[B! ssl][SSL] cubed-lã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

cubed-l id:cubed-l

sslã¨SSLã«é–¢ã™ã‚‹cubed-lã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (75)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘
1. SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ãƒ£ãƒ³ãƒ— 2015 2015å¹´8æœˆ12æ—¥ IIJ å¤§æ´¥ ç¹æ¨¹ æ›´æ–°ç‰ˆè³‡æ–™ã®ç½®å ´ http://goo.gl/cX1M17 Github Repo: https://goo.gl/vRLzrj 2. è‡ªå·±ç´¹ä»‹ â€¢ å¤§æ´¥ ç¹æ¨¹ â€¢ æ ªå¼ä¼šç¤¾ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ– â€¢ ãƒ—ãƒãƒ€ã‚¯ãƒˆæœ¬éƒ¨ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºéƒ¨ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™º2èª² â€¢ NodeJS Technical Committee ãƒ¡ãƒ³ãƒãƒ¼ â€¢ (ä¸»ã«TLS/CRYPTO/OpenSSLãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’æ‹…å½“ï¼‰ â€¢ IETF httpbis WG ã§ HTTP/2ç›¸äº’æŽ¥ç¶šè©¦é¨“ç‰ä»•æ§˜ç–å®šã«å‚ç”»ã€‚ â€¢ ãƒ–ãƒã‚°ï¼š http://d.hatena.ne.jp/jovi0608/ 3. ã¯ã˜ã‚ã« â€¢ TLS(Transport Layer Security)ã®ä»•çµ„ã¿ã«ã¤ã„ã¦å¦ã‚“ã§ã„ãŸã ã ã¾ã™ã€‚ â€¢
cubed-l 2015/08/14
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã€å¹´é¡1500å††ã§åˆ©ç”¨ã§ãã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼SSLã€Œãƒ©ãƒ”ãƒƒãƒ‰SSLã€ã€€
cubed-l 2015/08/03
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
ç´°ã‹ã™ãŽã¦ä¼ã‚ã‚‰ãªã„SSL/TLS
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã€Œç´°ã‹ã„ã¨è¨€ã†ã‚ˆã‚Šé•·ã„ã‚ˆãã€ ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€‚ATS ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸå°æŸ´ã•ã‚“ã‚„ ATS ã« HTTP/2 ã®å®Ÿè£…ã‚’è¡Œã£ã¦ã„ã‚‹å¤§ä¹…ä¿ã•ã‚“ã¨åŒã˜ãƒãƒ¼ãƒ ã®ä¸€å¹´ç›®ã€åŒ¿åç¤¾å“¡M ã•ã‚“ã‹ã‚‰ã„ã˜ã‚‰ã‚Œã¦ã„ã‚‹æ–°äººã§ã™ã€‚ä»Šå›žã‚ã‚ŠãŒãŸã„äº‹ã«ã€ã“ã†ã„ã£ãŸã™ã”ã„æ–¹ã€…ã‚’å«ã‚ãƒ¢ãƒ’ã‚«ãƒ³è«¸å…ˆè¼©æ–¹ã‚ˆã‚Šã€Œä½•ã‹æ›¸ã‹ãªã„ã®ï¼Ÿã€ã€Œã„ã¤æ›¸ãã®ï¼Ÿã€ã¨ã„ã†æ•°ã€…ã®ãƒ—ãƒ¬ãƒƒã‚·ãƒ£ãƒ¼ãŠè¨€è‘‰ã‚’ã„ãŸã ãã¾ã—ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ã€SSL/TLS ã® Session å†é–‹æ©Ÿèƒ½ã«é–¢ã—ã¦æ›¸ã„ã¦ã„ã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ SSL/TLS ã¯æ©Ÿå¯†æ€§ã€å®Œå…¨æ€§ãã—ã¦çœŸæ£æ€§ã«å¯¾ã—ã¦å®‰å…¨ãªé€šä¿¡ã‚’è¡Œã†ãŸã‚ã®ä»•çµ„ã¿ã§ã™ã€‚ã—ã‹ã—ã€ã“ã®ä»•çµ„ã¿ã¯æš—å·æŠ€è¡“ã‚’å¤šç”¨ã—ç‰¹ã«æŽ¥ç¶šã«ãŠã„ã¦è¤‡é›‘ãªãƒ—ãƒãƒˆã‚³ãƒ«ã‚’ç”¨ã„ã€Client, Se
cubed-l 2015/01/21
ssl
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : POODLEæ”»æ’ƒã«ã¤ã„ã¦æœ¬å½“ã«TLSv1.0ãªã‚‰å®‰å…¨ãªã®ã‹ï¼Ÿ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
åŸºæœ¬ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆãè¶£å‘³ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKIãƒ»ç½²åãƒ»èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚æ—…å¥½ãã€‚ãƒ†ãƒ¬ãƒ“å¥½ãã§èŠ¸èƒ½é€š POODLEæ”»æ’ƒã¯ã€é‹ç”¨æ³£ã‹ã›ã¨ã„ã†ã‹ã€SSLv3ã®ã‚µãƒãƒ¼ãƒˆã‚’æœ¬å½“ã«åˆ‡ã£ã¡ã‚ƒã£ã¦ã„ã„ã®ã‹ã€ãƒ¬ã‚¬ã‚·ãƒ¼ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã¤ã„ã¦å¯¾å¿œã™ã‚‹ã®ãŒã„ã„ã®ã‹ã€æ‚©ã‚€æ‰€ã§ã™ã‚ˆãã€‚ShellShocké¨’ãŽã•ãˆã¾ã ã†ã¡ã§ã¯åŽæŸã—ã¦ã„ãªã„ã®ã«ãƒ»ãƒ»ãƒ» POODLEæ”»æ’ƒã¯ã€ã€ŒSSLv3ã®å•é¡Œã§ã‚ã£ã¦TLSv1.0ä»¥ä¸Šã§ã¯(ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã®æ–¹æ³•ãŒé•ã†ã®ã§)å½±éŸ¿ãŒç„¡ã„ã€ã¨ã•ã‚Œã¦ã„ã¾ã™ãŒã€nahiã•ã‚“ã‹ã‚‰ã‚³ãƒ¡ãƒ³ãƒˆã‚‚ã‚‰ã£ã¦ã€Œå®Ÿè£…ä¾å˜ã ã‘ã©TLSv1.0ã§ã‚‚å±é™ºãªå®Ÿè£…ãŒã‚ã‚‹ã‚“ã˜ã‚ƒãªã„ã®ï¼Ÿã€ã¨ã„ã†ã“ã¨ã§ã€ãã®äº‹ã‚’æ›¸ã„ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ä»Šå›žã®POODLEæ”»æ’ƒã«ã¤ã„ã¦ã¯ã€ä½•ãŒå•é¡Œã§ã©ã®ã‚ˆã†ã«ã™ã‚Œã°æ”»æ’ƒã§ãã‚‹ã®ã‹ã¨ã„ã†ã€è©³ã—ã„å›³å…¥ã‚Šã®ç´ æ™´ã‚‰ã—ãåˆ¤ã‚Šã‚„ã™ã„è§£èª¬ã‚’ãƒ¢ãƒã‚²ãƒ¼ã•ã‚“ãŒ ã€ŒSSL v3.
