ImperialViolet - Public key pinning
Starting with Chrome 13, we'll have HTTPS pins for most Google properties. This means that certificate chains for, say, https://www.google.com, must include a whitelisted public key. It's a fatal error otherwise. Credit goes to my colleague, Chris Evans, for much of this. The whitelisted public keys for Google currently include Verisign, Google Internet Authority, Equifax and GeoTrust. Thus Chrome
Androidæºå¸¯ã§ãƒ–ラウザã‹ã‚‰ç·¯åº¦çµŒåº¦æƒ…å ±ã‚’å–å¾— - PHP,MySQL,Flex,JSãªæ—¥ã€…＋イラストã¨ã‹
Androidæºå¸¯ã§ãƒ–ラウザã‹ã‚‰ç·¯åº¦çµŒåº¦æƒ…å ±ã‚’å–å¾—ã™ã‚‹æ–¹æ³•ã§ã™ã€‚ 以å‰ç´¹ä»‹ã—ãŸiPhone3.0ã®ã¨ãã¨çµæ§‹ä¼¼ã¦ã„ã‚‹ã®ã§ç°¡å˜ã«ã§ãã¾ã™ã€‚ ページã¯ã“ã¡ã‚‰ http://moeten.info/flex/20090713_androidGPS/test.php Androidã‹iPhoneã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ãï¼ ã“ã‚“ãªæ„Ÿã˜ã«ãƒ–ラウザã®JavaScriptã‹ã‚‰ç°¡å˜ã«å–å¾—ã§ãã¾ã™ã‚ˆãƒ¼ã€‚ ç°¡å˜ãªèª¬æ˜Ž Androidã§ã¯gearsを使用ã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦GPSæƒ…å ±ãŒæ‰±ãˆã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ã¾ãšã¯ã€ gears_init.js をインクルード <script type="text/javascript" src="gears_init.js"></script> javascript部分 //緯度経度å–å¾— function getGPS(){ var gps = google.gears.factory.
Transport Layer Security (TLS) False Start
Transport Layer Security (TLS) False Start draft-bmoeller-tls-falsestart-00 Abstract This document specifies an optional behavior of TLS implementations, dubbed False Start. It affects only protocol timing, not on-the-wire protocol data, and can be implemented unilaterally. The TLS False Start feature leads to a latency reduction of one round trip for certain handshakes. Status of this Memo This I
WebSocketã®ç¾çŠ¶ã¨æŠ€è¡“的課題
WebSocketã®ç¾çŠ¶ã¨æŠ€è¡“的課題：WebSocketã§ç›®æŒ‡ã›ï¼ リアルタイムWeb（2）（1/2 ページ） 今回ã¯WebSocketã‚’å–ã‚Šå·»ã技術的課題やã€å®Ÿè£…状æ³ã«ã¤ã„ã¦ã”紹介ã—ã¾ã™ã€‚ã¾ãŸç§ãŸã¡ãŒé–‹ç™ºã—ãŸã‚µãƒ¼ãƒ“ス「Pusherã€ã«ã¤ã„ã¦ã‚‚å–り上ã’ã¾ã™ã€‚ WebSocketã«é–¢é€£ã—ãŸæŠ€è¡“的課題 å‰å›žã®WebSocketã®ç´¹ä»‹ã‚’èªã‚“ã§ãã ã•ã£ãŸèªè€…ã®ã¿ãªã•ã‚“ã¯WebSocketを試ã—ã¦ã¿ãŸãã¦ãŸã¾ã‚‰ãªã„ã®ã§ã¯ãªã„ã§ã—ょã†ã‹ã€‚ã§ã‚‚å°‘ã—å¾…ã£ã¦ãã ã•ã„。皆ã•ã‚“ã‚’è„…ã‹ã™è¨³ã§ã¯ã‚ã‚Šã¾ã›ã‚“ãŒã€ä»¥ä¸‹ã®ç‚¹ã«ã¤ã„ã¦ã‚‚考ãˆãªã‘ã‚Œã°ã„ã‘ã¾ã›ã‚“。 