ãƒ¼ãƒ„ãƒ¼ãƒ« 83 ã‚¦ã‚§ãƒ–ãƒžã‚¹ã‚¿ãƒ¼ãƒ•ã‚©ãƒ¼ãƒ©ãƒ 10 ã‚ªãƒ¼ãƒˆã‚³ãƒ³ãƒ—ãƒªãƒ¼ãƒˆ 1 ãŠçŸ¥ã‚‰ã› 69 ã‚¯ãƒãƒ¼ãƒ«ã¨ã‚¤ãƒ³ãƒ‡ãƒƒã‚¯ã‚¹ 75 ã‚µã‚¤ãƒˆã‚¯ãƒªãƒ‹ãƒƒã‚¯ 4 ã‚µã‚¤ãƒˆãƒžãƒƒãƒ— 15 ã—ã”ã¨æ¤œç´¢ 1 ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ 11 ã‚»ãƒ¼ãƒ•ãƒ–ãƒ©ã‚¦ã‚¸ãƒ³ã‚° 5 ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ 1
InoHiro 2014/08/08
google

https
ãƒªãƒ³ã‚¯
Railsã§SSLã‚’åˆ©ç”¨ã™ã‚‹ã¨ãã®ã‚ã‚Œã“ã‚Œ [ä¿ºã®å‚™å¿˜éŒ²]
Google+ãƒœã‚¿ãƒ³ ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ æ›´æ–°æ—¥æ™‚: 2011å¹´12æœˆ19æ—¥ï¼ˆæœˆï¼‰ ä½œæˆæ—¥æ™‚: 2011å¹´12æœˆ19æ—¥ï¼ˆæœˆï¼‰ å‰ã®è¨˜äº‹ / æ¬¡ã®è¨˜äº‹ å¾Œã§æ··ä¹±ã—ãã†ãªã®ã§ã¾ã¨ã‚ã€‚ RailsãŒ3.1ä»¥ä¸Šã§ã‹ã¤ä¾‹å¤–ãªãhttpsã«ã™ã‚‹ãªã‚‰ ãƒ»Rails3 ã§ HTTPS ã‚’ä½¿ã†ã«ã¯ http://d.hatena.ne.jp/willnet/20110524/1306212796 config/environments/production.rb ã® config.force_ssl = true ã®ã‚³ãƒ¡ãƒ³ãƒˆã‚’å¤–ã™ã€ã“ã‚Œã ã‘ã§æ©Ÿèƒ½ã™ã‚‹ã€‚ ãƒšãƒ¼ã‚¸ã”ã¨ã«httpã¨httpsã‚’ä½¿ã„åˆ†ã‘ã‚‹ãªã‚‰ï¼ˆRails3.1æœªæº€ã§ã‚‚ãŸã¶ã‚“å¤§ä¸ˆå¤«ï¼‰ ãƒ»Rails ã§SSLã‚’ä½¿ç”¨ã™ã‚‹ http://matatabi-on-rails.blogspot.jp/2010/03/using-ssl-with-rail
InoHiro 2013/12/14
Rails