cubed-l 2014/10/26
ssl
ãƒªãƒ³ã‚¯
OpenSSLã®è„†å¼±æ€§(CVE-2014-3511)ã§TLSãƒ—ãƒãƒˆã‚³ãƒ«ã®åŸºç¤Žã‚’å¦ã¶ - ã¼ã¡ã¼ã¡æ—¥è¨˜
1. ã¯ã˜ã‚ã«ã€ æ˜¨æ—¥ OpenSSLã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ãŒã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã€ï¼™ã¤ã®è„†å¼±æ€§ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã®æ•°æ—¥å‰ã«OpenSSLã®æ¬¡æœŸãƒªãƒªãƒ¼ã‚¹äºˆå‘ŠãŒã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã¦ã„ã¾ã—ãŸãŒã€ã¡ã‚‡ã†ã© BlackHat é–‹å‚¬åˆæ—¥ã«ã‚ãŸã‚‹ã“ã¨ã‚‚ã‚ã‚Šã€ãªã‚“ã‹ã¾ãŸé‡å¤§ãªè„†å¼±æ€§ã®ä¿®æ£ãŒå…¥ã‚‹ã‚“ã˜ã‚ƒãªã„ã‹ã¨ãƒ‰ã‚ãƒ‰ã‚ã—ã¦ã„ã¾ã—ãŸã€‚è“‹ã‚’é–‹ã‘ã¦ã¿ã‚‹ã¨HeatBleedç¨‹ã®å¤§äº‹ã§ã¯ãªããƒ›ãƒƒãƒˆã²ã¨å®‰å¿ƒã§ã™ã€‚ æ˜¨æ—¥å…¬é–‹ã•ã‚ŒãŸOpenSSLã®ï¼™ã¤ã®è„†å¼±æ€§ã®ã†ã¡ã€TLS ãƒ—ãƒãƒˆã‚³ãƒ«ãƒ€ã‚¦ãƒ³ã‚°ãƒ¬ãƒ¼ãƒ‰æ”»æ’ƒ (CVE-2014-3511)ã®ä¿®æ£ã‚’è¦‹ã¦ã„ãŸã¨ã“ã‚ã€ã“ã‚Œã¯TLSãƒ—ãƒãƒˆã‚³ãƒ«ã‚’å¦ã¶ã„ã„é¡Œæã«ãªã‚‹ãªãã¨ãµã¨æ€ã„ã¤ãã€è©¦ã—ã«ã“ã®Opensslã®è„†å¼±æ€§ã®è©³ç´°ã‚’TLSãƒ—ãƒãƒˆã‚³ãƒ«ã®åŸºç¤Žã«åˆã‚ã›ã¦æ›¸ã„ã¦ã¿ã¾ã—ãŸã€‚ ã¡ã‚‡ã£ã¨é•·ã„ã§ã™ãŒã€TLSãƒ—ãƒãƒˆã‚³ãƒ«ã®ä»•çµ„ã¿ï¼ˆã®ä¸€éƒ¨ï¼‰ã‚’çŸ¥ã‚ŠãŸã„æ–¹ã¯ãŠèªã¿ãã ã•ã„ã€‚ 2. OpenSSLã®è„†å¼±æ€§
cubed-l 2014/08/09
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
è‡ªç¤¾ã‚µãƒ¼ãƒã¨äº¤ä¿¡ã™ã‚‹ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ‰‹æ³•ã«ã¤ã„ã¦ï¼ˆSSL Pinningã¨ç‹¬è‡ªCAå†è€ƒï¼‰
â– èƒŒæ™¯ è‡ªç¤¾ã®ã‚µãƒ¼ãƒã¨é€šä¿¡ã™ã‚‹è‡ªç¤¾ã‚¢ãƒ—ãƒªã«ã¤ã„ã¦ã€æœ¬æ¥ä¸è¦ã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšä»–ç¤¾ã§ã‚ã‚‹CAã«èªè¨¼æƒ…å ±ã®ç®¡ç†ã‚’å§”è¨—ã™ã‚‹ã“ã¨ãŒå¤šã„ã‚ã‘ã§ã™ãŒã€CAãŒè¨¼æ˜Žæ›¸ã‚’èª¤ç™ºè¡Œã—ãŸçµæžœæƒ…å ±æ¼æ´©ãŒç™ºç”Ÿã—ãŸã¨ã—ã¦ã€ãã®è²¬ä»»ã¯è‡ªç¤¾ã«ã¯ãªã„ã¨ä¸»å¼µã§ãã‚‹ã®ã‹ã€ã‚‚ã†ä¸€åº¦è€ƒãˆãªãŠã—ãŸã»ã†ãŒã„ã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨æ€ã†ã‚“ã§ã™ â€” Kazuho Oku (@kazuho) July 15, 2014 .@ockeghem @smbd @ando_Tw ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã®æä¾›ã«ãŠã„ã¦ã¯ã‚³ãƒ¼ãƒ‰ã®ç½²åéµã‚’å®‰å…¨ã«ç®¡ç†ã™ã‚‹ã“ã¨ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ãŒã€ãã®å‰æã«ãŠã„ã¦é€šä¿¡ç›¸æ‰‹ã®èªè¨¼ç®¡ç†ã‚’CAã«å§”è¨—ã™ã‚‹ã“ã¨ã«ã©ã‚Œã»ã©ã®æ„å‘³ãŒã‚ã‚‹ã‚“ã§ã—ã‚‡ã† â€” Kazuho Oku (@kazuho) July 14, 2014 â– ä»–ç¤¾CAã¯ä¿¡é ¼ã§ãã‚‹ã®ã‹ ç‰¹å®šã®CAã«pinningã™ã‚‹ã®ã¯ã—ãªã„ã‚ˆã‚Šå®‰å…¨ã ã‘ã©ã€ãã‚‚ãã‚‚èª¤ç™ºè¡Œã—ãªã„CAãªã‚“ã¦ã‚ã‚‹ã®ã‹ã¨ã„ã†è°è«–ã¯é‡è¦ã€‚è¦‹çŸ¥
cubed-l 2014/07/15
SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
OpenSSLã«ã¯ã“ã‚“ãªã«å•é¡ŒãŒ! LibreSSLé–‹ç™ºè€…ãŒç™ºè¡¨ - BSDCan2014