変化ã—続ã‘るドラフト IETFã®ãƒ‰ãƒ©ãƒ•ãƒˆã‚’見ã¦ã¿ã‚‹ã¨ã€æœ€åˆã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ï¼ˆ00）ã¯2009å¹´ã®1月ã«ç–定ã•ã‚ŒãŸã®ãŒåˆ†ã‹ã‚Šã¾ã™ã€‚ChromiumãŒæœ€åˆã«WebSocketã®å®Ÿè£…を発表ã—ãŸã“ã‚ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯66ã®è¾ºã‚Šã§ã™ã€‚ ãã‚Œã‹ã‚‰ã—ã°ã‚‰ãã®é–“ã¯ãƒžã‚¤ãƒŠãƒ¼ãƒã‚§ãƒ³ã‚¸ã°ã‹ã‚Šã ã£ãŸ
OAuth 2.0周りã®ä»•æ§˜ãƒ‰ã‚ュメントã«ã¤ã„㦠- r-weblife
æ°—ã«ãªã£ã¦ã‚‹æ–¹ã€…ã€æœ€æ–°ã®Specã¯ã“ã®è¾ºã§ã™ã‚ˆã€‚http://tools.ietf.org/id/oauth http://tools.ietf.org/html/draft-ietf-oauth-v2 : The OAuth 2.0 Protocol ã“ã„ã¤ã®èª¬æ˜Žã¯ã‚„ã‚ã¨ãã¾ã™ã€‚ http://tools.ietf.org/html/draft-recordon-oauth-v2-device : OAuth 2.0 Device Profile OAuth Core 1.0a ã§å®šç¾©ã•ã‚Œã¦ã„るフãƒãƒ¼ã¯webã¨clientã®ï¼’ã¤ãªã‚ã‘ã§ã™ã€‚ 1.0aã®Clientã®ãƒ•ãƒãƒ¼ãªã‚“ã¦æ‰‹å‹•ã®Token入力ãªã‚“ã‹ãŒå¿…è¦ãªã®ã§ã€ã¾ã使ã‚ã‚Œãªã„ã ã‚ã†ãªãƒ¼ã¨ãŠã‚‚ã„ã¤ã¤[Yahoo! JAPANã§ã¯ã—ã®ä»•æ§˜ã«å¯¾å¿œã—ã¦ã„ã‚‹|http://techblog.yahoo.co.jp/web/openid/oau
InfoQ: HTML5ã®ã‚±ãƒ¼ã‚¹ã‚¹ã‚¿ãƒ‡ã‚£ï¼šWebSockets, Canvas ãã—㦠JavaScript㧠noVNCクライアントを作æˆ
原文(投稿日：2010/07/01)ã¸ã®ãƒªãƒ³ã‚¯ noVNC ã¯ã€VNCクライアントã§ã€ HTML5 WebSockets, Canvas ãã—㦠JavaScriptを使ã£ã¦å®Ÿè£…ã•ã‚Œã¦ã„る。InfoQã€ã¯ã€ Joel Martinæ°ã¨ã€ noVNC㨠HTML5アプリケーションã®é–‹ç™ºçµŒé¨“ã«ã¤ã„ã¦ã€å°‘ã—ã°ã‹ã‚Šã€Q&Aã‚’æŒã£ãŸ: InfoQ: Joelã•ã‚“ã€noVNCã®ã‚¢ãƒ¼ã‚テクãƒãƒ£ã®å…¨ä½“åƒã¨æ§˜ã€…ãªã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆãŒã©ã®ã‚ˆã†ã«ã€ã„ã£ã—ょã«ãªã£ã¦ã„ã‚‹ã®ã‹ï¼Œæ•™ãˆã¦ãã ã•ã„。 Joel: noVNCã®ã‚¢ãƒ¼ã‚テクãƒãƒ£ã¯ã€ï¼–ã¤ã®ä¸»è¦ãªã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã‹ã‚‰ã§ãã¦ã„ã¾ã™: コア㮠VNC/RFB実装: ã“ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã¯ã€ã™ã¹ã¦ã®RFBプãƒãƒˆã‚³ãƒ«ã®æƒ…å ±ã‚’ã‚«ãƒ—ã‚»ãƒ«åŒ–ã—ã¦ã„ã¦ã€ä»–ã®ã™ã¹ã¦ã‚’å‹•ã‹ã™ã€ä¸»è¦ãªã‚¹ãƒ†ãƒ¼ãƒˆãƒžã‚·ãƒ³ã§ã™ã€‚ Canvas抽象層: ã“ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã¯ã€ HTML5　CanvasAPIを抽象化ã—ãŸå±¤
ImperialViolet - Overclocking SSL
(This is a write up of the talk that I gave at Velocity 2010 last Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh Chang.) The ‘S’ in HTTPS stands for ‘secure’ and the security is provided by SSL/TLS. SSL/TLS is a standard network protocol which is implemented in every browser and web server to provide confidentiality and integrity for HTTPS traffic. If there's one point tha
