[B! SSL] footnoteã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

footnote id:footnote

SSLã«é–¢ã™ã‚‹footnoteã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Google Chrome ã§ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ ï¼ˆæ—§ãƒ™ãƒªã‚µã‚¤ãƒ³ï¼‰ ç™ºè¡Œ SSL è¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æœŸé™ãŒå¼·åˆ¶çš„ã«çŸç¸®ã•ã‚ŒãŸã‚Šã€EV ï¼ˆæ‹¡å¼µèªè¨¼ï¼‰ ãŒç„¡åŠ¹ã«ãªã‚‹ã‹ã‚‚ã¨ã„ã†è©±
Google Chrome ã§ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ ï¼ˆæ—§ãƒ™ãƒªã‚µã‚¤ãƒ³ï¼‰ ç™ºè¡Œ SSL è¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æœŸé™ãŒå¼·åˆ¶çš„ã«çŸç¸®ã•ã‚ŒãŸã‚Šã€EV ï¼ˆæ‹¡å¼µèªè¨¼ï¼‰ ãŒç„¡åŠ¹ã«ãªã‚‹ã‹ã‚‚ã¨ã„ã†è©± æœ€å¤§æ‰‹ã®èªè¨¼å±€ ï¼ˆCAï¼šCertification Authorityï¼‰ ã§ã‚ã‚‹ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ï¼ˆæ—§ãƒ™ãƒªã‚µã‚¤ãƒ³ï¼‰ãŒã€é©åˆ‡ãªèªè¨¼æ‰‹ç¶šãã‚’è¡Œã‚ãšã« SSL è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ã„ãŸã¨ã•ã‚Œã‚‹å•é¡Œã§ã€Chrome ãƒãƒ¼ãƒ ãŒææ¡ˆã—ãŸè¨¼æ˜Žæ›¸æœ‰åŠ¹æœŸé™ã®æ®µéšŽçš„ãªçŸç¸®ã‚„ EV è¨¼æ˜Žæ›¸ã®ç„¡åŠ¹åŒ–ã«ã¤ã„ã¦ã¾ã¨ã‚ã¾ã™ã€‚ é€±æœ«ã«æŸ 2ch ã¾ã¨ã‚ã‚µã‚¤ãƒˆã§å–ã‚Šä¸Šã’ã‚‰ã‚Œã¦è©±é¡Œã«ãªã£ã¦ã„ã¾ã—ãŸãŒã€Google Chrome ã«ãŠã„ã¦ã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ - Symantec ï¼ˆæ—§ãƒ™ãƒªã‚µã‚¤ãƒ³ - Verisignï¼‰ ç™ºè¡Œã® SSL è¨¼æ˜Žæ›¸ãŒãƒ–ãƒãƒƒã‚¯ã•ã‚Œã‚‹ã‹ã‚‚ã¨ã„ã†è©±ã€‚ ã¾ã¨ã‚ã‚µã‚¤ãƒˆã§æ›¸ã‹ã‚Œã¦ã„ãŸã‚ˆã†ãª ã€Œå•ç”ç„¡ç”¨ã§ãƒ–ãƒãƒƒã‚¯ã€ ã¨ã„ã†ã®ã¯ç…½ã‚Šã‚¿ã‚¤ãƒˆãƒ«ãªã®ã§ã‚ã¾ã‚ŠçœŸã«å—ã‘ã‚‹ã®ã¯ã‚„ã‚ãŸ
footnote 2017/03/27
SSL

