[B! security] yuroyoroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yuroyoro id:yuroyoro

securityã«é–¢ã™ã‚‹yuroyoroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (102)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚¤ãƒ©ã‚¹ãƒˆã§æ£ã—ãç†è§£ã™ã‚‹TLS 1.3ã®æš—å·æŠ€è¡“
ã‚¤ãƒ©ã‚¹ãƒˆã§æ£ã—ãç†è§£ã™ã‚‹TLS 1.3ã®æš—å·æŠ€è¡“ åˆã‚ã« ã“ã“ã§ã¯TLS 1.3ï¼ˆä»¥ä¸‹TLSã¨ç•¥è¨˜ï¼‰ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹æš—å·æŠ€è¡“ã‚’è§£èª¬ã—ã¾ã™ã€‚ ä¸»çœ¼ã¯TLSã®ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã¯ãªãã€ã€Œæš—å·æŠ€è¡“ã€ã®ç”¨èªžã®æŒ™å‹•ï¼ˆä½•ã‚’å…¥åŠ›ã—ã¦ä½•ã‚’å‡ºåŠ›ã™ã‚‹ã®ã‹ï¼‰ã¨ç›®çš„ã®ç†è§£ã§ã™ã€‚ å®Ÿéš›ã«ã©ã®ã‚ˆã†ãªæ–¹å¼ãªã®ã‹ã¨ã„ã£ãŸã€ã‚ˆã‚Šè©³ã—ã„èª¬æ˜Žã¯æ‹™è‘—ã€Žå›³è§£å³æˆ¦åŠ› æš—å·ã¨èªè¨¼ã®ã—ãã¿ã¨ç†è«–ãŒã“ã‚Œ1å†Šã§ã—ã£ã‹ã‚Šã‚ã‹ã‚‹æ•™ç§‘æ›¸ã€ï¼ˆæš—èªæœ¬ï¼‰ã‚„ã€Žæš—èªæœ¬ã€ã®å†…å®¹ã‚’ç´¹ä»‹ã—ãŸã‚¹ãƒ©ã‚¤ãƒ‰ã‚„å‹•ç”»ãªã©ã®è³‡æ–™é›†ã‚’ã”ã‚‰ã‚“ãã ã•ã„ã€‚ ãªãŠè¡¨é¡Œã®ã€Œã‚¤ãƒ©ã‚¹ãƒˆã§ã€ã¯æ•°å¼ã‚’ä½¿ã‚ãªã„ã¨ã„ã†ç¨‹åº¦ã®æ„å‘³ã§ã™ã€‚ TLSã§å®ˆã‚ŠãŸã„ã‚‚ã® TLSã¯ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿åŒå£«ãŒå®‰å…¨ã«é€šä¿¡ã™ã‚‹ãŸã‚ã®è¦æ ¼ã§ã™ã€‚ ä¸»ã«äººãŒãƒ–ãƒ©ã‚¦ã‚¶ã‚’ä»‹ã—ã¦ã€Œhttps://ã€ã§å§‹ã¾ã‚‹Webã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ãã«åˆ©ç”¨ã•ã‚Œã¾ã™ã€‚ å®‰å…¨ã«é€šä¿¡ã™ã‚‹ãŸã‚ã«ã¯ã€é€šä¿¡å†…å®¹ãŒç›—è´ã•ã‚Œã¦ã‚‚æƒ…å ±ãŒæ¼ã‚Œãªã„æ©Ÿå¯†æ€§ãŒå¿…è¦ã§ã™ã€‚ ãã‚Œã‹ã‚‰é€šä¿¡ãŒæ”¹
yuroyoro 2022/03/15
TLS

security
ãƒªãƒ³ã‚¯
Firefoxã¯å±é™ºãªJavaScriptã«å¯¾å¿œã—ãªã„ - Qiita
Firefox / Safari Mozillaã¯Mozilla Specification Positionsã¨ã„ã†ãƒªã‚¹ãƒˆã‚’å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ IETFã‚„W3Cã€TC39ãªã©ãŒæå”±ã—ã¦ã„ã‚‹WebæŠ€è¡“ã«å¯¾ã—ã¦ã€Mozillaã¯ã©ã®ã‚ˆã†ã«è©•ä¾¡ã—ã¦ã„ã‚‹ã‹ã¨ã„ã†ç«‹ã¡ä½ç½®ã‚’è¡¨æ˜Žã—ãŸã‚‚ã®ã§ã™ã€‚ ã‚ãã¾ã§ç¾æ™‚ç‚¹ã§ã®è©•ä¾¡ã§ã‚ã‚Šã€ã‚‚ã¡ã‚ã‚“ä»Šå¾Œã®ä»•æ§˜å¤‰æ›´ãªã©ã«ä¼´ã„è©•ä¾¡ã¯å¤‰ã‚ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ Mozilla's Positions Mozillaã¯ã©ã®ã‚ˆã†ã«è©•ä¾¡ã—ã¦ã„ã‚‹ã‹ã®åˆ†é¡žã€‚ under consideration è©•ä¾¡ã®æ¤œè¨Žä¸ã€‚ important å„ªã‚ŒãŸæ¦‚å¿µã§ã‚ã‚Šã€Mozillaã«ã¨ã£ã¦ã‚‚é‡è¦ã§ã‚ã‚‹ã€‚ worth prototyping å„ªã‚ŒãŸæ¦‚å¿µã§ã‚ã‚‹ãŒã€ãƒ—ãƒãƒˆã‚¿ã‚¤ãƒ—ã‚’ä½œæˆã—ã€ãƒ•ã‚£ãƒ¼ãƒ‰ãƒãƒƒã‚¯ã‚’å¾—ã¦ç£¨ãã‚’ã‹ã‘ã‚‹å¿…è¦ãŒã‚ã‚‹ã€‚ non-harmful æœ‰å®³ã§ã¯ãªã„ãŒã€è‰¯ã„ã‚¢ãƒ—ãƒãƒ¼ãƒã§ã¯ãªãã€å–ã‚Šçµ„ã‚€ä¾¡å€¤
yuroyoro 2021/07/15
browser