The OpenBSD project produces a FREE, multi-platform 4.4BSD-based UNIX-like operating system. OpenBSDãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®é–‹ç™ºè€…ã§ã‚ã‚ŠLibreSSLã®é–‹ç™ºã«æºã‚ã£ã¦ã„ã‚‹Bob Beckæ°ã¯5æœˆ17æ—¥(ã‚«ãƒŠãƒ€æ™‚é–“)ã€ã€ŒBSDCan2014: LibreSSLã€ã«ãŠã„ã¦LibreSSLã®é–‹ç™ºãŒã¯ã˜ã¾ã£ã¦ã‹ã‚‰ã®ãŠãŠã‚ˆã30æ—¥é–“ã®ã§ãã”ã¨ã‚’ä¼ãˆãŸã€‚ãªãœOpenSSLã‹ã‚‰LibreSSLã‚’æ´¾ç”Ÿã•ã›åˆ¥ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã¨ã—ã¦å–ã‚Šçµ„ã‚€ã“ã¨ã«ã—ãŸã®ã‹ã€å…·ä½“çš„ã«ã©ã†ã„ã£ãŸå¤‰æ›´ã‚’å®Ÿæ–½ã—ãŸã®ã‹ãªã©ãŒèª¬æ˜Žã•ã‚ŒãŸã€‚ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã‚’ç«‹ã¡ä¸Šã’ã‚‹ãã£ã‹ã‘ã¯Heartbleedè„†å¼±æ€§ãŒæ±ºã‚æ‰‹ã ã£ãŸã®ã§ã¯ãªãã€ãã®ã‚ã¨ã«å–ã‚Šçµ„ã‚“ã ä½œæ¥ã«ã‚ˆã£ã¦åˆ¥ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«ã™ã‚‹ã¨ã„ã†åˆ¤æ–ãŒæ±ºå®šçš„ãªã‚‚ã®ã«ãªã£ãŸã¨èª¬æ˜ŽãŒã‚ã£ãŸã€‚æ‡¸å¿µã•ã‚ŒãŸç‚¹ã¯ç‰¹ã«æ¬¡ã®ã¨ãŠã‚Šã€‚
cubed-l 2014/05/19
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
httpsã ã‹ã‚‰ã¨ã„ã†ã ã‘ã§å®‰å…¨ï¼Ÿèª¿ã¹ãŸã‚‰æ€–ããªã£ã¦ããŸSSLã®è©±!ï¼Ÿ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
cubed-l 2014/03/15
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®æ£ã—ã„ä½¿ã„æ–¹ï¼ˆã‚‚ã—ãã¯ã€ã‚³ãƒ¢ãƒ³ãƒãƒ¼ãƒ ã®æ¤œè¨¼ã«ã¤ã„ã¦ï¼‰
ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã®å¸‚å ´æ‹¡å¤§ã«ä¼´ã„ã€ç›´æŽ¥SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ä½¿ç”¨ã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’æ›¸ãæ©Ÿä¼šã‚‚å¢—ãˆã¦ãã¦ã„ã‚‹ä»Šæ—¥ã“ã®é ƒã‹ã¨æ€ã„ã¾ã™ã€‚ SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ä½¿ã†éš›ã«ã¯ã€æŽ¥ç¶šç¢ºç«‹æ™‚ã«ã‚µãƒ¼ãƒã®èªè¨¼ã‚’æ£ã—ãè¡Œã†å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚å…·ä½“çš„ã«ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒ—ãƒã‚°ãƒ©ãƒ ã§ä»¥ä¸‹ã®ï¼’ç¨®é¡žã®æ¤œè¨¼ã‚’è¡Œã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒã‚µãƒ¼ãƒã®è¨¼æ˜Žæ›¸ã®æ¤œè¨¼ã«æˆåŠŸã—ãŸã“ã¨ ã‚µãƒ¼ãƒã®è¨¼æ˜Žæ›¸ã«å«ã¾ã‚Œã‚‹ã‚³ãƒ¢ãƒ³ãƒãƒ¼ãƒ æ³¨1ãŒæŽ¥ç¶šã—ã‚ˆã†ã¨ã—ãŸã‚µãƒ¼ãƒã¨åŒä¸€ã§ã‚ã‚‹ã“ã¨ å‰è€…ã«ã¤ã„ã¦ã¯ã€OpenSSLã®å ´åˆã¯SSL_CTX_set_verifyã®å¼•æ•°ã«SSL_VERIFY_PEERã‚’æŒ‡å®šã™ã‚‹ãªã©ã—ã¦ã€ãƒ©ã‚¤ãƒ–ãƒ©ãƒªå´ã§å‡¦ç†ã‚’è¡Œã‚ã›ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ï¼ˆè¨¼æ˜Žæ›¸ã®æ¤œè¨¼ã«å¤±æ•—ã—ãŸå ´åˆã¯SSL_connectãŒã‚¨ãƒ©ãƒ¼ã‚’è¿”ã—ã¾ã™ï¼‰ã€‚ ä¸€æ–¹ã€å¾Œè€…ã«ã¤ã„ã¦ã¯SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«ã‚ˆã£ã¦å·®ãŒã‚ã‚Šã€æ¤œè¨¼æ©Ÿèƒ½ã‚’æœ‰åŠ¹ã«ã™ã‚‹ãŸã‚ã«ç‰¹åˆ¥ãªå‘¼å‡ºãŒå¿…è¦ã ã£
cubed-l 2014/01/28
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl

ã†ãªãšã
ãƒªãƒ³ã‚¯
Lavabit äº‹ä»¶ã¨ãã®ä½™æ³¢ã€ãã—ã¦ Forward Secrecy - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯æ¥½ã—ã„ã‹ãï¼Ÿ Part 2
