[B! ssl] golden_egggã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

golden_eggg id:golden_eggg

sslã«é–¢ã™ã‚‹golden_egggã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (28)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½¿ã„ç¶šã‘ã‚‹ä¸Šå ´ä¼æ¥ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - megamouthã®è‘¬åˆ—
ã‚ã‚‹ã„ã¯ç§ãŸã¡ãŒPKIã«ã¤ã„ã¦èª¬æ˜Žã—ç¶šã‘ãªã‘ã‚Œã°ã„ã‘ãªã„ç†ç”± Webå±‹ã®ãªããªã‚‰ãªã„ä»•äº‹ã®ä¸€ã¤ã«ã€ŒSSLè¨¼æ˜Žæ›¸ã¨PKIã«ã¤ã„ã¦èª¬æ˜Žã™ã‚‹ã€ã¨ã„ã†ã®ãŒã‚ã‚‹ã€‚ ä¸–ã®ä¸ã®ã‚µã‚¤ãƒˆã¯ã ã„ãŸã„https://ã¨ã„ã†ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã¤ãªãŒã‚‹ã‚ˆã†ã«å‡ºæ¥ã¦ã„ã¦ã€httpsã§ã¤ãªãŒã‚‹ã¨ã„ã†ã“ã¨ã¯ä½•ã‚‰ã‹ã®SSL/TLSè¨¼æ˜Žæ›¸ãŒå¿…è¦ã ã¨ã„ã†ã“ã¨ã ã€‚ï¼ˆã•ã‚‚ãªã‘ã‚Œã°chromeãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ä¸å‰ãªè¦å‘Šã‚’ç™ºã™ã‚‹ã“ã¨ã«ãªã‚‹ï¼‰ è¨¼æ˜Žæ›¸ãŒå¿…è¦ã«ãªã‚‹åº¦ã€åŒã˜è³ªå•ãŒç¹°ã‚Šè¿”ã•ã‚Œã‚‹ã€‚ã€Œãªã‚“ã‹å…¨éƒ¨å€¤æ®µãŒé•ã†ã‘ã©ã€ã©ã®è¨¼æ˜Žæ›¸ï¼ˆãƒ–ãƒ©ãƒ³ãƒ‰ï¼‰ãŒã„ã„ã®ï¼Ÿã€ã¨ã€‚ãã—ã¦ç§ãŸã¡ã¯æ¯Žå›žå›°ã£ã¦ã—ã¾ã†ã€‚ ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ç«‹å ´ã§è¨€ãˆã°ã€è¨¼æ˜Žæ›¸ãŒæœ‰åŠ¹ã§ã‚ã‚Šã•ãˆã™ã‚Œã°ã€ç„¡æ–™ã®Let's Encryptã§ã‚‚21ä¸‡å††ã™ã‚‹DigiCertã‚°ãƒãƒ¼ãƒãƒ«ãƒ»ã‚µãƒ¼ãƒID EVã§ã‚‚ã€Webã‚µã‚¤ãƒˆã®åˆ©ä¾¿æ€§ã¯ä½•ã‚‚å¤‰ã‚ã‚‰ãªã„ã€‚ç§ãŸã¡Webåˆ¶ä½œæ¥è€…ã®ç«‹å ´ã§ã‚‚ã€ä»£ç†åº—å¥‘ç´„ã§ã‚‚ã—ãªã„é™ã‚Šã€è¨¼æ˜Žæ›¸ãã®ã‚‚
golden_eggg 2020/01/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
TLS1.3æ™‚ä»£ã®æ–°å¸¸è˜
TLS â€¢ TLS (reliable) endpoint endpoint CC BY 3.0 https://www.youtube.com/user/TheWikiLeaksChannel ClientHello+ ApplicationData end_of_early_data Finished ServerHello EncryptedExtension ServerConfiguration Certificate CertificateVerify Finished ApplicationData
golden_eggg 2019/03/11
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

