[B! è¨¼æ˜Žæ›¸][SSL] steropeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

sterope id:sterope

è¨¼æ˜Žæ›¸ã¨SSLã«é–¢ã™ã‚‹steropeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Android7.1ä»¥å‰ã§Let's Encryptè¨¼æ˜Žæ›¸ã®ã‚µã‚¤ãƒˆãŒè¦‹ã‚‰ã‚Œãªããªã‚‹ | ãŠãã‚‰ãã¯ãã‚Œã•ãˆã‚‚å¹³å‡¡ãªæ—¥ã€…
è¿½è¨˜: ãã®å¾Œã®å‹•ãã«ã¤ã„ã¦æ›¸ãã¾ã—ãŸ â†’ Let's Encryptã®è¨¼æ˜Žæ›¸åˆ‡æ›¿å‘¨ã‚Šãã®å¾Œ ã“ã®ã‚µã‚¤ãƒˆã¯Let's Encryptã§è¨¼æ˜Žæ›¸ç™ºè¡Œã—ã¦ã„ã‚‹ã®ã§ã‚¿ã‚¤ãƒˆãƒ«ã®ä»¶ãŒæ°—ã«ãªã£ãŸã®ã ãŒã€ã©ã†ã‚‚ã‚ã¾ã‚Šè©±é¡Œã«ãªã£ã¦ã„ãªã„ã€‚æ¥ãšã‹ã—ãªãŒã‚‰SSLå‘¨ã‚Šè©³ã—ã„ã‚ã‘ã˜ã‚ƒãªã„ã®ã§ã€èª¤ã£ã¦ã„ã‚‹ã‹ã‚‚çŸ¥ã‚Œãªã„ã€‚è˜è€…ã®æ„è¦‹ã‚’æ±‚ã‚€ã€‚ Let's EncryptãŒä½¿ã‚ã‚Œã¦ã„ã‚‹ã‚µã‚¤ãƒˆãŒAndroid7.1ä»¥å‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ä»Šå¹´ã®9æœˆ29æ—¥ä»¥é™è¦‹ã‚‰ã‚Œãªããªã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ å»¶å‘½ç–ã¯ç”¨æ„ã•ã‚Œãã†ã ãŒã€ãã‚Œã‚‚æ¥å¹´ã®9æœˆ29æ—¥ã¾ã§ Let's Encryptã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸åˆ‡ã‚Šæ›¿ãˆè¨ˆç”»ã«èµ·å› ã—ã¦ã„ã‚‹ Let's Encryptã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã®å¤‰æ›´ Let's Encryptã¯ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’è‡ªèº«(ISRG)ã®èªè¨¼å±€ã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸(ISRG Root X1)ã«åˆ‡ã‚Šæ›¿ãˆã‚ˆã†ã¨ã—ã¦ã„ã‚‹ã€‚ç¾åœ¨ã¯ã€IdenTrustã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸(DST
sterope 2020/08/07
android

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
ãƒ¢ãƒã‚¤ãƒ«ã‚¢ãƒ—ãƒªé–‹ç™ºè€…ã®ãŸã‚ã® mitmproxy å…¥é–€ - Qiita
ã¯ã˜ã‚ã« ãƒ¢ãƒã‚¤ãƒ«ã‚¢ãƒ—ãƒªã‚’é–‹ç™ºã—ã¦ã„ã‚‹ã¨ãã«ã€ã‚¢ãƒ—ãƒªã¨ã‚µãƒ¼ãƒãƒ¼é–“ã®é€šä¿¡ã‚’ç¢ºèªã—ãŸã„ã¨ããŒã‚ã‚Šã¾ã™ã€‚ãŸã¨ãˆã°ã€æœŸå¾…é€šã‚Šã® HTTP ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒé€ã‚‰ã‚Œã¦ã„ã‚‹ã‹èª¿ã¹ãŸã‚Šã€ã‚µãƒ¼ãƒãƒ¼ã‹ã‚‰ã®ãƒ¬ã‚¹ãƒãƒ³ã‚¹ãŒé–“é•ã£ã¦ã„ãªã„ã‹ç¢ºèªã—ãŸã‚Šã™ã‚‹å¿…è¦ãŒç”Ÿã˜ã¾ã™ã€‚ ãã‚“ãªã¨ãã«ã€ã„ã¡ã„ã¡ãƒ‡ãƒãƒƒã‚¬ã§æ¢ã‚ã¦ã‚‚è‰¯ã„ã®ã§ã™ãŒã€ãƒ—ãƒã‚ã‚·ã‚’ã¯ã•ã‚ã°ç°¡å˜ã«é€šä¿¡ã‚’è¦—ãã“ã¨ãŒã§ãã¾ã™ã€‚ã—ã‹ã‚‚ã€ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’æ”¹ç«„ã—ã¦ã€ã‚ã–ã¨ä¸æ£ãªãƒ¬ã‚¹ãƒãƒ³ã‚¹ã«ã—ã¦ã‚¢ãƒ—ãƒªãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã—ãªã„ã‹ãƒ†ã‚¹ãƒˆã—ãŸã‚Šã€ç‰¹å®šã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã ã‘ãƒ–ãƒãƒƒã‚¯ã—ã¦ã‚µãƒ¼ãƒãƒ¼éšœå®³ã‚’æ“¬ä¼¼çš„ã«å†ç¾ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ mitmproxy ã¨ã¯ mitmproxy ã¯ man-in-the-middle åž‹ã®ãƒ—ãƒã‚ã‚·ã‚µãƒ¼ãƒãƒ¼ã®ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚OS X ã‚„ Windowsã€Linux ä¸Šã§å‹•ä½œã—ã€å¯¾è©±å¼ã® CUI ã‚’æŒã¡ã¾ã™ã€‚SSL ã‚µãƒãƒ¼ãƒˆã‚’ã—ã¦ã„ã‚‹ç‚¹ãŒç‰¹é•·ã«ãªã‚Šã¾ã™ã€‚ å…¬å¼ã‚µã‚¤ãƒˆ: http:/
sterope 2019/12/20
android