security

Chrome

firefox
ãƒªãƒ³ã‚¯
Secure Remote Password ãƒ—ãƒãƒˆã‚³ãƒ« Ruby ãƒ‡ãƒ¢ - Tociyuki::Diary
Secure Remote Password ãƒ—ãƒãƒˆã‚³ãƒ« (ç•¥å·ã¯ SRP) ç·æœ¬å±±ã®ã‚µã‚¤ãƒˆ http://srp.stanford.edu/ ã§å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ Javascript ã«ã‚ˆã‚‹ SRP-6a ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ãƒ»ãƒ‡ãƒ¢ http://srp.stanford.edu/demo/ ã‚’ Ruby ã«è¨³ã—ã¦ã¿ã¾ã—ãŸã€‚ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã¯1024ãƒ“ãƒƒãƒˆã®ã¿ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ â‡’ https://gist.github.com/790048 SRP-6a ã®ç‰¹å¾´ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã€Diffie-Hellman éµäº¤æ›ã«ä¼¼ãŸæ•°å¦ãƒ¢ãƒ‡ãƒ«ã‚’ä½¿ã£ã¦ä¸€é€£ã®ãƒãƒ£ãƒ¬ãƒ³ã‚¸ãƒ»ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’ãŠã“ãªã„ã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶å username ã¨å…±é€šéµã§ã‚ã‚‹å¹³æ–‡ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ password ã‚’ä½¿ã£ã¦ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒé–“ã§ãƒ¦ãƒ¼ã‚¶èªè¨¼ã‚’ãŠã“ãªã†ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã‚ã‚‹ã€‚ ã‚µãƒ¼ãƒã¯å¹³æ–‡ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ã‚µãƒ¼ãƒã¯ä¿å˜ã—ãªã„ã€‚ãƒãƒƒã‚·ãƒ¥å€¤ã‹ã‚‰æ±‚ã‚ãŸå·¨å¤§æ•´æ•°ã‚’
yuroyoro 2021/01/08
security
ãƒªãƒ³ã‚¯
SRP: Industry-Standard Strong Password Security
The Stanford SRP Homepage The Secure Remote Password protocol performs secure remote authentication of short human-memorizable passwords and resists both passive and active network attacks. Because SRP offers this unique combination of password security, user convenience, and freedom from restrictive licenses, it is the most widely standardized protocol of its type, and as a result is being used b
yuroyoro 2021/01/08
security
ãƒªãƒ³ã‚¯
SmartHRã«ãŠã‘ã‚‹AWS WAFé‹ç”¨è¡“ - SmartHR Tech Blog
ã“ã‚“ã«ã¡ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®å²©ç”°ã§ã™ã€‚SmartHRã§ã¯ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä¿è·ã™ã‚‹ãŸã‚AWS WAFã‚’åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚ä»Šå›žã¯SmartHRã«ãŠã‘ã‚‹AWS WAFã®é‹ç”¨äº‹ä¾‹ã‚’ã”ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ AWS WAFã¨ã¯? AWS WAFã¯Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã¸ã®æ”»æ’ƒã‚’æ¤œçŸ¥ãƒ»ãƒ–ãƒãƒƒã‚¯ã™ã‚‹ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã®ã‚µãƒ¼ãƒ“ã‚¹ã§ã™ã€‚ ç¾åœ¨ã€AWS WAFã«ã¯ AWS WAF v2 AWS WAF Classic ã®2ç¨®é¡žãŒã‚ã‚Šã¾ã™ã€‚ SmartHRã§ã¯v2ã®ãƒªãƒªãƒ¼ã‚¹ä»¥å‰ã‹ã‚‰AWS WAFã‚’ä½¿ç”¨ã—ã¦ãŠã‚Šã€ã¾ã v2ã¸ã®ç§»è¡Œã¯è¡Œã£ã¦ã„ãªã„ãŸã‚ã€ä»¥ä¸‹ã§è¨˜è¼‰ã™ã‚‹å†…å®¹ã¯å…¨ã¦AWS WAF Classicã®ã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚AWS WAF v2ã§ã¯è©²å½“ã—ãªã„äº‹é …ã‚‚ã‚ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã®ã§ã€ã”äº†æ‰¿ãã ã•ã„ã€‚ æ§‹æˆ ãƒªã‚½ãƒ¼ã‚¹ã®æ§‹æˆ AWS WAFã«é–¢é€£ã™ã‚‹ãƒªã‚½ãƒ¼ã‚¹ã®æ§‹æˆã¨å‡¦ç†ã®æ¦‚è¦ã¯ä»¥ä¸‹ã®é€šã‚Šã§
yuroyoro 2020/11/24
aws

WAF

security
ãƒªãƒ³ã‚¯
iOSã‚¢ãƒ—ãƒªå†…ã§ä¸æ£ãªSSLè¨¼æ˜Žæ›¸ã‚’æ¤œçŸ¥ã™ã‚‹ / SSL Pinning for iOS apps
iOSDC Japan 2018 8/31 14:20~14:50 @Track A Ask The Speakerã§ã®è³ªå•ã¨å›žç”ã‚’è¿½è¨˜ã—ã¾ã—ãŸ
yuroyoro 2019/12/19
iOS