TLS

ssl
ãƒªãƒ³ã‚¯
é‹ç”¨ã®è¦³ç‚¹ã‹ã‚‰è¦‹ãŸTLSãƒ—ãƒãƒˆã‚³ãƒ«ã®å‹•ã
Internet Week 2017ãƒ—ãƒ¬ã‚¼ãƒ³ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ S11 çŸ¥ã‚‰ãªã„ã¨å›°ã‚‹ï¼Ÿï¼ã€€èªè¨¼å±€ã¨HTTPSã®æœ€æ–°æŠ€è¡“å‹•å‘ https://www.nic.ad.jp/ja/materials/iw/2017/proceedings/s11/
golden_eggg 2018/03/03
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
ã€æ‚²å ±ã€‘Googleã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ç™ºè¡Œã®SSLè¨¼æ˜Žæ›¸ã‚’å•ç”ç„¡ç”¨ã§ãƒ–ãƒãƒƒã‚¯ã¸ : ITé€Ÿå ±
Googleã¯ã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ç™ºè¡Œã®SSLè¨¼æ˜Žè¨¼ã«å¯¾ã—ã€åŽ³ã—ã„å‡¦ç½°ã‚’æ¤œè¨Žã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚ ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ã¾ãŸã¯ãã®è¨¼æ˜Žæ›¸ã®å†è²©æ¥è€…ãŒSSLè¨¼æ˜Žæ›¸ã‚’ä¸é©åˆ‡ã«ç™ºè¡Œã—ãŸã¨ã„ã†é‡å¤§ãªäº‹ä»¶ã«ã¤ã„ã¦ã€Googleã¯åŽ³ã—ã„å‡¦ç½°ã‚’æ¤œè¨Žã—ã¦ã„ã¾ã™ã€‚ ææ¡ˆã•ã‚ŒãŸè¨ˆç”»ã¯ã€ä¼šç¤¾ã«ã™ã¹ã¦ã®é¡§å®¢ã®è¨¼æ˜Žæ›¸ã‚’ç½®ãæ›ãˆã€ãã‚Œã‚’æŒã£ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æ‹¡å¼µã•ã‚ŒãŸæ¤œè¨¼ï¼ˆEVï¼‰ã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹ã®èªè˜ã‚’åœæ¢ã™ã‚‹ã“ã¨ã§ã™ã€‚ ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ã¯ã€2015å¹´ã®Netcraftèª¿æŸ»ã«ã‚ˆã‚‹ã¨ã€ã‚¦ã‚§ãƒ–ä¸Šã§ä½¿ç”¨ã•ã‚Œã‚‹3ã¤ã®SSLè¨¼æ˜Žæ›¸ã®ãã‚Œãžã‚Œã«ã¤ã„ã¦ç´„1ã¤ã‚’æ‹…å½“ã—ã€ä¸–ç•Œæœ€å¤§ã®å•†ç”¨è¨¼æ˜Žæ›¸ã®ç™ºè¡Œè€…ã¨ãªã£ã¦ã„ã¾ã™ã€‚æ•°å¹´ã«ã‚ãŸã‚Šè²·åŽã—ãŸçµæžœã€VeriSignã€GeoTrustã€Thawteã€RapidSSLãªã©ã®ä»¥å‰ã®ã‚¹ã‚¿ãƒ³ãƒ‰ã‚¢ãƒãƒ³èªè¨¼å±€ã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’ç®¡ç†ã—ã¦ã„ã¾ã™ã€‚ SSL / TLSè¨¼æ˜Žæ›¸ã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶ã¨HTTPSå¯¾å¿œã®Webã‚µã‚¤ãƒˆã¨ã®é–“ã®æŽ¥ç¶šã‚’æš—å·åŒ–ã—ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼
golden_eggg 2017/03/26
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
So you want to expose Go on the Internet
Back when crypto/tls was slow and net/http young, the general wisdom was to always put Go servers behind a reverse proxy like NGINX. Thatâ€™s not necessary anymore! At Cloudflare we recently experimented with exposing pure Go services to the hostile wide area network. With the Go 1.8 release, net/http and crypto/tls proved to be stable, performant and flexible. However, the defaults are tuned for lo
golden_eggg 2016/12/22
golang