Lavabit äº‹ä»¶ Lavabitã¨ã„ã†åå‰ã‚’ã¿ãªã•ã‚“ã”å˜çŸ¥ã ã‚ã†ã‹ã€‚NSAã®ç›£è¦–æ´»å‹•ã«ã¤ã„ã¦å†…éƒ¨ãƒªãƒ¼ã‚¯ã‚’è¡Œã£ãŸ Edward Snowdenæ°ãŒåˆ©ç”¨ã—ã¦ã„ãŸãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã¨ã—ã¦ä»Šå¹´ã®å¤ã«ä¸€èºæœ‰åã«ãªã£ãŸã¨ã“ã‚ã ã€‚Snowdenæ°ã¯é¦™æ¸¯ã«æ»žåœ¨ã—ã¦è¤‡æ•°ã®ã‚¸ãƒ£ãƒ¼ãƒŠãƒªã‚¹ãƒˆã«NSAã®å†…éƒ¨æƒ…å ±ã‚’æä¾›ã—ãŸã‚ã¨ã€ç¾åœ¨ã¯ãƒã‚·ã‚¢ã«ä¸€æ™‚äº¡å‘½ã—ã¦ã„ã‚‹ãŒã€äº¡å‘½ãŒèªã‚ã‚‰ã‚Œã‚‹å‰ã«ãƒ¢ã‚¹ã‚¯ãƒ¯ç©ºæ¸¯ã«ã—ã°ã‚‰ãæ»žåœ¨ã—ã¦ã„ãŸã“ã¨ãŒã‚ã‚‹ã€‚7æœˆ12æ—¥ã«ç©ºæ¸¯å†…ã§ãƒ—ãƒ¬ã‚¹ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ã‚’è¡Œã£ãŸã®ã ãŒã€ãã®æ™‚è¤‡æ•°ã®äººæ¨©å›£ä½“ã«é€ã£ãŸæ‹›å¾…çŠ¶ãŒ â€œedsnowden@lavabit.comâ€ ã¨ã„ã†ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‹ã‚‰ã ã£ãŸã€‚ã“ã®äº‹ãŒå ±é“ã•ã‚Œã‚‹ã¨ã€ã€Œã‚ã®ã€Snowdenæ°ãŒä½¿ã£ã¦ã„ã‚‹ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã¨ã„ã†ã“ã¨ã§ã€åˆ©ç”¨å¸Œæœ›è€…ãŒæ®ºåˆ°ã—ãŸã‚‰ã—ã„ã€‚(ãã‚Œã¾ã§æ–°è¦ç™»éŒ²ã¯ 200äºº/æ—¥ã ã£ãŸã®ãŒã€4,000äºº/æ—¥ã¨20å€ã«ãªã£ãŸã€‚) ã—ã‹ã—ãã‚“ãªè¡¨ã®é¨’å‹•ã®å½±ã§ã€
cubed-l 2013/11/06
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
ãªãœã‚ãªãŸãŒã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’HTTPSåŒ–ã™ã‚‹ã¨ã‚µã‚¤ãƒˆãŒé…ããªã£ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒé€ƒã’ã¦ã„ãã®ã‹ - å°„æ’ƒã—ã¤ã¤å‰è»¢ æ”¹
å®Œå…¨ã«é‡£ã‚Šã‚¿ã‚¤ãƒˆãƒ«ã§ã™ã‘ã©ä¸èº«ã¯çœŸé¢ç›®ã«æ›¸ãã‚ˆã€‚ è¿‘å¹´ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®HTTPSåŒ–ãŒæµè¡Œã®ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã€‚ç§ã®çŸ¥ã‚‹é™ã‚Šã€Googleã®å„ç¨®ã‚µãƒ¼ãƒ“ã‚¹ã‚„Twitterã€Facebookãªã©ãŒå®Œå…¨ã«HTTPSã§é€šä¿¡ã‚’è¡Œã†ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã€‚HTTPSã€ã¤ã¾ã‚ŠSSLã«ã‚ˆã‚‹é€šä¿¡ã®æš—å·åŒ–ã«ã‚ˆã£ã¦ã€ãƒ¦ãƒ¼ã‚¶ã«ã“ã‚Œã¾ã§ã‚ˆã‚Šã‚‚å®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’æä¾›ã§ãã‚‹ã€‚ ã—ã‹ã—ã€ã‚ãªãŸãŒä½œã£ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã‚’ãµã¨æ€ã„ã¤ãã§HTTPSåŒ–ã—ã¦ã—ã¾ã†ã¨ã€ãŸã¶ã‚“ã€ã“ã‚Œã¾ã§ã‚ˆã‚Šã‚‚ã‚µã‚¤ãƒˆãŒé…ããªã‚‹ã€‚ã“ã“ã§ã¯ã€HTTPSã§é€šä¿¡ã™ã‚‹å ´åˆã®å•é¡Œã‚’è§£èª¬ã™ã‚‹ã€‚ ãªãœé…ããªã‚‹ã®ã‹ HTTPã§é€šä¿¡ã™ã‚‹å ´åˆã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒã‚µãƒ¼ãƒã¸ã¨æŽ¥ç¶šã™ã‚‹ãŸã‚ã«ã¯TCP/IPã®3ã‚¦ã‚§ã‚¤ãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã¨ã„ã†æ‰‹é †ãŒå¿…è¦ã«ãªã‚‹ã€‚ã‚ã‚“ã©ãã•ã„ã®ã§ã“ã“ã§ã¯è©³ã—ãã¯èª¬æ˜Žã—ãªã„ãŒã€è¦ã™ã‚‹ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’æŠ•ã’ã‚‹å‰ã«ãƒ‘ã‚±ãƒƒãƒˆã‚’ï¼‘å¾€å¾©ã•ã›ãªã„ã¨ã„ã‘ãªã„ã®ã§ã‚ã‚‹ã€‚ãƒ‘ã‚±ãƒƒãƒˆã®å¾€å¾©
cubed-l 2013/01/08
ssl
ãƒªãƒ³ã‚¯
SSL is not about encryption