XAuth is a Lot Like Democracy
XAuth is a lot like democracy: Â The worst form of user identity prefs, except for all those others that have been tried (apologies to Churchill). Â I've just read Eran's rather overblown "XAuth - a Terrible, Horrible, No Good, Very Bad Idea", and I see that the same objections are being tossed around; I'm going to rebut them here to save time in the future. Let's take this from the top. Â XAuth is a
Google 検索を暗å·é€šä¿¡ã§å®‰å…¨ã«ä½¿ã†æ–¹æ³• - WebOS Goodies
WebOS Goodies ã¸ã‚ˆã†ã“ãï¼ WebOS ã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®æœªæ¥å½¢ã€‚ã‚らゆる Web サイトãŒç¹‹ãŒã‚Šã€å…±æœ‰ã—ã€å”力ã—ã¦å‰µã‚Šä¸Šã’ã‚‹ã€ã²ã¨ã¤ã®å·¨å¤§ãªæƒ…å ±ã‚·ã‚¹ãƒ†ãƒ ã§ã™ã€‚ãã“ã§ã¯ã€ã‚ã‚‰ã‚†ã‚‹æƒ…å ±ãŒãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã«è“„ç©ã•ã‚Œã€æˆ‘々ã¯ã„ã¤ã§ã‚‚ã€ã©ã“ã‹ã‚‰ã§ã‚‚ã€å¤šå½©ãªãƒ‡ãƒã‚¤ã‚¹ã‚’使ã£ã¦ãれらã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¾ã™ã€‚ WebOS Goodies ã¯ã€ã•ã¾ã–ã¾ãªæƒ…å ±æ供やツール開発を通ã—ã¦ã€ãã‚“ãªä¸–ç•Œã®å®Ÿç¾ã«å°‘ã—ã§ã‚‚貢献ã™ã‚‹ã¹ã活動ã—ã¦ã„ãã¾ã™ã€‚ Google 検索ã¯ã©ã‚“ã©ã‚“パーソナライズãŒé€²ã‚“ã§ã„ã¾ã™ãŒã€ãã‚Œã«ä¼´ã£ã¦ãƒ—ライãƒã‚·ãƒ¼ã¸ã®æ‡¸å¿µã‚‚大ãããªã£ã¦ã„ã¾ã™ã€‚検索ã‚ーワードã¯ãれ自身ãŒãƒ—ライベートãªæƒ…å ±ã§ã™ã—ã€å±¥æ´ã‚„スターã®æƒ…å ±ãªã©ã‚‚å«ã‚ã‚Œã°ã€æ¼ã‚ŒãŸæ™‚ã®ãƒ€ãƒ¡ãƒ¼ã‚¸ã¯ Amazon ãŠã™ã™ã‚商å“ã®æ¯”ã§ã¯ã‚ã‚Šã¾ã›ã‚“（笑）。 ãã®ã‚ˆã†ãªçŠ¶æ³ã«å¯¾å¿œã™ã‚‹ãŸã‚〠Google ãŒè©¦é¨“çš„ã« SSL ã§æš—å·åŒ–ã•ã‚ŒãŸ Goog
[OAuth] æºå¸¯ã§foursquareã®OAuthã‚’ç„¡ç†ã‚„ã‚Šã‚„ã£ã¦ã¿ãŸ
モãƒã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ã‚¹ã‚¯ã‚¨ã‚¢ã®é–‹ç™ºåˆæœŸã«ã€OAuthã§foursquareã®èªè¨¼ã‚’ã‚„ã‚ã†ã¨ã—ã¦ã„ãŸæ™‚ã«è©¦ã—ãŸçµæžœã§ã™ã€‚手元ã«ã‚ã£ãŸAU,docomoã®ç«¯æœ«ã§ç¢ºèªã—ã¦ã„ã¾ã™ã€‚ AU(W61CA)ã§foursquareã®OAuthã‚’ã‚„ã£ã¦ã¿ãŸ ãƒã‚°ã‚¤ãƒ³ç”»é¢ 承èªç”»é¢ 日本語文å—化ã‘… æ–‡å—化ã‘＆DenyãŒæŠ¼ã›ãªã„ãŒã€å‹•ä½œã¯OKï¼ docomo Cookie対応機種(N-07A)ã§foursquareã®OAuthã‚’ã‚„ã£ã¦ã¿ãŸãƒã‚°ã‚¤ãƒ³ç”»é¢ 承èªç”»é¢ デザインã¯å´©ã‚Œã‚‹ãŒã€å‹•ä½œã¯OK! デザインã¯å´©ã‚Œã‚‹ãŒã€å‹•ä½œã¯OK! docomo Cookieéžå¯¾å¿œæ©Ÿç¨®(SH704i)ã§foursquareã®OAuthã‚’ã‚„ã£ã¦ã¿ãŸãƒã‚°ã‚¤ãƒ³ç”»é¢â†’表示ãŒå´©ã‚Œã€ãƒã‚°ã‚¤ãƒ³ãƒœã‚¿ãƒ³ã‚’押ã—ã¦ã‚‚åŒã˜ç”»é¢ãŒç¹°ã‚Šè¿”ã—表示ã•ã‚Œã‚‹ã ã‘…。 ※当時ã¯ãƒã‚°ã‚¤ãƒ³ã§ãã¦ã„ãŸè¨˜æ†¶ãŒâ€¦ã€ã‚µãƒ¼ãƒå´ã®å®Ÿè£…ãŒå¤‰ã‚ã£ãŸã‹ã‚‚ã—ã‚Œãªã„ã§ã™ ã¾ã¨ã‚Cookie対応機ãªã‚‰