ssl

http
ãƒªãƒ³ã‚¯
ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ãŒã€ŒEncryption Everywhereã€ã€SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ç„¡å„Ÿç™ºè¡Œç’°å¢ƒã‚’æ•´å‚™ã€€
golden_eggg 2016/08/30
ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ãƒãƒƒã‚·ãƒ¥è¡çªã§TLSã‚’ç ´ã‚‹SLOTHæ”»æ’ƒ(CVE-2015-7575)ã¨ã¯ä½•ã‹ - ã¼ã¡ã¼ã¡æ—¥è¨˜
0. ç°¡å˜ãªSLOTHæ”»æ’ƒã®ã¾ã¨ã‚ æœ€åˆã«ç°¡å˜ãªã¾ã¨ã‚ã‚’æ›¸ã„ã¦ãŠãã¾ã™ã€‚é•·æ–‡ã«ãªã‚Šãã†ãªã®ã§ã€èªã‚€ã®ãŒå¤§å¤‰ãªæ–¹ã¯ã“ã“ã ã‘è¦‹ã¦ãŠã„ã¦ãã ã•ã„ã€‚ MD5ãƒãƒƒã‚·ãƒ¥ã¯æ—¢ã«å®‰å…¨ã§ã¯ãªãã€è¨¼æ˜Žæ›¸ã®ç½²åæ–¹å¼ã§ã®åˆ©ç”¨ã¯åœæ¢ã•ã‚Œã¦ã„ãŸãŒã€å¾Œæ–¹äº’æ›ã®ãŸã‚ãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ãƒ‡ãƒ¼ã‚¿ã®ç½²åæ–¹å¼ã«RSA-MD5ãŒä»Šã§ã‚‚åˆ©ç”¨ã§ãã‚‹TLSå®Ÿè£…ãŒå¹¾ã¤ã‹å˜åœ¨ã—ã¦ã„ãŸ(Firefox NSS, Javaç‰)ã€‚ å…ˆé€±ã€INRIAã‚°ãƒ«ãƒ¼ãƒ—ã‹ã‚‰ãƒãƒƒã‚·ãƒ¥è¡çªã‚’åˆ©ç”¨ã—ã¦å®Ÿéš›ã«TLSã‚’ç ´ã‚‹æ”»æ’ƒ(SLOTH)ãŒå…¬é–‹ã•ã‚ŒãŸã€‚ãã‚Œã‚’å—ã‘ã€ã„ãã¤ã‹ã®å®Ÿè£…ã§RSA-MD5ã‚’å®Œå…¨ã«åˆ©ç”¨ä¸èƒ½ã«ã™ã‚‹ä¿®æ£ãŒè¡Œã‚ã‚ŒãŸ(CVE-2015-7575)ã€‚ SLOTHã§ã¯ã€SHA1ã‚„TLSã€IKEã€SSHã«å¯¾ã™ã‚‹æ”»æ’ƒã«ã¤ã„ã¦ã‚‚è©•ä¾¡ã‚’è¡Œã„ã€å¹¾ã¤ã‹ã¯å…¨ãç¾å®Ÿçš„ã«ä¸å¯èƒ½ãªãƒ¬ãƒ™ãƒ«ã§ã¯ãªã„ã“ã¨ãŒç¤ºã•ã‚ŒãŸã€‚MD5ã¨SHA-1ã§TLSãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã®å®Œå…¨æ€§ã‚’æ‹…ä¿ã—ã¦ã„ã‚‹TLS1.0/