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
cubed-l 2012/08/20
ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§SSLã‚’ä½¿ã‚ãªã„ã®ã¯è„†å¼±æ€§ã‹
ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®é€šä¿¡æš—å·åŒ–ã®å¿…è¦æ€§ã«ã¤ã„ã¦è°è«–ã—ã¾ã™ã€‚ ã¯ã˜ã‚ã« å…ˆæ—¥ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹ã‚»ãƒŸãƒŠãƒ¼ã‚’è´è¬›ã—ã¾ã—ãŸï¼ˆ2æœˆ8æ—¥è¿½è¨˜ã€‚è¬›æ¼”è€…ã‹ã‚‰ã®ä¾é ¼ã«ã‚ˆã‚Šã‚»ãƒŸãƒŠãƒ¼ã®ã‚µã‚¤ãƒˆã¸ã®ãƒªãƒ³ã‚¯ã‚’ã‚‚ã†ã‘ã¾ã—ãŸï¼‰ã€‚ã“ã®éš›ã«ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„…å¨ã«å¯¾ã™ã‚‹å…±é€šèªè˜ãŒã¾ã ãªã„ã¨ã„ã†èª²é¡Œã‚’æ”¹ã‚ã¦æ„Ÿã˜ã¾ã—ãŸã€‚ãã®èª²é¡Œã‚’ç—›æ„Ÿã§ããŸã¨ã„ã†ç‚¹ã§ã€ã‚»ãƒŸãƒŠãƒ¼ã¯ç§ã«ã¨ã£ã¦ã¯æœ‰ç›Šã§ã—ãŸã€‚ ã“ã®ãŸã‚ã€å½“ãƒ–ãƒã‚°ã§ã¯ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è©±é¡Œã‚’ã‚ã¾ã‚Šå–ã‚Šä¸Šã’ã¦ã„ã¾ã›ã‚“ã§ã—ãŸãŒã€ä»Šå¾Œã¯ã€ã¨ã‚Šã‚ã’ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ã¾ãšã¯ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯æš—å·åŒ–ã‚’å¿…é ˆã¨ã™ã‚‹ã¹ãã‹ã¨ã„ã†è©±é¡Œã§ã™ã€‚ã“ã®è©±é¡Œã¯ã€å‰è¨˜ã‚»ãƒŸãƒŠãƒ¼ã§ã‚‚ã¨ã‚Šã‚ã’ã‚‰ã‚Œã¦ã„ã¾ã—ãŸã€‚ æš—å·åŒ–ã®ç›®çš„ã¯ä½•ã‹ ã¾ãšã€æš—å·åŒ–ã®å¿…è¦æ€§ã‚’è«–ã˜ã‚‹ãŸã‚ã«ã¯ã€æš—å·åŒ–ã®ç›®çš„ã‚’æ˜Žç¢ºã«ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚å‰è¨˜ã‚»ãƒŸ
cubed-l 2012/02/06
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl

ãƒ¢ãƒã‚¤ãƒ«
ãƒªãƒ³ã‚¯
SSLèªè¨¼å±€å•é¡ŒãŒå†ã³ç™ºè¦šã€Microsoftã¨MozillaãŒå¯¾å¿œè¡¨æ˜Ž
ç±³Microsoftã¨Firefoxãƒ–ãƒ©ã‚¦ã‚¶é–‹ç™ºå…ƒã®Mozillaã¯11æœˆ3æ—¥ã€ãƒžãƒ¬ãƒ¼ã‚·ã‚¢ã®SSLèªè¨¼å±€ãŒç™ºè¡Œã—ãŸè¨¼æ˜Žæ›¸ã«å•é¡ŒãŒã‚ã‚‹ã“ã¨ãŒåˆ†ã‹ã£ãŸã¨ã—ã¦ã€ã“ã®èªè¨¼å±€ãŒç™ºè¡Œã™ã‚‹è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã•ã›ã‚‹ã¨è¡¨æ˜Žã—ãŸã€‚ ä¸¡ç¤¾ã«ã‚ˆã‚‹ã¨ã€å•é¡ŒãŒç™ºè¦šã—ãŸã®ã¯ç±³Entrustå‚˜ä¸‹ã®èªè¨¼å±€DigiCert Sdn. BhdãŒç™ºè¡Œã—ãŸè¨¼æ˜Žæ›¸ã€‚æš—å·å¼·åº¦ãŒä¸ååˆ†ãª512ãƒ“ãƒƒãƒˆã®RSAéµã‚’ä½¿ç”¨ã—ãŸè¨¼æ˜Žæ›¸ã‚’22ä»¶ç™ºè¡Œã—ã¦ã„ãŸã»ã‹ã€åŒç¤¾ã®ç™ºè¡Œã—ãŸè¨¼æ˜Žæ›¸ã«ã¯è¤‡æ•°ã®æŠ€è¡“çš„å•é¡ŒãŒã‚ã‚‹ã“ã¨ã‚‚åˆ¤æ˜Žã—ãŸã¨ã„ã†ã€‚ å•é¡Œã®è¨¼æ˜Žæ›¸ã¯ãƒžãƒ¬ãƒ¼ã‚·ã‚¢æ”¿åºœæ©Ÿé–¢ã®Webã‚µã‚¤ãƒˆç”¨ã«ç™ºè¡Œã•ã‚ŒãŸã‚‚ã®ã§ã€ç¾æ™‚ç‚¹ã§ä¸æ£ã«åˆ©ç”¨ã•ã‚ŒãŸç—•è·¡ã¯ãªã„ã¨ã•ã‚Œã‚‹ã€‚ã—ã‹ã—ã€æ”»æ’ƒè€…ãŒã“ã®è¨¼æ˜Žæ›¸ã®å•é¡Œã‚’æ‚ªç”¨ã™ã‚Œã°ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ã ã¾ã—ã¦ä¸æ£ãªWebã‚µã‚¤ãƒˆã‚’æ£è¦ã‚µã‚¤ãƒˆã ã¨æ€ã‚ã›ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚‹ã€‚ Microsoftã€Mozillaã¨ã‚‚Entrustã‹ã‚‰ã®é€£çµ¡ã‚’å—ã‘ã¦ã€DigiCert S
cubed-l 2011/11/04
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