security

Google
ãƒªãƒ³ã‚¯
ã€æ‚²å ±ã€‘Googleã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ç™ºè¡Œã®SSLè¨¼æ˜Žæ›¸ã‚’å•ç”ç„¡ç”¨ã§ãƒ–ãƒãƒƒã‚¯ã¸ : ITé€Ÿå ±
Googleã¯ã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ç™ºè¡Œã®SSLè¨¼æ˜Žè¨¼ã«å¯¾ã—ã€åŽ³ã—ã„å‡¦ç½°ã‚’æ¤œè¨Žã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚ ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ã¾ãŸã¯ãã®è¨¼æ˜Žæ›¸ã®å†è²©æ¥è€…ãŒSSLè¨¼æ˜Žæ›¸ã‚’ä¸é©åˆ‡ã«ç™ºè¡Œã—ãŸã¨ã„ã†é‡å¤§ãªäº‹ä»¶ã«ã¤ã„ã¦ã€Googleã¯åŽ³ã—ã„å‡¦ç½°ã‚’æ¤œè¨Žã—ã¦ã„ã¾ã™ã€‚ ææ¡ˆã•ã‚ŒãŸè¨ˆç”»ã¯ã€ä¼šç¤¾ã«ã™ã¹ã¦ã®é¡§å®¢ã®è¨¼æ˜Žæ›¸ã‚’ç½®ãæ›ãˆã€ãã‚Œã‚’æŒã£ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ‹¡å¼µã•ã‚ŒãŸæ¤œè¨¼ï¼ˆEVï¼‰ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã®èªè˜ã‚’åœæ¢ã™ã‚‹ã“ã¨ã§ã™ã€‚ ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ã¯ã€2015å¹´ã®Netcraftèª¿æŸ»ã«ã‚ˆã‚‹ã¨ã€ã‚¦ã‚§ãƒ–ä¸Šã§ä½¿ç”¨ã•ã‚Œã‚‹3ã¤ã®SSLè¨¼æ˜Žæ›¸ã®ãã‚Œãžã‚Œã«ã¤ã„ã¦ç´„1ã¤ã‚’æ‹…å½“ã—ã€ä¸–ç•Œæœ€å¤§ã®å•†ç”¨è¨¼æ˜Žæ›¸ã®ç™ºè¡Œè€…ã¨ãªã£ã¦ã„ã¾ã™ã€‚æ•°å¹´ã«ã‚ãŸã‚Šè²·åŽã—ãŸçµæžœã€VeriSignã€GeoTrustã€Thawteã€RapidSSLãªã©ã®ä»¥å‰ã®ã‚¹ã‚¿ãƒ³ãƒ‰ã‚¢ãƒãƒ³èªè¨¼å±€ã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’ç®¡ç†ã—ã¦ã„ã¾ã™ã€‚ SSL / TLSè¨¼æ˜Žæ›¸ã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶ã¨HTTPSå¯¾å¿œã®Webã‚µã‚¤ãƒˆã¨ã®é–“ã®æŽ¥ç¶šã‚’æš—å·åŒ–ã—ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼
footnote 2017/03/26
IT

security

SSL

Google
ãƒªãƒ³ã‚¯
ç„¡æ–™ã§è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦HTTPSã®å°Žå…¥ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã€ŒLetâ€™s Encryptã€ãŒãƒ™ãƒ¼ã‚¿ç‰ˆã‹ã‚‰æ£å¼ç‰ˆã«
By Sean MacEntee SSLã‚’ç”¨ã„ãŸHTTPé€šä¿¡ã®æš—å·åŒ–ã‚’èª°ã§ã‚‚æ‰‹è»½ã«è¡Œãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ç«‹ã¡ä¸ŠãŒã£ãŸã®ãŒEFFã€Mozillaã€Cisco Systemsã€Akamai Techno logiesã€IdenTrustã€ãƒŸã‚·ã‚¬ãƒ³å¤§å¦ã®ç ”ç©¶è€…ãªã©ã§ã€ã“ã‚Œã‚‰ã®ãƒ¡ãƒ³ãƒãƒ¼ãŒHTTPSæ™®åŠã®ãŸã‚ã«ã‚¹ã‚¿ãƒ¼ãƒˆã—ãŸå–ã‚Šçµ„ã¿ãŒã€ŒLet's Encryptã€ã§ã™ã€‚ã“ã‚Œã¾ã§æ‰‹é–“ãŒã‹ã‹ã‚Šé‡‘éŠçš„ãªè² æ‹…ã‚‚å¤§ãã„ã¨è¨€ã‚ã‚Œã¦ããŸã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’ç„¡æ–™ã§è¡Œãˆã‚‹ã‚ˆã†ã«ãªã‚‹ã®ã§ã™ãŒã€åŒå–ã‚Šçµ„ã¿ã¯ã¤ã„ã«ãƒ™ãƒ¼ã‚¿ç‰ˆã‹ã‚‰æ£å¼ç‰ˆã«ã‚µãƒ¼ãƒ“ã‚¹ã‚’ç§»è¡Œã—ã¦ã„ã¾ã™ã€‚ Leaving Beta, New Sponsors - Let's Encrypt - Free SSL/TLS Certificates https://letsencrypt.org//2016/04/12/leaving-beta-new-sponsors.h
footnote 2016/04/14
https