golden_eggg 2016/01/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
Let's Encrypt ã‚’æ”¯ãˆã‚‹ ACME ãƒ—ãƒãƒˆã‚³ãƒ« - Block Rockinâ€™ Codes
Intro å…ˆæ—¥ #http2study ã§ mozilla ã® Richard Barnes ãŒ Let's Encrypt ã«ã¤ã„ã¦è©±ã—ã¦ãã‚Œã¾ã—ãŸã€‚ è³‡æ–™: Let's Encrypt Overview ã“ã®è³‡æ–™ã®ç¿»è¨³ ã¯ã—ãŸã®ã§ã™ãŒã€ã„ã‚‰ãªããªã£ã¦ã—ã¾ã£ãŸã®ã§ä¾›é¤Šã‚‚ã‹ãã¦ã“ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ãƒ¢ãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã€ Web ã§ãŠã“ã£ã¦ã„ã‚‹ HTTPS æŽ¨é€²ã®ãŸã©ã‚‹é“ã«ã¤ã„ã¦ã€è³‡æ–™ã‚’è£œè¶³ã—ã¤ã¤ç´¹ä»‹ã—ã¾ã™ã€‚ çµè«–ã‹ã‚‰è¨€ã†ã¨ Let's Encrypt ã¯ã‚‚ã¡ã‚ã‚“ ACME ãƒ—ãƒãƒˆã‚³ãƒ« ã«ã¤ã„ã¦ã‚‚æ˜¯éžçŸ¥ã£ã¦ãŠãã¨è‰¯ã„ã¨æ€ã„ã¾ã™ã€‚ HTTPS ã®å•é¡Œ ã™ã§ã«ã“ã®ãƒ–ãƒã‚°ã§ã‚‚ç´¹ä»‹ã—ã¦ã„ã‚‹ã‚ˆã†ã«ã€ Web ã«ãŠã‘ã‚‹ HTTPS ã®é‡è¦æ€§ã¯å¢—ã—ã€ãã‚Œã®æ™®åŠã‚’å¾ŒæŠ¼ã—ã™ã‚‹æ´»å‹•ãŒå„æ‰€ã§é€²ã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ HTTPS åŒ–ã™ã‚‹ Web ã‚’ã©ã†è€ƒãˆã‚‹ã‹ ã‚ˆãè¨€ã‚ã‚Œã‚‹ç›—è´é˜²æ¢ã‚’å§‹ã‚ã€æš—å·åŒ–ã‚’è¡Œã†ã“ã¨ã§é˜²ã’ã‚‹å•é¡Œã¯å¤šãã‚
golden_eggg 2015/12/06
http