HTTPS

SSL

TLS

proxy

è¨¼æ˜Žæ›¸

MITM
ãƒªãƒ³ã‚¯
Android ã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚¿ä¸Šã§å‹•ã„ã¦ã„ã‚‹ã‚¢ãƒ—ãƒªã® HTTP / HTTPS é€šä¿¡ã®ä¸èº«ã‚’è¦‹ã‚‹æ–¹æ³• - horolog
ä»Šå›žã¯ Android ã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚¿ã§ã‚¢ãƒ—ãƒªã‚’å‹•ã‹ã—ã¦ã€ã‚¢ãƒ—ãƒªãŒè¡Œã† HTTP / HTTPS é€šä¿¡ã®ä¸èº«ã‚’è¦—ã„ã¦ã¿ã¾ã™ã€‚ ç’°å¢ƒ&ãƒ„ãƒ¼ãƒ« Windows 10 Android Studio ã®ã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ã‚¿ (v3.2.1) mitmproxy (v4.0) æº–å‚™ ãƒ„ãƒ¼ãƒ«ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« Android Studio ã¨ mitmproxy ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ãã ã•ã„ã€‚ ä»®æƒ³ãƒ‡ãƒã‚¤ã‚¹ã®ä½œæˆ ç§ã¯ä»¥ä¸‹ã®æ§‹æˆã§ä»®æƒ³ãƒ‡ãƒã‚¤ã‚¹ã‚’ä½œæˆã—ã¾ã—ãŸã€‚ ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ Pixel 2 ã‚·ã‚¹ãƒ†ãƒ ã‚¤ãƒ¡ãƒ¼ã‚¸ API Level : 28 ABI : x86 Target : Android9.0 (Google APIs) â€» Android9.0 (Google Play) ã¨æ›¸ã‹ã‚ŒãŸã‚¤ãƒ¡ãƒ¼ã‚¸ã ã¨ adb root ãŒä½¿ãˆãªã„ã§ã€ Android9.0 (Google APIs) ã¨æ›¸ã‹ã‚ŒãŸã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’é¸æŠžã—ã¦ãã ã•ã„
sterope 2019/12/20
android