ã€ãƒ¬ãƒãƒ¼ãƒˆã€‘ã€ŒSSLã ã‹ã‚‰å®‰å¿ƒã€ã¯é–“é•ã„ - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒŸãƒŠãƒ¼ å¤§å¡šæ° | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
6æœˆã«é–‹å‚¬ã•ã‚ŒãŸã€Œ2011 Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒŸãƒŠãƒ¼ã€(ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«ä¸»å‚¬)ã§ã€æ—¥æœ¬ãƒ™ãƒªã‚µã‚¤ãƒ³ SSLè£½å“æœ¬éƒ¨ ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°éƒ¨ ãƒžãƒãƒ¼ã‚¸ãƒ£ãƒ¼ã®å¤§å¡šé›…å¼˜æ°ã¯ã€ã€Œä»Šã€Webã‚µã‚¤ãƒˆã‚’å®ˆã‚‹ãŸã‚ã«å¿…è¦ãªå¯¾ç–ã¨ã¯ ï½žã‚½ãƒ¼ã‚·ãƒ£ãƒ«ãƒ¡ãƒ‡ã‚£ã‚¢ã‚„æœ€æ–°äº‹ä¾‹ã‹ã‚‰èªã¿è§£ãä»Šå¾Œã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ï½žã€ã¨é¡Œã™ã‚‹è¬›æ¼”ã‚’è¡Œã£ãŸã€‚å¤§å¡šæ°ã¯ã€ç¾åœ¨ã®Webã‚’å–ã‚Šå·»ãã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£äº‹æƒ…ã‚’æ¦‚è¦³ã—ã¤ã¤ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒå®‰å¿ƒã—ã¦ã‚µã‚¤ãƒˆã‚’åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ã€EV SSLè¨¼æ˜Žæ›¸ãªã©ã‚’ä½¿ã£ã¦"ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è¦‹ãˆã‚‹åŒ–"ã‚’ã™ã‚‹ã“ã¨ãŒé‡è¦ã ã¨ä¸»å¼µã—ãŸã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¯æ‚ªç”¨ã—ã‚„ã™ã„ãƒ¡ãƒ‡ã‚£ã‚¢ æ—¥æœ¬ãƒ™ãƒªã‚µã‚¤ãƒ³ SSLè£½å“æœ¬éƒ¨ ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°éƒ¨ ãƒžãƒãƒ¼ã‚¸ãƒ£ãƒ¼ã®å¤§å¡šé›…å¼˜æ° å¤§å¡šæ°ã¯ã¾ãšã€Gmailã‚„Facebookã€Twitterã¨ã„ã£ãŸã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®æ–°ã—ã„æ½®æµã«ã¤ã„ã¦è§¦ã‚ŒãªãŒã‚‰ã€ã€Œã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã¯ã‚ªãƒ¼ãƒ—ãƒ³ã§ä¾¿åˆ©ãªãƒ¡ãƒ‡ã‚£ã‚¢ã§åˆ©ç”¨è€…ã‚‚å¤šã„ãŒã€
cubed-l 2011/08/04
ãŠç«‹å ´ã‹ã‚‰ã€Œãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚ˆã£ã¦ã¯ã€è‡ªå·±ç½²åã—ãŸè¨¼æ˜Žæ›¸ã§ã‚‚è¦å‘Šãªãè¡¨ç¤ºã™ã‚‹ã€ã‚ˆã†ãªå±é™ºãªãƒ–ãƒ©ã‚¦ã‚¶ã¯å…¬è¡¨ã—ã¦åˆ©ç”¨åœæ¢ã‚’å‘¼ã³ã‹ã‘ã‚‹ã¹ãã§ã¯ï¼Ÿ

ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã¿ãšã»ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®è¬Ž - ockeghem's blog
ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯æºå¸¯é›»è©±ã®SSLæ–¹å¼å¤‰æ›´ã«ä¼´ã„ã€ã¿ãšã»éŠ€è¡Œã®ãƒ¢ãƒã‚¤ãƒ«ãƒãƒ³ã‚ãƒ³ã‚°ãŒä¸€éƒ¨ä½¿ãˆãªããªã£ã¦ã„ã¾ã—ãŸãŒã€æ˜¨æ—¥å¾©æ—§ã—ãŸã‚ˆã†ã§ã™ã€‚ 7æœˆ3æ—¥æ™‚ç‚¹ã§ã¯ã€ã¿ãšã»ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®ãƒˆãƒƒãƒ—ã«ä»¥ä¸‹ã®ã‚ˆã†ã«è¡¨ç¤ºã•ã‚Œã¦ã„ã¾ã—ãŸã€‚URLã¯éšæ‹“ã®ã‚‚ã®ã§ã™ã€‚ ç¾åœ¨ã€ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã®æºå¸¯é›»è©±ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã„ãŸã ã„ãŸã€ã¿ãšã»ãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆï¼ˆãƒ¢ãƒã‚¤ãƒ«ãƒãƒ³ã‚ãƒ³ã‚°ï¼‰ã®ï¼»ãƒãƒƒãƒˆæ±ºæ¸ˆæŒ¯è¾¼ã‚µãƒ¼ãƒ“ã‚¹ï¼½ãŠã‚ˆã³ï¼»Pay-easyï¼ˆãƒšã‚¤ã‚¸ãƒ¼ï¼‰ç¨Žé‡‘ãƒ»æ–™é‡‘æ‰•è¾¼ã¿ã‚µãƒ¼ãƒ“ã‚¹ï¼½ã«ãŠã„ã¦ã€ä¸€éƒ¨ã®ãŠå–å¼•ãŒã”åˆ©ç”¨ã„ãŸã