http2

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
Running Docker with https
{ const container = $el; // The div with overflow const it em = document.getElementById('sidebar-current-page') if (it em) { const containerTop = container.scrollTop; const containerBottom = containerTop + container.clientHeight; const it em Top = it em.offsetTop - container.offsetTop; const it emBottom = it em Top + it em.offsetHeight; // Scroll only if the it em is out of view if (it emBottom > containerBo
golden_eggg 2015/03/28
docker

ssl
ãƒªãƒ³ã‚¯
GoogleãŒWebã§ã®SHA-1ã®åˆ©ç”¨åœæ¢ã‚’æ€¥ãç†ç”± | POSTD
golden_eggg 2015/02/16
ssl

google

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
5åˆ†ã§ã‚ã‹ã‚‹æ£ã—ã„ Web ã‚µã‚¤ãƒˆå¸¸æ™‚ SSL åŒ–ã®ãŸã‚ã®åŸºç¤ŽçŸ¥è˜
Web ã‚µã‚¤ãƒˆã‚’å¸¸æ™‚ SSL åŒ–ã™ã‚‹å ´åˆã«ã€æœ€ä½Žé™çŸ¥ã£ã¦ãŠã‹ãªã‘ã‚Œã°ãªã‚‰ãªã„çŸ¥è˜ã‚„ã€æ³¨æ„ç‚¹ã€å®Ÿéš›ã®è¨å®šæ–¹æ³•ã¾ã§ã€ã²ã¨é€šã‚Šã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ãƒ¡ãƒªãƒƒãƒˆã‚„ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã€è¨¼æ˜Žæ›¸ã®ç¨®åˆ¥ã‹ã‚‰ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆè¨å®šãªã©ã«ã¤ã„ã¦ã‚‚è§£èª¬ã—ã¦ã„ã¾ã™ã€‚ HTTPS ã‚’ãƒ©ãƒ³ã‚ãƒ³ã‚°ã‚·ã‚°ãƒŠãƒ«ã«ä½¿ç”¨ã—ã¾ã™ã¨ Google ãŒå…¬å¼ã«ç™ºè¡¨ã—ãŸã‚ãŸã‚Šã‹ã‚‰ã€Web ã‚µã‚¤ãƒˆã® SSL å¯¾å¿œã€ç‰¹ã« Google ãŒæŽ¨å¥¨ã—ã¦ã„ã‚‹ Web ã‚µã‚¤ãƒˆã‚’ã™ã¹ã¦ HTTPS ã§é…ä¿¡ã™ã‚‹ã€æ‰€è¬‚ ã€Œå¸¸æ™‚ SSL åŒ–ã€ ã«ã¤ã„ã¦ã®è©±ã‚’èžã„ãŸã‚Šã€å®Ÿéš›ã«ãŠå®¢æ§˜ã‹ã‚‰ç›¸è«‡ã•ã‚ŒãŸã‚Šã™ã‚‹ã‚±ãƒ¼ã‚¹ãŒå¢—ãˆã¦ãã¾ã—ãŸã€‚ ãã“ã§ã€ã„ã„æ©Ÿä¼šã ã—ãã®è¾ºã«é–¢ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¦ãŠã“ã†ã‹ãªï½ž ã¨æ€ã£ã¦æ›¸ã„ã¦ã¿ãŸã€æ’ä¾‹ã® ï¼ˆï¼Ÿï¼‰ 5åˆ†ã§ã‚ã‹ã‚‹ã‚·ãƒªãƒ¼ã‚ºã€‚æ›¸ãçµ‚ã‚ã£ã¦è¦‹ãŸã¨ã“ã‚çµ¶å¯¾ã« 5åˆ†ã˜ã‚ƒç„¡ç†ã£ã¦ã„ã†æ–‡ç« é‡ã«ãªã£ã¦ã¦ã©ã†ã—ã‚ˆã†ã‹ãªãã¨ã‚‚æ€ã£ãŸã‚“ã§ã™ãŒã€æ°—ã«ã›ãšå…¬é–‹ã—ã¦ã¿ã¾ã™ã€‚ å¸¸æ™‚ SSL
golden_eggg 2015/01/22
ä¿å˜ç‰ˆ

ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
Hyperfox
Hyperfox is a security auditing tool that proxies and records HTTP traffic between two hosts.
golden_eggg 2015/01/04
golang