TLS

security
ãƒªãƒ³ã‚¯
SMSã§é€ä¿¡å…ƒã‚’å½è£…ã—ãŸãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’é€ã‚‹
é€ä¿¡å…ƒè¡¨è¨˜ãŒé€ä¿¡è€…IDã®ã‚±ãƒ¼ã‚¹ SMSã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å—ä¿¡ã—ãŸéš›ã«è¡¨ç¤ºã•ã‚Œã‚‹é€ä¿¡å…ƒã«ã¯ã€é›»è©±ç•ªå·ã®ä»£ã‚ã‚Šã«ä»»æ„ã®è‹±æ•°å—ã‚‚è¡¨è¨˜ã§ãã‚‹ã€‚ã“ã®è‹±æ•°å—ã®é€ä¿¡å…ƒè¡¨è¨˜ã‚’ã€Œé€ä¿¡è€…IDï¼ˆSender IDï¼‰ã€ã¨ã„ã†ã€‚JC3ã®å›³ã§ã¯ é€šä¿¡äº‹æ¥è€…ï¼¡ ãŒé€ä¿¡è€…IDã«å½“ãŸã‚‹ã€‚ ãªãŠé€ä¿¡è€…IDã®åˆ©ç”¨å¯å¦ã¯å—ä¿¡å´ã®é€šä¿¡äº‹æ¥è€…ã®å¯¾å¿œçŠ¶æ³ã«ã‚ˆã£ã¦ç•°ãªã‚‹ã€‚Twilioã®è²©å£²ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ã§ã‚ã‚‹KWCã®èª¬æ˜Žã«ã‚ˆã‚‹ã¨ã€æ—¥æœ¬å›½å†…ã§ã¯NTT DOCOMOã¨SoftBankãŒé€ä¿¡è€…IDã«å¯¾å¿œã—ã€KDDIã¯å¯¾å¿œã—ã¦ã„ãªã„ã¨ã®ã“ã¨Â²ã€‚ç§ã¯KDDIã®å›žç·šã‚’æ‰€æœ‰ã—ã¦ã„ãªã„ãŸã‚ã€å—ä¿¡å´ãŒKDDIã®é›»è©±ç•ªå·ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹å ´åˆã®æŒ™å‹•ã¯æ¤œè¨¼ã§ãã¦ã„ãªã„ã€‚ ã¾ãšã¯iOSã®å…¬å¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚¢ãƒ—ãƒªã«å±Šã„ã¦ã„ãŸAmazonã‹ã‚‰ã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã®ã‚¹ãƒ¬ãƒƒãƒ‰ã§å½è£…ã‚’è©¦ã¿ã‚‹ã€‚é€ä¿¡è€…IDã¯ Amazon ã¨ãªã£ã¦ã„ã‚‹ãŸã‚ã€Twilioã§SMSã‚’é€ä¿¡ã™ã‚‹éš›ã®Fromã®å€¤ã« Ama
yuroyoro 2019/09/02
security
ãƒªãƒ³ã‚¯
æœ€è¿‘ã®ã‚„ã‚‰ã‚Œã‚¢ãƒ—ãƒªã‚’è©¦ã—ã¦ã¿ãŸ
2. è‡ªå·±ç´¹ä»‹ Shun Suzaki(æ´²å´Ž ä¿Š) ä¸‰äº•ç‰©ç”£ã‚»ã‚ãƒ¥ã‚¢ãƒ‡ã‚£ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³æ ªå¼ä¼šç¤¾ã«æ‰€å±ž ITã‚¤ãƒ™ãƒ³ãƒˆã®å‚åŠ ãƒ»é–‹å‚¬ã‚„æ—¥ã€…ã®è„†å¼±æ€§æ¤œè¨¼ã‚’ ãƒ©ã‚¤ãƒ•ãƒ¯ãƒ¼ã‚¯ã¨ã™ã‚‹ã€Œã¨ã‚ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã€ Twitter: ã¨ã‚ã‚‹è¨ºæ–å“¡@tigerszk â€¢ ISOG-J WG1 â€¢ Burp Suite Japan User Group â€¢ OWASP JAPAN Promotion Team â€¢ ITå‹‰å¼·ä¼šã€Œ#ssmjpã€é‹å–¶ãƒ¡ãƒ³ãƒãƒ¼ Iâ€˜M A CERTAIN PENTESTER! å…¬é–‹ã‚¹ãƒ©ã‚¤ãƒ‰:http://www.slideshare.net/zaki4649/ Blog:http://tigerszk.hatena blog.com/
yuroyoro 2019/08/07
security
ãƒªãƒ³ã‚¯
ãƒžãƒ«ã‚¦ã‚§ã‚¢è§£æžã«å¿…è¦ãªç´ é¤Š - HackMD
æœ¬æ›¸ã¯ã€ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒçµ¡ã‚“ã äº‹æƒ…ã‚’ä½“ç³»çš„ã«ã¾ã¨ã‚ã¦ã„ã‚‹ã€‚æ”»æ’ƒè€…ã€é˜²è¡›è€…ã€è§£æžè€…ã®å„è¦–ç‚¹ã‹ã‚‰"ãƒžãƒ«ã‚¦ã‚§ã‚¢"ã®ãƒãƒ§ãƒ¡ãƒãƒ§ãƒ¡ã‚’ç†è§£ã™ã‚‹ã“ã¨ã‚’ç›®æ¨™ã¨ã—ã¦ã„ã‚‹ã€‚