ã‘ã¾ã›ã‚“ã€‚ã€Œã”åˆ©ç”¨ã®ç«¯æœ«ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼IDã‚’ã€ŒONã€ã«è¨å®šã—ã€å†åº¦ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ãã ã•ã„ã€‚ã€ã¨è¡¨ç¤ºã•ã‚ŒãŸå ´åˆã«ã¯ã€ãƒ‘ã‚½ã‚³ãƒ³ãªã©ã§ã”åˆ©ç”¨ãã ã•ã„ã€‚ ãŠå®¢ã•ã¾ã«ã¯å¤§å¤‰ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã—ã¦ãŠã‚Šã¾ã™ã“ã¨ã‚’ãŠè©«ã³ç”³ã—ã‚ã’ã¾ã™ã€‚ ï¼ˆåŽŸå› ã«ã¤ãã¾ã—ã¦ã¯ç¾åœ¨èª¿æŸ»ä¸ã§ã™ã€‚ï¼‰ http://megalodon.jp/2011-0703-0032-51/www.mizuhoban
cubed-l 2011/07/08
ã“ã‚Œã ã‘æ™‚é–“ãŒçµŒã£ã¦ã‚‹ã®ã«ã¾ã ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã®ãƒ€ãƒ¡è¡¨è¨˜ã¯æ¶ˆãˆãªã„ã®ã‹

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl

pki
ãƒªãƒ³ã‚¯
SSLèªè¨¼å±€ã‚’ç‹™ã£ãŸæ”»æ’ƒãŒã¾ãŸç™ºç”Ÿã€è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’ä¸æ¢
SSLèªè¨¼å±€ã®StartSSãŒä½•è€…ã‹ã«æ”»æ’ƒã•ã‚Œã€è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’ä¸æ¢ã—ãŸã¨ã€ç±³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿé–¢ã®SANS Internet Storm CenterãŒ6æœˆ21æ—¥ã®ãƒ–ãƒã‚°ã§ä¼ãˆãŸã€‚ StartSSã¯ã‚¤ã‚¹ãƒ©ã‚¨ãƒ«ã®StartComãŒé‹å–¶ã™ã‚‹SSLèªè¨¼å±€ã€‚ã€Œ6æœˆ15æ—¥ã«ç™ºç”Ÿã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¾µå®³äº‹ä»¶ã«ã‚ˆã‚Šã€ãƒ‡ã‚¸ã‚¿ãƒ«è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã¨é–¢é€£ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä¸æ¢ã—ã¦ã„ã¾ã™ã€ã¨ã™ã‚‹å‘ŠçŸ¥ã‚’Webã‚µã‚¤ãƒˆã«æŽ²è¼‰ã—ãŸã€‚ å ±é“ã«ã‚ˆã‚‹ã¨ã€StartSSã®è¨¼æ˜Žæ›¸ã¯Internet Explorerï¼ˆIEï¼‰ã€Google Chromeã€Mozilla Firefoxãªã©ã®ä¸»è¦ãªWebãƒ–ãƒ©ã‚¦ã‚¶ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€‚ã—ã‹ã—StartSSã®å‘ŠçŸ¥ã«ã‚ˆã‚Œã°ã€ä»Šå›žã®å•é¡Œã«ã‚ˆã£ã¦æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ã®åˆ©ç”¨è€…ã‚„ä¿æŒè€…ã€ãŠã‚ˆã³æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ã‚’ä½¿ã£ãŸWebã‚µã‚¤ãƒˆã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ãªã©ãŒå½±éŸ¿ã‚’å—ã‘ã‚‹ã“ã¨ã¯ãªã„ã¨ã„ã„ã€ä¸æ£ãªè¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã‚‹äº‹æ…‹ã«ã¯ãªã£ã¦ã„ãªã„ã¨ã¿ã‚‰ã‚Œã‚‹ã€‚ S
cubed-l 2011/06/23
ssl
ãƒªãƒ³ã‚¯
yebo blog: SSLè¨¼æ˜Žæ›¸ã§ä¸é©åˆãªåå‰ã‚’ä½¿ã£ã¦ã„ã‚‹å•é¡Œ