HTTPS

SSL

TLS

proxy

è¨¼æ˜Žæ›¸

MITM
ãƒªãƒ³ã‚¯
Mozillaã€SymantecãŒç™ºè¡Œã—ãŸè¨¼æ˜Žæ›¸ã®ä¿¡é ¼æ€§å›žå¾©ã«é–¢ã™ã‚‹è°è«–ã«å‚æˆ¦ | ã‚¹ãƒ©ãƒ‰ IT
Google Chromeã§SymantecãŒç™ºè¡Œã—ãŸSSLè¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æœŸé™çŸç¸®ã‚„EVã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ç„¡åŠ¹åŒ–ã‚’ææ¡ˆã™ã‚‹ [security.srad.jp] ãªã©ã€å¤§æ‰‹èªè¨¼å±€ã®å•é¡Œç‚¹ã‚’æŒ‡æ‘˜ã—ã¦ã„ã‚‹ã“ã¨è‡ªä½“ã¯ã€Google è‡ªèº«ã‚‚ãƒ«ãƒ¼ãƒˆèªè¨¼å±€ [mynavi.jp] ãªã“ã¨ã‹ã‚‰ä¸ç«‹æ€§ã«ç–‘å•ã¯ã‚ã‚‹ã‚‚ã®ã®ã€æŒ‡æ‘˜ã®å†…å®¹ã¯ä»Šã®ã¨ã“ã‚ã¯è©•ä¾¡ã§ãã¾ã™ã€‚ ã—ã‹ã—ã€ãã®ä¸€æ–¹ã§ã€ã“ã“æœ€è¿‘ï¼ˆæ•°ã‹æœˆï½ž1å¹´å‰ãã‚‰ã„?ï¼‰ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§ã€Google Chrome (Windows ç‰ˆ) ã‹ã‚‰ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒèªè¨¼å±€åï¼ˆè¨¼æ˜Žæ›¸ï¼‰ã‚’ç¢ºèªã™ã‚‹ãŸã‚ã® UI ãŒå‰Šé™¤ã•ã‚Œã¦ã—ã¾ã„ã¾ã—ãŸã€‚ ã©ã®èªè¨¼å±€ã‚’ä¿¡é ¼ã™ã‚‹ã‹ã®æ±ºå®šæ¨©ã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶ãƒ™ãƒ³ãƒ€ãƒ¼ã§ã¯ãªãã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚ã‚‹ã¹ãã§ã™ã€‚ã«ã‚‚é–¢ã‚ã‚‰ãšã€ã‚ã–ã‚ã–ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒèªè¨¼å±€åã‚’ç°¡å˜ã«ç¢ºèªã§ããªãã—ãŸ Google ã®å¯¾å¿œã«ã¯å¤§ããªå•é¡ŒãŒã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ãƒ™ãƒ³ãƒ€ãƒ¼ã§ã‚ã‚Šã€è‡ªèº«ã‚‚ãƒ«ãƒ¼ãƒˆèª
sterope 2017/05/06
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl

è¨¼æ˜Žæ›¸

TLS
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : Certificate Transparencyã§ã‚ã‹ã£ãŸã¨ã„ã†Thawteã«ã‚ˆã‚‹google.comè¨¼æ˜Žæ›¸ã®ä¸æ£ç™ºè¡Œï¼Ÿï¼Ÿï¼Ÿ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
åŸºæœ¬ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆãè¶£å‘³ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKIãƒ»ç½²åãƒ»èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚æ—…å¥½ãã€‚ãƒ†ãƒ¬ãƒ“å¥½ãã§èŠ¸èƒ½é€š 2015å¹´9æœˆ19æ—¥(åœŸ)ã«ã€ŒSymantec caught issuing rogue Google.com certificatesã€ ã¨ã„ã†è¨˜äº‹ãŒé£›ã³è¾¼ã‚“ã§ãã¦ã€èªè¨¼å±€ã€è¨¼æ˜Žæ›¸ã€SSLé–¢ä¿‚ã®ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã ã¨ ã‚ãã‚ãã—ã¦é£›ã³ã¤ãã‚ã‘ã§ã™ãŒã€ã–ã£ã¨èªã‚“ã§ã¿ã‚‹ã¨ å¤§æ‰‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ™ãƒ³ãƒ€ãƒ¼ã®Symantecã®åä¼šç¤¾ã§ä½Žä¾¡ãªè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚µãƒ¼ãƒ“ã‚¹ã‚’ã‚„ã£ã¦ã„ã‚‹ ThawteãŒã€2015å¹´9æœˆ14æ—¥ã«google.comã€www.google.comç”¨ã®EV SSLè¨¼æ˜Žæ›¸ã‚’ã€Googleã«äº†è§£ãªã ä¸æ£ã«ç™ºè¡Œã—ã¦ã„ãŸã“ã¨ãŒã€è¨¼æ˜Žæ›¸ã®å…¬é–‹ç›£æŸ»è¨˜éŒ²(Certificate Transparency)ã«ã‚ˆã‚Šã‚ã‹ã£ãŸã€‚ ã¨ã„ã†äº‹ã®ã‚ˆã†ã§ã™ã€‚åŽ³æ ¼ãªå¯©æŸ»ã§ç™ºè¡Œã•
sterope 2017/03/26
google