yuroyoro 2019/07/13
security
ãƒªãƒ³ã‚¯
ã€ŒäºŒæ®µéšŽèªè¨¼â€¦ï¼Ÿã€ã¨è¨€ã‚ãªã„ãŸã‚ã®MFAå…¥é–€ --- ã‚ã‚‹ã„ã¯IDã‚·ã‚¹ãƒ†ãƒ åœ°ç„ã¸ã®æ¡ˆå†… - ãƒ–ãƒã‚°ãªã‚“ã ã‚ˆã‚‚ã‚“
ã¯ã˜ã‚ã« ã•ã¦ã€7 Payã®ç¤¾é•·ãŒ2æ®µéšŽèªè¨¼çŸ¥ã‚‰ãªã‹ã£ãŸå•é¡ŒãŒè‰¯ã„æ„Ÿã˜ã«ç‚Žä¸Šã—ã¦ã„ã¾ã™ãã€‚ å€‹äººçš„ã«ã¯å¸¸ã«çŸ¥ã£ã¦ãŠãå¿…è¦ãŒçµ¶å¯¾ã‚ã‚‹ã‹ã¨ã„ã†ã¨å°‚é–€åˆ†é‡Žã®å•é¡ŒãŒã‚ã‚‹ã‹ã‚‰è°è«–ã®ä½™åœ°ã‚ã‚‹ã¨ã—ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å•é¡Œã§ä¼šè¦‹ã™ã‚‹ãªã‚‰éƒ¨ä¸‹ã«ã¡ã‚ƒã‚“ã¨ãƒ¬ã‚¯ã•ã›ã‚ã‚ˆã€ã¨ã¯æ€ã†ã€‚ 7 Payã¨MFAã®è©±ã¯ä¸‹è¨˜ã®å‹•ç”»ã§ã‚‚è©±ã—ãŸã‚“ã§ã™ãŒã€7 Payäº‘ã€…ã¯å¿˜ã‚Œã¦ã€Œãã‚‚ãã‚‚MFAã£ã¦ãªã«ï¼Ÿã€ã£ã¦ã¨ã“ã‚ã‚’ã‚‚ã†å°‘ã—æ•´ç†ã—ã¦ã¾ã¨ã‚ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ www.youtube.com èªè¨¼ã¨èªå¯ ã¾ãšã¯ãŠãã¾ã‚Šã®ã€Œèªè¨¼(Authentication)ã€ã¨ã€Œèªå¯(Authorization)ã€ã®é•ã„ã§ã™ã€‚ æ—¥æœ¬èªžã§æ›¸ã„ã¦ã‚‚è‹±èªžã§æ›¸ã„ã¦ã‚‚ã‚„ã‚„ã“ã—ã„ã®ã§ã™ãŒã€ã€Œèªè¨¼ã€ã¨ã¯ã€ŒIdentifyã€ã™ãªã‚ã¡èª°ã§ã‚ã‚‹ã‹ã®ç¢ºèªã§ã™ã€‚å¯¾ã—ã¦ã€Œèªå¯ã€ã¯ã€ŒAccess Controlã€ã™ãªã‚ã¡èª°ã«ä½•ã‚’ã•ã›ã‚‹äº‹ã‚’è¨±å¯ã™ã‚‹ã‹ã€ã¨ã„ã†äº‹ã§ã™ã€‚ åŸºæœ¬çš„ã«ã¯M
yuroyoro 2019/07/06
security
ãƒªãƒ³ã‚¯
DNS over TLS/HTTPSã«ã¤ã„ã¦è€ƒãˆã‚‹ | IIJ Engineers Blog
ã¯ã˜ã‚ã« æ˜¨å¹´ã‹ã‚‰ DNS over TLS ï¼ˆDoTï¼‰ã€DNS over HTTPS ï¼ˆDoHï¼‰ ã«ã¾ã¤ã‚ã‚‹å‹•ããŒæ€¥é€Ÿã«æ´»ç™ºã«ãªã£ã¦ã„ã¾ã™ã€‚ DoT ã¯2016å¹´ã« RFC7858 ãŒå‡ºã¦ã—ã°ã‚‰ãã¯å¤§ããªå‹•ãã¯ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸãŒã€2017å¹´11æœˆã«ã‚µãƒ¼ãƒ“ã‚¹é–‹å§‹ã—ãŸ public DNS ã§ã‚ã‚‹ Quad9 ï¼ˆ9.9.9.9ï¼‰ã€æ˜¨å¹´4æœˆé–‹å§‹ã® Cloudflare ï¼ˆ1.1.1.1ï¼‰ãŒç›¸æ¬¡ã„ã§ DoT ã«æ£å¼å¯¾å¿œã—ã€é…ã‚Œã¦ä»Šå¹´1æœˆã«ã¯ Google Public DNS ï¼ˆ8.8.8.8ï¼‰ ã‚‚å¯¾å¿œã—ã¾ã—ãŸã€‚ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã¨ã—ã¦ã¯æ˜¨å¹´8æœˆãƒªãƒªãƒ¼ã‚¹ã® Android 9 â€œPieâ€ ãŒ DoT ã«å¯¾å¿œã—ã¦ã„ã¾ã™ã€‚ DoH ã¯ä»•æ§˜ã®æ¨™æº–åŒ–ã‚ˆã‚Šå®Ÿè£…ã®æ–¹ãŒå…ˆè¡Œã—ã¦ã„ã¾ã™ã€‚Cloudflare ã¯ DoT ã ã‘ã§ãªã DoH ã‚‚æ˜¨å¹´4æœˆã®ã‚µãƒ¼ãƒ“ã‚¹é–‹å§‹å½“åˆã‹ã‚‰ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã™ã€‚Mozilla Fire
yuroyoro 2019/05/09
DNS