2011/04/07 SSLè¨¼æ˜Žæ›¸ã§ä¸é©åˆãªåå‰ã‚’ä½¿ã£ã¦ã„ã‚‹å•é¡Œ ã‚³ãƒ¢ãƒ‰äº‹ä»¶ã§SSLã®ä¿¡é ¼ãŒæºã‚‰ã„ã§ã„ã‚‹ãŒã€threatpostã«ã‚ˆã‚Œã°ã€EFFãŒã‚¦ã‚§ãƒ–ã§ä½¿ã‚ã‚Œã‚‹SSLè¨¼æ˜Žæ›¸ã‚’é›†ã‚ãŸSSLã‚ªãƒ–ã‚¶ãƒ¼ãƒãƒˆãƒªãƒ¼ãƒ»ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚’èª¿æŸ»ã—ãŸã¨ã“ã‚ã€åˆæ³•ãªè¨¼æ˜Žæ›¸ã®3ä¸‡7åƒä»¥ä¸Šã«ã€ã‚³ãƒ¢ãƒ³ãƒãƒ¼ãƒ ãŒ'localhost'ã€'mail' ã®ã‚ˆã†ãªä¸€èˆ¬åãŒä½¿ã‚ã‚Œã¦ã„ã‚‹ã¨ã„ã†å•é¡ŒãŒè¦‹ä»˜ã‹ã£ãŸãã†ã [slashdot]ã€‚ã‚³ãƒ¢ãƒ³ãƒãƒ¼ãƒ ã¯URL(FQDNã‚ã‚‹ã„ã¯IPã‚¢ãƒ‰ãƒ¬ã‚¹)ã‚’å…¥ã‚Œã‚‹å¿…è¦ãŒã‚ã‚‹ãŒã€ã“ã®ã‚ˆã†ãªä¸€èˆ¬åã ã¨MITMæ”»æ’ƒã®å±é™ºãŒå¤§ãããªã‚‹ã€‚Unqualified Name PatternValid Certificates Observedâ€œlocalhostâ€2,201â€œexchangeâ€806â€œexchangeâ€ with characters on either side, e.g. â€œexchange01
cubed-l 2011/04/07
ã©ã“ã®CAã ã‚ˆã€ã¨æ€ã£ãŸãŒEFFã®ã‚µã‚¤ãƒˆã«ã‚‚ã™ãåˆ†ã‹ã‚‹è³‡æ–™ã¯ãªã„ã‚ˆã†ã ï¼ãƒªãƒ³ã‚¯ã«ãªã£ã¦ã‚‹ã€ŒSSLã‚ªãƒ–ã‚¶ãƒ¼ãƒãƒˆãƒªãƒ¼ã€ã®æœ€ä¸‹éƒ¨ã®ccc2010.pdfãŒç¬‘ãˆãŸã€‚ç¬‘ã†ã—ã‹ãªã„

ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ã€ŒVeriSignã‚·ãƒ¼ãƒ«ã€ã¨ã„ã†å¹»æƒ³
â– ã€ŒVeriSignã‚·ãƒ¼ãƒ«ã€ã¨ã„ã†å¹»æƒ³ ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã§ã¯ãªã„SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯ã€2ã¤ã®ç‹¬ç«‹ã—ãŸæ©Ÿèƒ½ã‚’æžœãŸã—ã¦ã„ã‚‹ã¨è¨€ãˆã‚‹ã€‚1ã¤ç›®ã¯ã€SSLãƒ—ãƒãƒˆã‚³ãƒ«ã«ã‚ˆã‚‹ã‚µãƒ¼ãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã®æš—å·åŒ–é€šä¿¡ã®ãŸã‚ã«ä¸å¯æ¬ ãªå½¹å‰²ã§ã‚ã‚Šã€2ã¤ç›®ã¯å½“è©²ã‚µã‚¤ãƒˆé‹å–¶è€…ã®å®Ÿåœ¨è¨¼æ˜Žã®æ©Ÿèƒ½ã§ã‚ã‚‹ã€‚ãŸã ã—ã€ä»Šæ—¥ã§ã¯ã€å¾Œè€…ã‚’å«ã¾ãªã„ã€å‰è€…ã ã‘ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚‚ã‚ã‚‹ã€‚ å¾Œè€…ã®å®Ÿåœ¨è¨¼æ˜Žã¯ã€ã‹ã¤ã¦ã¯èªè¨¼å±€ã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹å„äº‹æ¥è€…ãŒãã‚Œãžã‚Œã®ç‹¬è‡ªã®åŸºæº–ã§ã€ã‚µã‚¤ãƒˆé‹å–¶è€…ã®å®Ÿåœ¨æ€§ã‚’ç¢ºèªã€èªè¨¼ã—ã¦ã„ãŸãŒã€ãã‚Œã§ã¯åˆ©ç”¨è€…ã«ã‚ã‹ã‚Šã«ãã„ã“ã¨ã‹ã‚‰ã€èªè¨¼ã®éš›ã®å®Ÿåœ¨æ€§ç¢ºèªã®æ–¹æ³•ãŒæ¨™æº–åŒ–ã•ã‚Œã€èª•ç”Ÿã—ãŸã®ãŒEV SSLã§ã‚ã£ãŸã€‚ ãã®çµæžœã€VeriSignãªã©ã€å¤ãã‹ã‚‰å®Ÿåœ¨è¨¼æ˜Žã«åŠ›ã‚’å…¥ã‚Œã¦ã„ãŸèªè¨¼å±€ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ã€EVã®ã‚‚ã®ã¨EVã§ãªã„å®Ÿåœ¨è¨¼æ˜Žä»˜ãã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®2ç¨®é¡žãŒå˜åœ¨ã™ã‚‹ã“ã¨ã¨ãªã£ãŸã€‚VeriSignã§ã¯ã€EVè¨¼æ˜Žæ›¸ã®æä¾›é–‹å§‹å¾Œã‚‚ã€EVã§ãªã„å®Ÿ
cubed-l 2010/05/30
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
Googleã€SSLæš—å·åŒ–å¯¾å¿œã®æ¤œç´¢ãƒšãƒ¼ã‚¸ã‚’ç™ºè¡¨
Live Nation says its Ticketmaster subsidiary was hacked. A hacker claims to be selling 560 million customer records. An autonomous pod. A solid-state battery-powered sports car. An electric pickup truck. A convertible grand tourer EV with up to 600 miles of range. A â€œfully connected mobility deviceâ€ for young urban innovators to be built by Foxconn and priced under $30,000. The next Popemobile. Ov
cubed-l 2010/05/24
google

ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

å€‹äººæƒ…å ±
ãƒªãƒ³ã‚¯
1 2 3 4 æ¬¡ã®ãƒšãƒ¼ã‚¸