![[OAuth] æºå¸¯ã§foursquareã®OAuthã‚’ç„¡ç†ã‚„ã‚Šã‚„ã£ã¦ã¿ãŸ](https://cdn-ak-scissors.b.st-hatena.com/image/square/a903da7cbef1e8e8cfab1fe784e6d2186742d401/height=288;version=1;width=512/http%3A%2F%2F4.bp.blogspot.com%2F_IngpC7Xbw78%2FS-6ZdSwmKrI%2FAAAAAAAAAM8%2FA2Unl5Z7vLA%2Fw1200-h630-p-k-no-nu%2Fw61ca-4sq-login.JPG)
Jisp - Lisp implementation in JavaScript
Jisp - a dialect of Lisp in JavaScript Brian Morearty May 10, 2006 (with major additions July, 2007) Jisp is a new dialect of Lisp that I invented. I realized that JavaScript has so many similarities with Lisp that it would be easy to write a JavaScript-based Lisp language that uses the browser's JavaScript parser rather than writing my own parser. It turned out to be even easier than I expected--
Security:Renegotiation - MozillaWiki
The purpose of this document is to summarize security issue CVE-2009-3555 (a man-in-the-middle vulnerability in the TLS/SSL protocol) which applies to SSL/TLS/https/etc., to describe what action has been taken in Mozilla, and to describe what action other parties should take. Background In 2009, a flaw was discovered in the SSL/TLS protocol which is widely used in Internet applications, for exampl
140æ–‡å—以内ã§ãƒ‘スワード丸見㈠- latest log
パスワードを忘れã¡ã‚ƒã£ãŸæ™‚ãªã©ã«ã€‚ Firefox3.5+, Safari4+, Google Chrome, Opera10.10+ ã§å‹•ãã¾ã™ã€‚IE9ã§ã‚‚å‹•ãã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ 76byte javascript:document.querySelector("input[type=password]").type="text";void 0
Native Client and Web Portability
$200K 1 10th birthday 4 abusive ads 1 abusive notifications 2 accessibility 3 ad blockers 1 ad blocking 2 advanced capabilities 1 android 2 anti abuse 1 anti-deception 1 background periodic sync 1 badging 1 benchmarks 1 beta 83 better ads standards 1 billing 1 birthday 4 blink 2 browser 2 browser interoperability 1 bundles 1 capabilities 6 capable web 1 cds 1 cds18 2 cds2018 1 chrome 35 chrome 81
JavaScriptãŒé…ã„4ã¤ã®åŽŸå› ã¨ã¯ï¼Ÿ