SSL

security

web
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : Certificate Transparencyã§ã‚ã‹ã£ãŸã¨ã„ã†Thawteã«ã‚ˆã‚‹google.comè¨¼æ˜Žæ›¸ã®ä¸æ£ç™ºè¡Œï¼Ÿï¼Ÿï¼Ÿ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
åŸºæœ¬ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆãè¶£å‘³ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKIãƒ»ç½²åãƒ»èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚æ—…å¥½ãã€‚ãƒ†ãƒ¬ãƒ“å¥½ãã§èŠ¸èƒ½é€š 2015å¹´9æœˆ19æ—¥(åœŸ)ã«ã€ŒSymantec caught issuing rogue Google.com certificatesã€ ã¨ã„ã†è¨˜äº‹ãŒé£›ã³è¾¼ã‚“ã§ãã¦ã€èªè¨¼å±€ã€è¨¼æ˜Žæ›¸ã€SSLé–¢ä¿‚ã®ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã ã¨ ã‚ãã‚ãã—ã¦é£›ã³ã¤ãã‚ã‘ã§ã™ãŒã€ã–ã£ã¨èªã‚“ã§ã¿ã‚‹ã¨ å¤§æ‰‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ™ãƒ³ãƒ€ãƒ¼ã®Symantecã®åä¼šç¤¾ã§ä½Žä¾¡ãªè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚µãƒ¼ãƒ“ã‚¹ã‚’ã‚„ã£ã¦ã„ã‚‹ ThawteãŒã€2015å¹´9æœˆ14æ—¥ã«google.comã€www.google.comç”¨ã®EV SSLè¨¼æ˜Žæ›¸ã‚’ã€Googleã«äº†è§£ãªã ä¸æ£ã«ç™ºè¡Œã—ã¦ã„ãŸã“ã¨ãŒã€è¨¼æ˜Žæ›¸ã®å…¬é–‹ç›£æŸ»è¨˜éŒ²(Certificate Transparency)ã«ã‚ˆã‚Šã‚ã‹ã£ãŸã€‚ ã¨ã„ã†äº‹ã®ã‚ˆã†ã§ã™ã€‚åŽ³æ ¼ãªå¯©æŸ»ã§ç™ºè¡Œã•
footnote 2015/09/21
Google