ssl

è¨¼æ˜Žæ›¸

ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯

Symantec
ãƒªãƒ³ã‚¯
Symantecã®è¨¼æ˜Žæ›¸ç™ºè¡Œã«ä¸æ‰‹éš›ã€GoogleãŒå¯¾å¿œã‚’è¦æ±‚
ç±³Symantecã®èªè¨¼å±€ãŒæ‰‹é•ã„ã«ã‚ˆã‚Šã€ã€Œgoogle.comã€ãªã©ã®ãƒ‰ãƒ¡ã‚¤ãƒ³å‘ã‘ã®ãƒ†ã‚¹ãƒˆè¨¼æ˜Žæ›¸ã‚’ãƒ‰ãƒ¡ã‚¤ãƒ³æ‰€æœ‰è€…ãŒçŸ¥ã‚‰ãªã„ã†ã¡ã«ç™ºè¡Œã—ã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã‚Šã€ç±³Googleã¯10æœˆ28æ—¥ã€åŒç¤¾ã«å¯¾ã—ã¦å¯¾å¿œã‚’è¦æ±‚ã—ãŸã€‚Symantecã®å¯¾å¿œæ¬¡ç¬¬ã§ã¯ã€Googleè£½å“ã§Symantecã®è¨¼æ˜Žæ›¸ãŒå®‰å…¨ã¨ã¿ãªã•ã‚Œãªããªã‚‹å¯èƒ½æ€§ã‚‚ã‚ã‚‹ã¨è¦å‘Šã—ã¦ã„ã‚‹ã€‚ SymantecãŒ10æœˆ2æ—¥ã«ç™ºè¡¨ã—ãŸã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå ±å‘Šæ›¸ã§ã€Googleã‚„Operaãªã©5çµ„ç¹”å‘ã‘ã®ãƒ†ã‚¹ãƒˆè¨¼æ˜Žæ›¸23ä»¶ãŒãƒ‰ãƒ¡ã‚¤ãƒ³æ‰€æœ‰è€…ã®çŸ¥ã‚‰ãªã„ã†ã¡ã«ç™ºè¡Œã•ã‚Œã¦ã„ãŸã¨å ±å‘Šã—ãŸã€‚ã“ã‚Œã«å¯¾ã—ã¦Googleã¯ã€ä¸å¯©ãªè¨¼æ˜Žæ›¸ã¯ãã‚Œä»¥å¤–ã«ã‚‚å˜åœ¨ã™ã‚‹ã¨æŒ‡æ‘˜ã€‚ãã®å¾Œã€Symantecã¯10æœˆ12æ—¥ã«å‡ºã—ãŸæ›´æ–°ç‰ˆã®å ±å‘Šæ›¸ã§ã€ã•ã‚‰ã«76ãƒ‰ãƒ¡ã‚¤ãƒ³å‘ã‘ã®è¨¼æ˜Žæ›¸164ä»¶ã¨ã€æœªç™»éŒ²ãƒ‰ãƒ¡ã‚¤ãƒ³å‘ã‘ã®è¨¼æ˜Žæ›¸2458ä»¶ãŒè¦‹ã¤ã‹ã£ãŸã¨ç™ºè¡¨ã—ãŸã€‚ Googleã¯ã“ã†ã—ãŸSymantecã®å¯¾å¿œ
sterope 2017/03/26
google