1ã¤å‰ã®è¨˜äº‹ã€ŒJavaScriptã‚’ã„ã‹ã«é«˜é€ŸåŒ–ã™ã‚‹ã‹ã€IE9ã€Firefoxã®å–り組ã¿ã€ã§ã¯ã€IE9ã¨Firefoxã«ãŠã‘ã‚‹JavaScriptã®é«˜é€ŸåŒ–ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã—ãŸãŒã€ãã‚‚ãã‚‚JavaScriptã®å®Ÿè¡Œé€Ÿåº¦ã¯ãªãœé…ã„ã®ã§ã—ょã†ï¼Ÿ ãã®ç†ç”±ã«ã¤ã„ã¦ã€Mozilla Japanテクニカルマーケティング担当ã®æµ…井智也æ°ãŒã€ã‚¹ãƒ©ã‚¤ãƒ‰ã€ŒTrace Monkeyã€ã§ãƒã‚¤ãƒ³ãƒˆã‚’ã¾ã¨ã‚ã¦ã„ã¾ã™ï¼ˆã“ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã¯ã‚¿ã‚¤ãƒˆãƒ«ã‹ã‚‰åˆ†ã‹ã‚‹ã¨ãŠã‚Šã€Firefoxã®å½“時ã®æ–°ã—ã„JavaScriptエンジン「Trace Monkeyã€ã‚’紹介ã™ã‚‹ãŸã‚ã«1年以上å‰ã«ä½œæˆã•ã‚ŒãŸã‚¹ãƒ©ã‚¤ãƒ‰ã§ã™ãŒã€1ã¤å‰ã®è¨˜äº‹ã‚’見るã¨ã€ã“ã“ã§ç¤ºã•ã‚ŒãŸèª²é¡Œã¯ã„ã¾ã‚‚変ã‚ã£ã¦ã„ãªã„よã†ã§ã™ï¼‰ã€‚ å…¨67æžšã®ã‚¹ãƒ©ã‚¤ãƒ‰ã®20æžšç›®ã‹ã‚‰24æžšç›®ã®5枚を以下ã«ç´¹ä»‹ã—ã¾ã™ã€‚ JavaScriptãŒé…ã„åŽŸå› ã¯ã€ä»¥ä¸‹ã®4点ã«ã¾ã¨ã‚られã¦ã„ã¾ã™ã€‚ インタープリタ型言
isaiah’s web log — Five things you didn’t know about xAuth.
my name's isaiah. i run YourHead Software. we make Stacks and other nice things. xAuth is a new twist on the OAuth athentication system. It allows desktop applications to use the OAuth with and alternate workflow. The new flow is specifically designed for desktop and mobile and does not require that the applicaton open a web browser. 1. xAuth isn’t for everyonexAuth was designed specifically to im
è‡ªå •è½ãªæŠ€è¡“者ã®æ—¥è¨˜ : ブラウザãŒå¯¾å¿œã™ã‚‹SSL/TLS CipherSuite一覧 - livedoor Blog（ブãƒã‚°ï¼‰
基本ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆã趣味ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKI・署å・èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ュリティをやã£ã¦ã„ã¾ã™ã€‚旅好ã。テレビ好ãã§èŠ¸èƒ½é€š å°‘ã—å‰ã«ã‚¦ã‚§ãƒ–ブラウザãŒHTTPS通信ã™ã‚‹éš›ã®CipherSuiteを調ã¹ã¦ã¿ã‚ˆã†ã¨æ€ã£ã¦è¡¨ã‚’作ã£ã¦ã‚ã‚Šã¾ã—ãŸã€‚今日ã€ã¡ã‚‡ã£ã¨æ™‚é–“ãŒã‚ã£ãŸã®ã§å¯¾è±¡ãƒ–ラウザを新ã—ã„ã‚‚ã®ã«ã—ã¦è¡¨ã‚’æ›´æ–°ã—ãŸã®ã§ã€å…¬é–‹ã—よã†ã¨æ€ã„ã¾ã™ã€‚ 以下ã®ãƒ–ラウザã«ã¤ã„ã¦èª¿ã¹ã¦ã„ã¾ã™ã€‚ Microsoft Internet Explorer 8.0 / Windows XP SP3 Microsoft Internet Explorer 7.0 / Windows Vista Firefox 3.6 / Windows XP SP3 Firefox 3.6 / Windows Vista Opera 10.10 / Windows XP SP3 Opera 10.10 / Wi
ãŠçŸ¥ã‚‰ã›
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
HSTS
HTML5Rocks - A resource for open web HTML5 developers
Is my site safe? Check your SSL certificate!
{{#tags}}- {{label}}
{{/tags}}