security
ãƒªãƒ³ã‚¯
æ”¿åºœã«ã‚ˆã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®æ¤œé–²ã¨SNIã«ã¤ã„ã¦
ã—ã‹ã—ä»Šå›žä¸€èˆ¬ã®äººã®ç›®ã«ã‚‚è§¦ã‚Œã‚‹å½¢ã§SNIã‚„HTTPSã®ã“ã¨ãŒå ±ã˜ã‚‰ã‚ŒãŸçµæžœã€ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚‚å«ã‚ã¦æ˜Žã‚‰ã‹ã«æŠ€è¡“ã«é–¢ã—ã¦å‹˜é•ã„ã‚’ã—ã¦ã„ã‚‹ã®ã§ã¯ãªã„ã‹ã¨æ„Ÿã˜ã‚‹ç™ºè¨€ã‚’è¦‹ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã—ãŸã€‚ã“ã®ã¾ã¾æ”¾ç½®ã™ã‚‹ã®ã‚‚è‰¯ããªã„ã¨æ„Ÿã˜ã¦ã„ã‚‹ã®ã§ã€Q&Aã¨ã„ã†å½¢ã§SNIã‚„HTTPSã«é–¢ã™ã‚‹èª¤è§£ã‚’å°‘ã—ã§ã‚‚è§£ã‘ã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ Q&AQ: ãã‚‚ãã‚‚SNIã£ã¦ä½•ï¼Ÿä»¥å‰æ›¸ã„ãŸè¨˜äº‹ã«ã‚‚æ›¸ã‹ã‚Œã¦ã„ã‚‹ã®ã§æ˜¯éžèªã‚“ã§ã¿ã¦ãã ã•ã„ã€‚ ç°¡å˜ã«èª¬æ˜Žã™ã‚‹ã¨ã€HTTPSã§ã¯SSL/TLSã‚’åˆ©ç”¨ã—ã¦é€šä¿¡ãŒæš—å·åŒ–ã•ã‚Œã¾ã™ã€‚ãªã®ã§1ã¤ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã§è¤‡æ•°ã®è¨¼æ˜Žæ›¸ã‚’æ‰±ãŠã†ã¨ã—ãŸå ´åˆã€æœ€åˆã®é€šä¿¡æ™‚ã«ã©ã®è¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã™ã‚Œã°ã„ã„ã‹åˆ†ã‹ã‚Šã¾ã›ã‚“ã€‚ãã“ã§SNIãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ SNIã¯æœ€åˆã®é€šä¿¡æ™‚ã«ä»Šã‹ã‚‰é€šä¿¡ã—ãŸã„ã‚µãƒ¼ãƒãƒ¼ãƒãƒ¼ãƒ ï¼ˆãƒ‰ãƒ¡ã‚¤ãƒ³åã¨è€ƒãˆã¦ãã ã•ã„ï¼‰ã‚’ã‚µãƒ¼ãƒãƒ¼ã«å¹³æ–‡ã§æ¸¡ã™ã“ã¨ã§ã€é€šä¿¡ã—ãŸã„SSLè¨¼æ˜Žæ›¸ã‚’æŒ‡å®šã§ãã¾ã™ã€‚SNIã¯ç¾åœ¨ã®ä¸€èˆ¬çš„ãªãƒ–ãƒ©ã‚¦
yuroyoro 2019/02/17
DNS