ssl
ãƒªãƒ³ã‚¯
ãªãœHTTPSã¯HTTPã‚ˆã‚Šé€Ÿã„ã®ã‹
å…ˆé€±ã€httpvshttps.com ã¨ã„ã†ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ã“ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã§ã¯ã€HTTP ã¨ HTTPS ã‚’ç”¨ã„ã¦ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸå ´åˆã®ã‚¦ã‚§ãƒ–ãƒšãƒ¼ã‚¸ã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰å®Œäº†ã¾ã§ã«ã‹ã‹ã‚‹æ™‚é–“ã®æ¯”è¼ƒãŒã§ãã‚‹ã®ã§ã™ãŒã€å¤šãã®ç’°å¢ƒã§ HTTPS ã®æ–¹ãŒ HTTP ã‚ˆã‚Šã‚‚é«˜é€Ÿãªã“ã¨ã«é©šãã®å£°ãŒä¸ŠãŒã£ã¦ã„ã¾ã—ãŸã€‚ HTTP ãŒ TCP ä¸Šã§å¹³æ–‡ã‚’é€å—ä¿¡ã™ã‚‹ã®ã«å¯¾ã—ã€HTTPS ã¯ TCP ä¸Šã§ TLS (SSL) ã¨ã„ã†æš—å·åŒ–æŠ€è¡“ã‚’ç”¨ã„ã¦é€šä¿¡ã‚’è¡Œã„ã¾ã™ã€‚ãªã‚‰ã°ã€TLS ã®ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ã®ã¶ã‚“ HTTPS ã®ã»ã†ãŒé…ã„ã¯ãšã ã€ã¨ã„ã†äºˆæ¸¬ã«åã™ã‚‹çµæžœã«ãªã£ãŸã®ã§ã™ã‹ã‚‰ã€é©šãã®ã‚‚ç„¡ç†ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ å®Ÿã¯ã€ã“ã®çµæžœã«ã¯ã‹ã‚‰ãã‚ŠãŒã‚ã‚Šã¾ã—ãŸã€‚ Google Chromeã€Mozilla Firefoxã€æœ€è¿‘ã®Safariæ³¨1ã¯ã€Google ãŒé–‹ç™ºã—ãŸé€šä¿¡ãƒ—ãƒãƒˆã‚³ãƒ«ã€ŒSPDYã€ã«å¯¾å¿œã—ã¦ãŠã‚Šã€HTTPS
golden_eggg 2014/12/09
http

spdy

ssl

google
ãƒªãƒ³ã‚¯
è¤‡æ•°ã®Webã‚µãƒ¼ãƒã§SSLã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’å…±æœ‰ã—ã¦SSLå‡¦ç†ã‚’é«˜é€ŸåŒ–(Apache + mod_ssl + mod_socache_memcache) - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
HTTPS(SSLåˆ©ç”¨)ã‚µã‚¤ãƒˆãŒSEOçš„ã«å„ªé‡ã•ã‚Œã‚‹ãƒˆãƒ¬ãƒ³ãƒ‰ã§ã€ä¸–é–“çš„ã«ã‚‚HTTPSæŽ¥ç¶šã§ã‚µã‚¤ãƒˆé‹ç”¨ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãŒå¢—ãˆã¦ãã¦ã„ã¾ã™ã€‚ ã“ã‚ŒãŒã€ãƒã‚¤ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚µã‚¤ãƒˆã«ãªã£ã¦ãã‚‹ã¨ã€ã“ã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã§SSLå‡¦ç†ã•ã›ã‚‹ã“ã¨ãŒè² è·çš„ã«ã‚‚ãªã‹ãªã‹è¾›ã„ã®ã§ã™ã€‚ ã§ã€Apache 2.3ä»¥é™ã§ã¯ã€Shared Object Cache Providerã¨ã—ã¦ã€memcachedãŒé¸æŠžã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã®ä»•çµ„ã¿ã‚’åˆ©ç”¨ã—ã¦ã€Apacheã¨memcachedã‚’ä¸¦ã¹ã‚‹ã“ã¨ã§ã€å„ã‚µãƒ¼ãƒã§ãƒ¦ãƒ¼ã‚¶ã®SSL Session Cacheã‚’å…±æœ‰ã—ãªãŒã‚‰HTTPSãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’è² è·åˆ†æ•£ã§ãã‚‹æ§‹æˆã‚’ä½œã£ã¦ã¿ã¾ã—ãŸã€‚ Webã‚µãƒ¼ãƒã§SSLã‚ªãƒ•ãƒãƒ¼ãƒ‰ å¸¸æ™‚SSLã‚’åˆ©ç”¨ã—ãŸWebã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ãŸã‚ã«ã€SSLã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ã¨ã„ã£ãŸã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹è£½å“ã ã¨ã‹ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã ã¨Apacheã‚„Nginxã®SSLãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ã†
golden_eggg 2014/12/05
apache