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

TLS

SSL

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
ã€æ‚²å ±ã€‘Googleã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ç™ºè¡Œã®SSLè¨¼æ˜Žæ›¸ã‚’å•ç”ç„¡ç”¨ã§ãƒ–ãƒãƒƒã‚¯ã¸ : ITé€Ÿå ±
Googleã¯ã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ç™ºè¡Œã®SSLè¨¼æ˜Žè¨¼ã«å¯¾ã—ã€åŽ³ã—ã„å‡¦ç½°ã‚’æ¤œè¨Žã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚ ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ã¾ãŸã¯ãã®è¨¼æ˜Žæ›¸ã®å†è²©æ¥è€…ãŒSSLè¨¼æ˜Žæ›¸ã‚’ä¸é©åˆ‡ã«ç™ºè¡Œã—ãŸã¨ã„ã†é‡å¤§ãªäº‹ä»¶ã«ã¤ã„ã¦ã€Googleã¯åŽ³ã—ã„å‡¦ç½°ã‚’æ¤œè¨Žã—ã¦ã„ã¾ã™ã€‚ ææ¡ˆã•ã‚ŒãŸè¨ˆç”»ã¯ã€ä¼šç¤¾ã«ã™ã¹ã¦ã®é¡§å®¢ã®è¨¼æ˜Žæ›¸ã‚’ç½®ãæ›ãˆã€ãã‚Œã‚’æŒã£ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ‹¡å¼µã•ã‚ŒãŸæ¤œè¨¼ï¼ˆEVï¼‰ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã®èªè˜ã‚’åœæ¢ã™ã‚‹ã“ã¨ã§ã™ã€‚ ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ã¯ã€2015å¹´ã®Netcraftèª¿æŸ»ã«ã‚ˆã‚‹ã¨ã€ã‚¦ã‚§ãƒ–ä¸Šã§ä½¿ç”¨ã•ã‚Œã‚‹3ã¤ã®SSLè¨¼æ˜Žæ›¸ã®ãã‚Œãžã‚Œã«ã¤ã„ã¦ç´„1ã¤ã‚’æ‹…å½“ã—ã€ä¸–ç•Œæœ€å¤§ã®å•†ç”¨è¨¼æ˜Žæ›¸ã®ç™ºè¡Œè€…ã¨ãªã£ã¦ã„ã¾ã™ã€‚æ•°å¹´ã«ã‚ãŸã‚Šè²·åŽã—ãŸçµæžœã€VeriSignã€GeoTrustã€Thawteã€RapidSSLãªã©ã®ä»¥å‰ã®ã‚¹ã‚¿ãƒ³ãƒ‰ã‚¢ãƒãƒ³èªè¨¼å±€ã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’ç®¡ç†ã—ã¦ã„ã¾ã™ã€‚ SSL / TLSè¨¼æ˜Žæ›¸ã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶ã¨HTTPSå¯¾å¿œã®Webã‚µã‚¤ãƒˆã¨ã®é–“ã®æŽ¥ç¶šã‚’æš—å·åŒ–ã—ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼
sterope 2017/03/26
ssl

google

https

web

è¨¼æ˜Žæ›¸

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Symantec
ãƒªãƒ³ã‚¯
ä¸å›½æœ€å¤§ç´šã®èªè¨¼å±€ã€ŒWoSignã€ãŒãƒ‹ã‚»ã®è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ã„ãŸã“ã¨ãŒåˆ¤æ˜Ž
by Barney Moss ç„¡æ–™ã§SSLè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ãã‚Œã‚‹ã“ã¨ã§ã€å¤šãã®è‡ªå®…ã‚µãƒ¼ãƒãƒ¼ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«é‡å®ã•ã‚Œã¦ã„ã‚‹ä¸å›½æœ€å¤§ç´šã®èªè¨¼å±€ã€Œæ²ƒé€š(WoSign)ã€ãŒã€ã€Œå½ç‰©ã®è¨¼æ˜Žæ›¸ã€ã‚’å¤§é‡ã«ç™ºè¡Œã—ã¦ã„ãŸã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã‚Šã¾ã—ãŸã€‚ The story of how WoSign gave me an SSL certificate for GitHub.com | Schrauger.com https://www.schrauger.com/the-story-of-how-wosign-gave-me-an-ssl-certificate-for-github-com Thoughts and Observations: Chinese CA WoSign faces revocation after possibly issuing fake certificates of Github,
sterope 2016/09/02
è¨¼æ˜Žæ›¸

ssl

TLS
ãƒªãƒ³ã‚¯
Dellè£½PCã§ç¢ºèªã•ã‚ŒãŸeDellRootè¨¼æ˜Žæ›¸ã®é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
Dellè£½PCã§ç¢ºèªã•ã‚ŒãŸå‹æ‰‹ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸å•é¡Œï¼ˆSuperfish2.0ã¨ã‚‚å‘¼ç§°ã•ã‚Œã¦ã„ã‚‹ï¼‰ã®é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ Dellã®å…¬å¼è¦‹è§£ãƒ»ã‚µãƒãƒ¼ãƒˆæƒ…å ± æ›´æ–°ï¼šå¼Šç¤¾PCè¨¼æ˜Žæ›¸è„†å¼±æ€§ã«ã¤ã„ã¦ï¼ˆeDellRootè¨¼æ˜Žæ›¸ãªã‚‰ã³ã«DSDTestProviderè¨¼æ˜Žæ›¸ï¼‰ å¼Šç¤¾PCè¨¼æ˜Žæ›¸è„†å¼±æ€§ã«ã¤ã„ã¦ï¼ˆeDellRootè¨¼æ˜Žæ›¸ï¼‰ Dell System Detect Security Update Response to Concerns Regarding eDellroot Certificate Information on the eDellRoot certificate and how to remove it from your Dell PC Information on the eDellRoot and DSDTestProvider certificates and how to
sterope 2015/11/25
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è¨¼æ˜Žæ›¸

SSL
ãƒªãƒ³ã‚¯
1