TLS

security
ãƒªãƒ³ã‚¯
.appã¨ã„ã†ç”»æœŸçš„ã§ã‚»ã‚ãƒ¥ã‚¢ãªgTLDã«ã¤ã„ã¦ - Lento con forza
.appã¨ã„ã†gTLDã‚’ã”å˜çŸ¥ã§ã—ã‚‡ã†ã‹ã€‚gTLDã¯generic top-level domainã®ç•¥å¾Œã§ã€ICANNãŒç®¡ç†ã—ã¦ã„ã‚‹ãƒˆãƒƒãƒ—ãƒ¬ãƒ™ãƒ«ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã“ã¨ã§ã™ã€‚ æœ‰åã©ã“ã‚ã§ã¯.comã‚„.netç‰ãŒã‚ã‚Šã¾ã™ã€‚ã“ã®ãƒ–ãƒã‚°ã®URLã¯ https://kouki.hatenadiary.com ã§ã™ãŒã€ã“ã®.comã®éƒ¨åˆ†ãŒãƒˆãƒƒãƒ—ãƒ¬ãƒ™ãƒ«ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ã™ã€‚*1 ã“ã®ãƒˆãƒƒãƒ—ãƒ¬ãƒ™ãƒ«ãƒ‰ãƒ¡ã‚¤ãƒ³ã¯ICANNã¨ã„ã†çµ„ç¹”ãŒç®¡ç†ã—ã¦ã„ã¾ã™ã€‚2012å¹´ã¾ã§ã¯é™ã‚‰ã‚ŒãŸãƒˆãƒƒãƒ—ãƒ¬ãƒ™ãƒ«ãƒ‰ãƒ¡ã‚¤ãƒ³ã—ã‹å˜åœ¨ã—ã¾ã›ã‚“ã§ã—ãŸãŒã€2012å¹´ã®å…¬å‹Ÿã§ã¯åŸºæº–ã‚’å®šã‚ã€ãã®åŸºæº–ã‚’æº€ãŸã—ãŸå›£ä½“ã¯è‡ªç”±ã«gTLDã‚’ä½œã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ã“ã‚Œä»¥é™å¤§é‡ã®ãƒˆãƒƒãƒ—ãƒ¬ãƒ™ãƒ«ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒç™»éŒ²ã•ã‚Œã€ä»Šã§ã¯æ§˜ã€…ãªãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ãã®ä¸ã®ä¸€ã¤ã€appãƒ‰ãƒ¡ã‚¤ãƒ³ãŒåŽ»å¹´è©±é¡Œã‚’å‘¼ã³ã¾ã—ãŸã€‚ appãƒ‰ãƒ¡ã‚¤ãƒ³ã¯ã‚»ã‚ãƒ¥ã‚¢ãªãƒ‰ãƒ¡ã‚¤ãƒ³ ãã‚“ãªappãƒ‰ãƒ¡ã‚¤ãƒ³
yuroyoro 2019/02/12
security
ãƒªãƒ³ã‚¯
ãƒªãƒ³ã‚¯ã‚’ä½œã‚‹æ™‚ã® target="_blank" ã®å±é™ºæ€§ - éš™ã‚ã‚‰ã°å¯ã‚‹
html ã§ ãƒªãƒ³ã‚¯ã‚’æ–°ã—ã„ã‚¿ãƒ–(ã‚„ã‚¦ã‚£ãƒ³ãƒ‰ã‚¦)ã§é–‹ã‹ã›ãŸã„å ´åˆã€target="_blank" ã‚’æŒ‡å®šã™ã‚‹ãŒã€ ã“ã®ä½¿ã„æ–¹ã«ã¯è½ã¨ã—ç©´ãŒã‚ã‚‹ã‚‰ã—ã„ã€‚ www.jitbit.com ãƒªãƒ³ã‚¯ã‚’é–‹ã„ãŸå…ˆã® javascript ã‹ã‚‰ã€é–‹ã„ãŸå…ƒã®ãƒšãƒ¼ã‚¸ã‚’æ“ä½œã§ãã¦ã—ã¾ã†ã¨ã®ã“ã¨ã€‚ æ°—ã«ãªã£ãŸã®ã§ç¢ºèªã—ã¦ã¿ãŸã€‚ æ‚ªç”¨ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ insecure.html ãŒæœ€åˆã«é–‹ããƒšãƒ¼ã‚¸ã§ã€ã“ã“ã« target="_blank" ãªãƒªãƒ³ã‚¯ãŒã‚ã‚‹ã€‚ ã“ã®ãƒªãƒ³ã‚¯ã‚’æŠ¼ã™ã¨ new_window.html ã‚’æ–°ã—ã„ã‚¿ãƒ–ã§é–‹ãã€‚ ã“ã® new_window.html ã« javascript ãŒä»•è¾¼ã¾ã‚Œã¦ãŠã‚Šã€å…ƒãƒšãƒ¼ã‚¸ã‚’æ“ä½œã•ã‚Œã‚‹ã¨ã„ã†è©±ã€‚ å…·ä½“çš„ã«ã¯ window.opener.location="./evil.html" ã¨å®Ÿè¡Œã™ã‚‹ã¨ã€å…ƒã‚¿ãƒ–ã¯ evil.html ã«é·ç§»ã™ã‚‹ã€‚ å®Ÿéš›è©¦ã—ã¦ã¿ãŸã®ãŒ ã“ã“ã€‚ ãƒªãƒ³ã‚¯ã‚’é–‹
yuroyoro 2019/02/07
security
ãƒªãƒ³ã‚¯
Webãƒ‡ãƒã‚¤ã‚¹ãƒˆãƒ©ãƒƒã‚ãƒ³ã‚°æ‰‹æ³•ã®ç´¹ä»‹
ã‚µã‚¤ãƒãƒ¼ã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã®å®Ÿè·µÃ—å®Ÿé¨“Snowflake å°Žå…¥ã®çµŒç·¯ã‹ã‚‰æœ€æ–°æ©Ÿèƒ½ã®ãƒˆãƒ©ã‚¤ã‚¢ãƒ«ã¾ã§ / How Snowflake Is Used In CyberAgent - Go To the Future