nginx

ssl
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/11/19/20141118mozilla-eff-and-others-band-together-to-provide-free-ssl-certificates/
golden_eggg 2014/11/19
ssl
ãƒªãƒ³ã‚¯
SSLv3 Poodle Attack Check
All browsers have deactivated the SSL-Version 3.0 by default. If you see a poodle below, then your browser supports SSLv3 via block ciphers, and you may be vulnerable. If you see a Labrador below, your browser doesnâ€™t support SSLv3, or only supports SSLv3 using stream ciphers.
golden_eggg 2014/10/15
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
SSL 3.0ã«æ·±åˆ»ãªè„†å¼±æ€§ã€ŒPOODLEã€è¦‹ã¤ã‹ã‚‹ã€€GoogleãŒå¯¾ç–ã‚’èª¬æ˜Ž
ç±³Googleã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ ã¯10æœˆ14æ—¥ï¼ˆç¾åœ°æ™‚é–“ï¼‰ã€SSL 3.0ã®æ·±åˆ»ãªè„†å¼±æ€§ã€ŒPOODLEã€ï¼ˆPadding Oracle On Downgraded Legacy Encryptionã®ç•¥ã§ãƒ—ãƒ¼ãƒ‰ãƒ«ã¨èªã‚€ï¼‰ã®ç™ºè¦‹ã¨ãã®å¯¾ç–ã«ã¤ã„ã¦ç™ºè¡¨ã—ãŸã€‚ åŒç¤¾ã¯POODLEã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªãƒ¼ã‚‚PDFã§å…¬é–‹ã—ãŸã€‚ SSL 3.0ã¯15å¹´å‰ã®å¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã‚ã‚‹ãŒã€ã„ã¾ã ã«ã“ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ä½¿ã£ã¦ã„ã‚‹Webã‚µã‚¤ãƒˆãŒå¤šæ•°ã‚ã‚‹ã¨ã„ã†ã€‚ã¾ãŸã€Webãƒ–ãƒ©ã‚¦ã‚¶ã®ã»ã¨ã‚“ã©ã¯ã€HTTPSã‚µãƒ¼ãƒã®ãƒã‚°ã«ã‚ˆã‚Šãƒšãƒ¼ã‚¸ã«æŽ¥ç¶šã§ããªã„å ´åˆã€SSL 3.0ã‚’å«ã‚€æ—§ç‰ˆã®ãƒ—ãƒãƒˆã‚³ãƒ«ã§ãƒªãƒˆãƒ©ã‚¤ã™ã‚‹ã¨ã„ã†å½¢ã§SSL 3.0ã‚‚ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€‚ ã“ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã™ã‚‹ã¨ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„ã‚¯ãƒƒã‚ãƒ¼ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã€Webã‚µã‚¤ãƒˆä¸Šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å€‹äººæƒ…å ±ã‚’ç›—ã‚ã‚‹ã‚ˆã†ã«ãªã£ã¦ã—ã¾ã†ã¨ã„ã†ã€‚ Googleã¯ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†è€…ã¯Webã‚µã‚¤ãƒˆã®
golden_eggg 2014/10/15
Googleã¯TLS_FALLBACK_SCSVã‚’2æœˆã‹ã‚‰æŽ¡ç”¨ã—ã¦ãŸã€ã£ã¦äº‹ã¯ã€2æœˆã®æ™‚ç‚¹ã§æ—¢ã«æ¥µã‚ã¦ãƒžã‚ºã‚¤ã¨ã„ã†èªè˜ãŒã‚ã‚Šèª¿æŸ»æ¤œè¨¼ã‚’ç¶šã‘ãŸçµæžœã€ä¿ºé”ã®æ‡¸å¿µçš„ä¸ã—ã¡ã‚ƒã£ãŸãœå…¬è¡¨ã€ã¨ã„ã†æµã‚Œï¼Ÿ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
Security: Heartbleed vulnerability
AI & MLLearn about artificial intelligence and machine learning across the GitHub ecosystem and the wider industry. Generative AILearn how to build with generative AI. GitHub CopilotChange how you work with GitHub Copilot. LLMsEverything developers need to know about LLMs. Machine learningMachine learning tips, tricks, and best practices. How AI code generation worksExplore the capabilities and be
golden_eggg 2014/04/16
github