SSL

security
ãƒªãƒ³ã‚¯
SSL ã§å®ˆã‚‰ã‚Œã‚‹ç”Ÿæ´»
4. æ³¨æ„ â— ã“ã®ã‚¹ãƒ©ã‚¤ãƒ‰ä¸ã«é–“é•ã„ãŒå˜åœ¨ã™ã‚‹ã‹ã‚‚ã— ã‚Œã¾ã›ã‚“ã€‚ o è‡ªåˆ†ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯è‡ªåˆ†ã§ç¢ºä¿ã™ã‚‹ã—ã‹ã‚ã‚Šã¾ã› ã‚“ã€‚ o ã‚¯ãƒªãƒ†ã‚£ã‚«ãƒ«ãªã“ã¨ã¯è‡ªåˆ†ã§ç¢ºèªã—ã¦ä¸‹ã•ã„ã€‚ â— å¸¸ã«æ‚ªæ„ã®ã‚ã‚‹æ”»æ’ƒè€…ã‚’æƒ³å®šã™ã‚‹ã®ã¯ã‚³ã‚¹ ãƒˆãŒé«˜ãã¤ãã¾ã™ã€‚ o æ‰±ã£ã¦ã„ã‚‹æƒ…å ±ã®ãŸã„ã›ã¤ã•ã«ã‚ˆã£ã¦é©åˆ‡ãªåˆ¤æ–ã‚’
footnote 2015/03/19
SSL
ãƒªãƒ³ã‚¯
FreeBSDã§Geeknoteã‚’ä½¿ãŠã†ã¨ã—ãŸã‚‰Certificate verify failedâ€¦
footnote 2015/01/10
SSL
ãƒªãƒ³ã‚¯
Wiresharkã§SSLé€šä¿¡ã®ä¸èº«ã‚’è¦—ã„ã¦ã¿ã‚‹ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
OpenSSLã®è„†å¼±æ€§ã€ŒHeartbleedã€ãŒä¸–é–“ã‚’è³‘ã‚ã›ã¦ã„ã¾ã™ãŒã€è‰²ã€…ã¨ä¹—ã‚Šé…ã‚Œã¦ã—ã¾ã£ãŸæ„ŸãŒã‚ã‚‹ã®ã§ã€ã‚†ã‚‹ã‚†ã‚‹ã¨è½ã¡ç©‚æ‹¾ã„ã‚’ã—ã‚ˆã†ã‹ã¨æ€ã„ã¾ã™ã€‚ Heartbleedã§ç§˜å¯†éµã‚’æ‰‹ã«å…¥ã‚ŒãŸã‚‰SSLé€šä¿¡ã®ä¸èº«å…¨éƒ¨è¦‹ãˆã¡ã‚ƒã†ã˜ã‚ƒã‚“!! ã¨ã„ã†äº‹æ…‹ã«ãªã£ã¦ã„ã¾ã™ãŒã€ãªã‚“ã¨ãªãç†è«–çš„ã«ãã†ã ã‚ã†ãªã¨åˆ†ã‹ã‚‹ã‚‚ã®ã®ã‚¤ãƒžã‚¤ãƒå…·ä½“çš„ãªæ‰‹é †ãŒåˆ†ã‹ã‚‰ãªã„ã€‚ ã¨ã„ã†ã‚ã‘ã§ä»Šå›žã®ãƒ†ãƒ¼ãƒžã¨ã—ã¦ã€æ‰‹å…ƒã«ã‚µãƒ¼ãƒã®ç§˜å¯†éµã¨ã€SSLé€šä¿¡ã‚’ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ã—ãŸpcapãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚‹ã¨ãã«ã€Wiresharkã§ã©ã‚“ãªæ„Ÿã˜ã§SSLé€šä¿¡ã‚’ã€Œã»ã©ãã€ã®ã‹â€¦â€¦ã¨ã„ã†å…·ä½“çš„ãªæ‰‹é †ã‚’ã€ãƒãƒžã‚Šæ‰€ã‚’å«ã‚ã¦ã¾ã¨ã‚ã¦ãŠã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ ã¨ã„ã†ã‹ã€ç§è‡ªèº«ãŒãƒãƒžã£ãŸã®ã§è‡ªåˆ†ç”¨ãƒ¡ãƒ¢ã§ã™ãªã€‚ãªãŠã“ã®æ–‡æ›¸ã§ã¯"SSL"ã¨ã ã‘è¨˜è¿°ã—ã€TLSã¯ç„¡è¦–ã—ã¦ã„ã¾ã™ã€‚ å‰ææ¡ä»¶ ã¨ã‚Šã‚ãˆãšä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã®æ¤œè¨¼ç’°å¢ƒã§è©¦ã—ã¾ã—ãŸã€‚ IPã‚¢ãƒ‰ãƒ¬ã‚¹ èª¬æ˜Ž ãƒ›ã‚¹ãƒˆO
footnote 2014/04/14
security

SSL
ãƒªãƒ³ã‚¯
1