yuroyoro 2019/01/22
security
ãƒªãƒ³ã‚¯
å¾³ä¸¸æµ©ã®æ—¥è¨˜: SSRF(Server Side Request Forgery)å¾¹åº•å…¥é–€
SSRF(Server Side Request Forgery)ã¨ã„ã†è„†å¼±æ€§ãªã„ã—æ”»æ’ƒæ‰‹æ³•ãŒæœ€è¿‘æ³¨ç›®ã•ã‚Œã¦ã„ã¾ã™ã€‚ä»¥ä¸‹ã¯ã€ã“ã“3ãƒ¶æœˆã«SSRFã«ã¤ã„ã¦è¨€åŠã•ã‚ŒãŸè¨˜äº‹ã§ã™ã€‚ EC2ä¸Šã®AWS CLIã§ä½¿ã‚ã‚Œã¦ã„ã‚‹169.254ã«ã¤ã„ã¦ SSRFè„†å¼±æ€§ã‚’åˆ©ç”¨ã—ãŸGCE/GKEã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã¸ã®æ”»æ’ƒä¾‹ SSRFã‚’åˆ©ç”¨ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ä¹—ã£å–ã‚Š ã€ŒCODE BLUE 2018ã€å‚åŠ ãƒ¬ãƒãƒ¼ãƒˆï¼ˆå²©é–“ç·¨ï¼‰ ã“ã®ã€Œç©ºå‰ã®SSRFãƒ–ãƒ¼ãƒ ã€ã«ä¾¿ä¹—ã—ã¦ã€SSRFã¨ã„ã†æ”»æ’ƒæ‰‹æ³•ãŠã‚ˆã³è„†å¼±æ€§ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ SSRFæ”»æ’ƒã¨ã¯ SSRFæ”»æ’ƒã¨ã¯ã€æ”»æ’ƒè€…ã‹ã‚‰ç›´æŽ¥åˆ°é”ã§ããªã„ã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã™ã‚‹æ”»æ’ƒæ‰‹æ³•ã®ä¸€ç¨®ã§ã™ã€‚ä¸‹å›³ã«SSRFæ”»æ’ƒã®æ§˜åã‚’ç¤ºã—ã¾ã™ã€‚ æ”»æ’ƒè€…ã‹ã‚‰ã¯ã€å…¬é–‹ã‚µãƒ¼ãƒãƒ¼ï¼ˆ203.0.113.2ï¼‰ã«ã¯ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¾ã™ãŒã€å†…éƒ¨ã®ã‚µãƒ¼ãƒãƒ¼ï¼ˆ192.168.0.5ï¼‰ã¯ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã§éš”é›¢ã•ã‚Œã¦ã„ã‚‹ãŸã‚å¤–éƒ¨ã‹ã‚‰ç›´æŽ¥
yuroyoro 2018/12/05
security
ãƒªãƒ³ã‚¯
ã©ã†ã—ã¦ JWT ã‚’ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ä½¿ã£ã¡ã‚ƒã†ã‚ã‘ï¼Ÿ - co3k.org
å‚™è€ƒ 2018/09/21 22:15 è¿½è¨˜ 2018/09/20 12:10 ã«å…¬é–‹ã—ãŸã€Œã©ã†ã—ã¦ JWT ã‚’ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ä½¿ã£ã¡ã‚ƒã†ã‚ã‘ï¼Ÿã€ã¨ã„ã†ã‚¿ã‚¤ãƒˆãƒ«ãŒä¸é©åˆ‡ã ã¨ã”æŒ‡æ‘˜ã‚’ã„ãŸã ã„ã¦ã„ã¾ã™ã€‚ ãã®æ„è¦‹ã¯ã‚‚ã£ã¨ã‚‚ã ã¨æ€ã„ã¾ã™ã®ã§ã€ç¾åœ¨ã€é©åˆ‡ã¨ãªã‚‹ã‚ˆã†ã«ã‚¿ã‚¤ãƒˆãƒ«ã‚’èª¿æ•´ã—ã¦ã„ã¾ã™ã€‚ ã”è¿·æƒ‘ãŠã‚ˆã³ãŠé¨’ãŒã›ã‚’ã—ã¦å¤§å¤‰ç”³ã—è¨³ã”ã–ã„ã¾ã›ã‚“ã€‚ æœ¬æ–‡ã®è¡¨ç¾ã«ã¤ã„ã¦ã‚‚æ”¹å–„ã®ä½™åœ°ã¯å¤§ã„ã«ã‚ã‚Šãã†ã§ã™ãŒã€ã“ã¡ã‚‰ã¯ (ã™ã§ã«ã”æ„è¦‹ã‚’é ‚æˆ´ã—ã¦ã„ã‚‹é–¢ä¿‚ã§ã€) ä¸»å¼µãŒå¤‰ã‚ã£ã¦ã—ã¾ã‚ãªã„ã‚ˆã†ã«é…æ…®ã—ã¤ã¤æ…Žé‡ã«èª¿æ•´ã•ã›ã¦ã„ãŸã ãã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ ã¯ã‚ã‚ã‚ã€œã€œã€œã€œé ¼ã‚€ã‹ã‚‰ã“ã¡ã‚‰ã‚‚å¿™ã—ã„ã®ã§ã“ã‚“ãªã‚¨ãƒ³ãƒˆãƒªã‚’æ›¸ã‹ã›ãªã„ã§ã»ã—ã„ (æŒ¨æ‹¶)ã€‚ã‚‚ã—ãã¯åƒ•ã‚’æš‡ã«ã—ã¦ã“ã†ã„ã†ã‚¨ãƒ³ãƒˆãƒªã‚’æ›¸ã‹ã›ã‚‹ãŸã‚ã®ãƒ—ãƒã‚°ãƒ©ãƒžãƒ¼ã‚’å‹Ÿé›†ã—ã¦ã„ã¾ã™ (æŒ¨æ‹¶)ã€‚ JWT (JSON Web Token; RFC 7519) ã‚’å……åˆ†ãªãƒªã‚¹ã‚¯ã®è¦‹ç©ã‚‚ã‚Šã‚’ã›ãšã‚»ãƒƒã‚·
yuroyoro 2018/09/20
JWT