ssl
ãƒªãƒ³ã‚¯
OpenSSLã®è„†å¼±æ€§ã§æƒ³å®šã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ - ã‚ã‚‚ãŠãã°
JVNã‚„JPCERT/CCã®è¨˜äº‹ãŒã‚ã¾ã‚Šã«ã‚‚ã•ã‚‰ã£ã¨æ›¸ã‹ã‚Œã¦ã„ã¦ã€å…·ä½“çš„ãªãƒªã‚¹ã‚¯ãŒæƒ³åƒã—ã¥ã‚‰ã„ã¨æ€ã†ã®ã§èª¬æ˜Žã—ã¾ã™ã€‚ ä»ŠåŒ—ç”£æ¥ (ä»Šãƒ‹ãƒ¥ãƒ¼ã‚¹è¦‹ã¦æ¥ãŸã‹ã‚‰ä¸‰è¡Œã§æ•™ãˆã¦æ¬²ã—ã„ã¨ã„ã†äººå‘ã‘ã®ã¾ã¨ã‚) ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã®ã€Œæš—å·åŒ–ã€ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹OpenSSLã¨ã„ã†ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãŒ2å¹´é–“å£Šã‚Œã¦ã„ã¾ã—ãŸã€‚ ã“ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¯ä¾¿åˆ©ãªã®ã§ã€Facebookã ã¨ã‹YouTubeã ã¨ã‹ã€ã‚ã¡ã“ã¡ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã§ä½¿ã£ã¦ã„ã¾ã—ãŸã€‚ ä»–ã®äººã®å…¥åŠ›ã—ãŸIDã¨ã‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ã‹ã‚¯ãƒ¬ã‚«ç•ªå·ã¨ã‹ã‚’ã€æ‚ªã„äººãŒè¦‹ã‚‹ã“ã¨ãŒã§ãã¦ã—ã¾ã„ã¾ã™ã€‚(å®Ÿéš›ã«æ¼ã‚Œã¦ã‚‹ä¾‹) ä»–ã«ã‚‚è‰²ã€…æ¼ã‚Œã¦ã¾ã™ãŒã€ã¨ã‚Šã‚ãˆãšã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ä»¥å¤–ã®äººãŒè¦šãˆã¦ãŠãã¹ãã¯ã“ã“ã¾ã§ã§OKã§ã™ã€‚ã‚‚ã†å°‘ã—åˆ†ã‹ã‚Šã‚„ã™ã„æƒ…å ±ãŒä»¥ä¸‹ã«ã‚ã‚Šã¾ã™ã€‚ OpenSSL ã®è„†å¼±æ€§ã«å¯¾ã™ã‚‹ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆåˆ©ç”¨è€…ï¼ˆä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ï¼‰ã®å¯¾å¿œã«ã¤ã„ã¦ ã¾ã ç›´ã£ã¦ã„ãªã„ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚‚ã‚ã‚Œã°ã€å…ƒã€…å£Šã‚Œã¦ã„ãªã„ã‚¦ã‚§ãƒ–
golden_eggg 2014/04/11
å¤šè¬

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
How's My SSL?
Your SSL client is Probably Okay. Check out the sections below for information about the SSL/TLS client you used to render this page. Yeah, we really mean "TLS", not "SSL". Version Good Your client is using TLS 1.3, the most modern version of the encryption protocol. It gives you access to the fastest, most secure encryption possible on the web. Learn More Ephemeral Key Support Good Ephemeral keys
golden_eggg 2014/01/09
ssl
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