OpenID Provider ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç– (1) - ã¾ãšã¯ SSL ã‚’å°Žå…¥ï¼è©±ã¯ãã‚Œã‹ã‚‰ã - æ—¥å‘å¤ç‰¹æ®Šå¿œæ´éƒ¨éšŠã‚„ã£ã¨ä¸‹æº–備終ã‚ã£ãŸã®ã§æ›¸ã„ã¦ã¿ã‚‹ã€‚ OpenID ã§ã®ãƒ—トãƒã‚³ãƒ«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§ã€èªè¨¼ã‚¢ã‚µãƒ¼ã‚·ãƒ§ãƒ³è¦æ±‚*1åŠã³å¿œç”*2ã§ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯é€šå¸¸ã€RP-OP 間㧠associate 時ã«äº¤æ›ã—㟠MAC ã‚ーをæŒã£ã¦ç½²åã‚’è¡Œã†ç‚ºã€æœŸå¾…ã™ã‚‹ç›¸æ‰‹ã¨é€šä¿¡ã—ã¦ã„ã‚‹é™ã‚Šã¯æ”¹ã–ã‚“ã¯èµ·ã“ã‚Šã«ãã„ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ 但ã—最近話題ã«å‡ºã¦æ¥ã¦ã„ã‚‹ DNS Cache Poisoning ã®ã‚ˆã†ãªæ”»æ’ƒã‚’å—ã‘ãŸå ´åˆã€ä¸é–“者攻撃 (man-in-the-middle attack) ãŒæˆç«‹ã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ 攻撃手法ã®ä¾‹ 例ãˆã°ã€RP ã® DNS ãŒæ±šæŸ“ã•ã‚Œã¦ã„ãŸå ´åˆã‚’考ãˆã¾ã™ã€‚æœ¬æ¥ OP ã§ã‚ã‚‹ã¯ãšã®ãƒ›ã‚¹ãƒˆãŒæ‚ªæ„ã®ã‚る第三者ã®ã‚µãƒ¼ãƒãƒ¼ã«å‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¦ã„ãŸå ´åˆã€ãã®ç¬¬ä¸‰è€…ã®ã‚µãƒ¼ãƒãƒ¼ãŒä¸ç¶™ã‚’è¡Œãˆã°ã€DH éµäº¤æ›ã‚’è¡Œã£ã¦ã‚‚ã¾ã£ãŸãç„¡æ„味ã§ã€èªè¨¼ãƒ‡ãƒ¼ã‚¿ãŒç›—ã¾ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ã¤ã¾ã‚Šã€ RP ã‹ã‚‰è¦‹ã‚‹ã¨ OP ã«è¦‹ãˆã¦ O
{{#tags}}- {{label}}
{{/tags}}