security
ãƒªãƒ³ã‚¯
20åˆ†ã§ã‚ã‹ã‚‹gVisorå…¥é–€
2018å¹´5æœˆ28æ—¥é–‹å‚¬ ã€ŽContainer SIG 2018 Summerã€ã®ã‚¹ãƒ©ã‚¤ãƒ‰è³‡æ–™ã§ã™ã€‚Read less
yuroyoro 2018/05/29
linux

docker

container

gVisor

security

kernel
ãƒªãƒ³ã‚¯
HTTP/2, QUICã‹ã‚‰TLS1.3ã¸
HTTP/2, QUICã‹ã‚‰TLS1.3ã¸ å¤§æ´¥ ç¹æ¨¹ æ ªå¼ä¼šç¤¾ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ–(IIJ) Internet Week 2015 2015/11/18 2015å¹´11æœˆ19æ—¥æ›´æ–°ç‰ˆ è‡ªå·±ç´¹ä»‹ â€¢ å¤§æ´¥ ç¹æ¨¹ â€¢ æ ªå¼ä¼šç¤¾ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ–(IIJ) â€¢ ãƒ—ãƒãƒ€ã‚¯ãƒˆæœ¬éƒ¨ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºéƒ¨ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™º2èª² â€¢ Node.JS Technical Steering Committee ãƒ¡ãƒ³ãƒãƒ¼ â€¢ (ä¸»ã«TLS/CRYPTO/OpenSSLãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’æ‹…å½“ï¼‰ â€¢ IETF httpbis WG ã§ HTTP/2ç›¸äº’æŽ¥ç¶šè©¦é¨“ç‰ä»•æ§˜ç–å®šã«å‚ç”»ã€‚ã—ã‹ã— TLS1.3ã®æ¨™æº–ç–å®šä½œæ¥ã«ã¯ã“ã‚Œã¾ã§ç›´æŽ¥ã‹ã‹ã‚ã£ã¦ã„ã¾ã›ã‚“ã€‚ â€¢ ãƒ–ãƒã‚°ï¼š http://d.hatena.ne.jp/jovi0608/ ã§TLSå‘¨ã‚Šã®ãƒã‚¿ã‚’ã„ã‚ã„ã‚ æ›¸ã„ã¦ã„ã¾ã™ã€‚ å†…å®¹ ç¾åœ¨ä»•æ§˜ç–å®šä½œæ¥ä¸ã®TL
yuroyoro 2018/02/16
TLS

security

http2
ãƒªãƒ³ã‚¯
ä»ŠãªãœHTTPSåŒ–ãªã®ã‹ï¼Ÿã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ä¿¡é ¼æ€§ã®ãŸã‚ã«ã€æŠ€è¡“è€…ãŒçŸ¥ã£ã¦ãŠããŸã„TLSã®æ´å²ã¨æŠ€è¡“èƒŒæ™¯
ã€å¤‰æ›´å±¥æ´ 2018å¹´2æœˆ15æ—¥ã€‘å½“åˆã®è¨˜äº‹ã‚¿ã‚¤ãƒˆãƒ«ã¯ã€Œã„ã¾ãªãœHTTPSåŒ–ãªã®ã‹ï¼Ÿ æŠ€è¡“è€…ãŒçŸ¥ã£ã¦ãŠããŸã„SEOã‚ˆã‚Šãšã£ã¨å¤§åˆ‡ãªã“ã¨ â€• TLSã®æ´å²ã¨æŠ€è¡“èƒŒæ™¯ã€ã§ã—ãŸãŒã€ç¾è¡Œã®ã‚‚ã®ã«å¤‰æ›´ã—ã¾ã—ãŸã€‚ç¾åœ¨Googleã§ã¯Webã‚µã‚¤ãƒˆã®HTTPSå¯¾å¿œã¨æ¤œç´¢çµæžœã®é–¢ä¿‚ã‚’å¼·èª¿ã—ã¦ãŠã‚‰ãšã€æœ¬è¨˜äº‹ã®è¶£æ—¨ã®ä¸€ã¤ã«ã‚‚æœ¬æ¥ã¯ç‹¬ç«‹ã—ãŸå•é¡Œã§ã‚ã‚‹SEOã¨HTTPSåŒ–ã‚’é–¢é€£ä»˜ã‘ã‚‹ã¨ã„ã†æ ¹å¼·ã„èª¤è§£ã‚’è§£ãã“ã¨ãŒã‚ã‚Šã¾ã™ãŒã€å½“åˆã®ã‚¿ã‚¤ãƒˆãƒ«ã§ã¯ã‹ãˆã£ã¦SEOã¨HTTPSã‚’é–¢é€£ä»˜ã‘ã¦èªã¾ã‚Œã‚‹ãŠãã‚ŒãŒã‚ã‚Šã€ã¾ãŸåŒæ§˜ã®æŒ‡æ‘˜ã‚‚ã„ãŸã ã„ãŸã“ã¨ã‹ã‚‰å¤‰æ›´ã„ãŸã—ã¾ã—ãŸã€‚ HTTPã¨HTTPSã¯ã€å…±ã«TCPé€šä¿¡ä¸Šã§å‹•ä½œã—ã¾ã™ã€‚ã—ãŸãŒã£ã¦ã€ã„ãšã‚Œã‚‚TCPãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã§é€šä¿¡ã‚’é–‹å§‹ã—ã¾ã™ã€‚ HTTPé€šä¿¡ã®å ´åˆã«ã¯ã€ã“ã®TCPãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ç›´å¾Œã«ã€HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®ã‚„ã‚Šå–ã‚ŠãŒå§‹ã¾ã‚Šã¾ã™ã€‚ã“ã®HTTPã®ã‚„ã‚Šå–ã‚Šã¯å¹³æ–‡é€šä¿¡ã§ã‚ã‚Šã€é€”
yuroyoro 2018/02/14
TLS

security

http2
ãƒªãƒ³ã‚¯
1 2 3 4 5 6 æ¬¡ã®ãƒšãƒ¼ã‚¸