SSL

https
ãƒªãƒ³ã‚¯
http,https æ··åœ¨ç’°å¢ƒã§ãƒ‡ãƒãƒƒã‚°ã—ã¤ã¤é–‹ç™ºã—ãŸã„ | ã‚ªãƒ•ã‚£ã‚¹ã‚¦ãƒ¼ãƒ
ãƒ„ã‚¤ãƒ¼ãƒˆ background å”çªã§ã™ãŒã€ rails server ã‚³ãƒžãƒ³ãƒ‰ã¯ä¾¿åˆ©ã§ã™ã€‚ãƒ‡ãƒãƒƒã‚°ç”¨ã®ãƒ–ãƒ¬ãƒ¼ã‚¯ãƒã‚¤ãƒ³ãƒˆã‚’åŸ‹ã‚è¾¼ã‚“ã§ãŠã„ã¦ã€ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ãã£ã‹ã‘ã«è¦æ‰€ã§ã‚¹ãƒ†ãƒƒãƒ—å®Ÿè¡Œãªã‚“ã‹ã‚‚ã§ãã‚‹ã‚ã‘ã§ã€é–‹ç™ºä¸ã¯ rails server ã‚³ãƒžãƒ³ãƒ‰ã§é–‹ç™ºã‚µãƒ¼ãƒã‚’èµ·å‹•ã•ã›ã£ã±ãªã—ã§ã£ã¦ã„ã†äººã‚‚å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ ä¸€æ–¹ã€ Rails ã§è‰²ã€…é–‹ç™ºã—ã¦ã„ã‚‹ã¨ã€http ã§ã‚‚ https ã§ã‚‚åŒæ™‚ã«å—ã‘ä»˜ã‘ãŸã„ã€ã‚ã‚‹ã„ã¯ç®¡ç†ç”»é¢ã ã‘ https ã§å—ã‘ä»˜ã‘ãŸã„ã¨ã„ã£ãŸã‚±ãƒ¼ã‚¹ã‚‚å¤šæ•°å˜åœ¨ã—ã¾ã™ã€‚ã—ã‹ã—ã€é–‹ç™ºç’°å¢ƒã§ rails server ã‚³ãƒžãƒ³ãƒ‰ã«ã‚ˆã‚‹ã‚µãƒ¼ãƒèµ·å‹•ã§ã¯ http://localhost:3000 ã¨ https://localhost:3000 ã®ä¸¡æ–¹åŒæ™‚å—ä»˜ã¯ä¸å¯èƒ½ã§ã™ã€‚ ã˜ã‚ƒã‚ã©ã†ã™ã‚‹ã®ï¼Ÿæœ¬ç•ªç’°å¢ƒã¨åŒã˜ã‚ˆã†ã« Web ã‚µãƒ¼ãƒã‚’æº–å‚™ã—ã¦ rails server ã‚³
InoHiro 2013/12/14
Rails

https

SSL
ãƒªãƒ³ã‚¯
HTTPSé€šä¿¡æ™‚ã®URLã¯æš—å·åŒ–ã•ã‚Œã‚‹ã‹ - ã†ã¾ã„ã¼ã†ã¶ã‚ã
2018/06 è¿½è¨˜ å¤ã„è¨˜äº‹ã§ã™ãŒã¡ã‚‡ã“ã¡ã‚‡ã“ã‚¢ã‚¯ã‚»ã‚¹ã„ãŸã ã„ã¦ã„ã‚‹ã®ã§æ›´æ–°ã€‚ æœ€è¿‘ã¯å¸¸æ™‚SSLã€IPv4æž¯æ¸‡ã€CDNå°Žå…¥ãªã©ã®ç†ç”±ã§SNIãŒè‰¯ãä½¿ã‚ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ãã¦ã„ã¾ã™ãŒ ã“ã®å ´åˆã€ãƒ›ã‚¹ãƒˆå(URLå…¨ä½“ã§ã¯ãªã„)ã¯å¹³æ–‡ã§é€ä¿¡ã•ã‚Œã¾ã™ã€‚ client å´ã§ã‚ãƒ£ãƒ—ãƒãƒ£ã—ãŸãƒ‘ã‚±ãƒƒãƒˆ curl -k https://sni.example.com/hogehoge $ sudo ngrep -d en3 -q -W byline port 443 and host 192.0.2.1 interface: en3 (192.168.6.0/255.255.255.0) filter: (ip or ip6) and ( port 443 and host 192.0.2.1 ) T 192.168.6.108:55460 -> 192.0.2.1:443 [AP] ...........
InoHiro 2012/05/08
https

uri
ãƒªãƒ³ã‚¯
apacheã«è‡ªå·±ç½²åè¨¼æ˜Žæ›¸ã‚’å…¥ã‚Œã¦ã€Railsã§httpsã‚’ä½¿ã†ã€‚ - ema25ã®æ—¥è¨˜
Passengerä¸Šã§å‹•ãå‰æã¨ã—ã¾ã™ã€‚ Passengerã®å…¥ã‚Œæ–¹ã¯ http://d.hatena.ne.jp/conceal-rs/20080730/1217422869 ã¨ã‹ãŸã¶ã‚“å‚è€ƒã«ãªã‚‹ã¨æ€ã„ã¾ã™ã€‚ åƒ•ã®passengerçµ¡ã¿ã®confã®æ›¸ãæ–¹ã‚„ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªé…ç½®ã¯ä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã§ã™ã€‚ $ cat /etc/apache2/conf.d/passenger.conf LoadModule passenger_module /usr/local/lib/ruby/gems/1.9.1/gems/passenger-3.0.7/ext/apache2/mod_passenger.so PassengerRoot /usr/local/lib/ruby/gems/1.9.1/gems/passenger-3.0.7 PassengerRuby /usr/local/bin/ruby
InoHiro 2011/07/23
Rails

https

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
1