[B! TLS] halfrackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

halfrack id:halfrack

TLSã«é–¢ã™ã‚‹halfrackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (32)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

FreeBSD 13.0-RELEASE Announcement
The FreeBSD Release Engineering Team is pleased to announce the availability of FreeBSD 13.0-RELEASE. This is the first release of the stable/13 branch. The clang, lld, and lldb utilities and compiler-rt, llvm, libunwind, and libc++ libraries have been updated to version 11.0.1. Removed the obsolete version of the GNU debugger that was installed to /usr/libexec for use by crashinfo(8). Detailed ke
$halfrack$
halfrack 2022/03/22
â€œnow supports in-kernel framing and encryption of Transport Layer Security (TLS) data on TCP sockets for TLS versions 1.0 through 1.3.â€

freebsd

security

tls
ãƒªãƒ³ã‚¯
[PDF]Serving Netflix Video at 400Gb/s on FreeBSD - NETFLIX, Drew Gallatin at EuroBSDCon 2021
Serving Netï¬‚ix Video at 400Gb/s on FreeBSD Drew Gallatin EuroBSDCon 2021 Outline: â— Motivation â— Description of production platform â— Description of workload â— To NUMA or not to NUMA? â— Inline Hardware (NIC) kTLS â— Alternate platforms Motivation: â— Since 2020, Netflix has been able to serve 200Gb/s of TLS encrypted video traffic from a single server. â— How can we serve ~400Gb/s of video from the s
$halfrack$
halfrack 2022/02/27
ãƒ¡ãƒ¢ãƒªå¸¯åŸŸã¨ NUMA ãƒŽãƒ¼ãƒ‰é–“å¸¯åŸŸãŒè¶³ã‚Šãªã„ã€ TLS æ™‚ä»£ã§ã‚‚ sendfile(2) å‡ºæ¥ã‚‹ã‚ˆã†ã« kTLS ã‚’å®Ÿè£…ã€ãã‚Œã§ã‚‚è¶³ã‚Šãªã„ã®ã§ TLS NIC offload ã»ã’ãƒ¼ã€‚ SSL ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ãŒ NIC å†…è”µã ã¨å†…éƒ¨ãƒã‚¹ã®å¸¯åŸŸã‚’é£Ÿã‚ãªã„ã¨ã€‚

freebsd

cpu

nic

network

linux

kernel

tls
ãƒªãƒ³ã‚¯
HTTP/2ã‚’åˆ©ç”¨ã™ã‚‹éš›ã¯Cipher Suiteã‚’æ£ã—ãè¨å®šã—ã‚ˆã† | IIJ Engineers Blog
2018å¹´æ–°å’å…¥ç¤¾ã€‚åå¤å±‹æ”¯ç¤¾ã«ã¦SIä¸å¿ƒã«ãŠä»•äº‹ã‚’ã™ã‚‹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã€‚ä»•äº‹ã§ã¯ã‚µãƒ¼ãƒã‚„ãƒŸãƒ‰ãƒ«ã‚¦ã‚§ã‚¢ã‚’ã€è¶£å‘³ã§ã¯ã‚¦ã‚§ãƒ–ã‚„ã‚¢ãƒ—ãƒªã‚’å¼„ã£ã¦ã„ã¾ã™ã€‚ ã€IIJ 2021 TECHã‚¢ãƒ‰ãƒ™ãƒ³ãƒˆã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼ 12/9ï¼ˆæœ¨ï¼‰ã®è¨˜äº‹ã§ã™ã€‘ ã¯ã˜ã‚ã« åå¤å±‹æ”¯ç¤¾ã® kmmt-t ã§ã™ã€‚ æœ€è¿‘ã®ãƒ¢ãƒ€ãƒ³ãªWebã‚µã‚¤ãƒˆã§ã¯ã€ã€ŒHTTP/2ã€ã‚’åˆ©ç”¨ã™ã‚‹ã‚µã‚¤ãƒˆãŒå¢—ãˆã¦ãã¾ã—ãŸã€‚ ã“ã®ã‚ˆã†ãªWebã‚µã‚¤ãƒˆã‚’å…¬é–‹ã™ã‚‹éš›ã«ã€Webã‚µãƒ¼ãƒå´ã®è¨å®šæ¬¡ç¬¬ã«ã‚ˆã£ã¦ã¯ãƒ¢ãƒ€ãƒ³ãƒ–ãƒ©ã‚¦ã‚¶ï¼ˆEdgeã‚„Chromeï¼‰ã§ãƒšãƒ¼ã‚¸ã‚’é–‹ã‘ãªã„å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ å…·ä½“çš„ã«ã¯TLS1.2ã¨HTTP/2ã‚’çµ„ã¿åˆã‚ã›ãŸWebã‚µã‚¤ãƒˆã«ãŠã„ã¦ã€ç‰¹å®šã®Cipher Suiteã‚’æŒ‡å®šã—ã¦ã„ã‚‹å ´åˆã«ãƒ–ãƒ©ã‚¦ã‚¶ãŒ ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY ç‰ã®ã‚¨ãƒ©ãƒ¼ã‚’å‡ºã—ã¦ãƒšãƒ¼ã‚¸ã‚’ãƒ–ãƒãƒƒã‚¯ã™ã‚‹ã‚ˆã†ãªç¾è±¡ãŒç™ºç”Ÿã—ã¾ã™ã€‚ ç‰¹ã«ã€åˆ©ç”¨è€…å´ãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒ
$halfrack$
halfrack 2022/01/04
RFC ã® MAY ã‹â€¦ / ã‚µãƒ¼ãƒå´ã§ã®æŒ‡å®šãŒæŽ¨å¥¨ã¸ã‡

tls

security
ãƒªãƒ³ã‚¯
è¨¼æ˜Žæ›¸ã®ãƒ”ãƒ³ãƒ‹ãƒ³ã‚°ã¯ã‚„ã‚ã¾ã—ã‚‡ã†
ãƒ‡ã‚¸ã‚¿ãƒ«ãƒˆãƒ©ã‚¹ãƒˆè£½å“/ã‚µãƒ¼ãƒ“ã‚¹ä¸€è¦§ï¼š ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º ITã€PKIã€ID DigiCertÂ® Trust Lifecycle Manager ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆï¼†ã‚µãƒ¼ãƒãƒ¼ DigiCert CertCentral TLS/SSL Manager ã‚³ãƒ¼ãƒ‰ï¼†ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ DigiCertÂ® Software Trust Manager æ–‡æ›¸ï¼†ç½²å DigiCertÂ® Document Trust Manager IoTï¼†ã‚³ãƒã‚¯ãƒ†ãƒƒãƒ‰ãƒ‡ãƒã‚¤ã‚¹ DigiCertÂ® IoT Trust Manager Matter ã«ã‚ˆã‚‹ IoT ãƒ‡ãƒã‚¤ã‚¹èªè¨¼ DigiCertÂ® TrustCore SDK
$halfrack$
halfrack 2021/12/20
ã‚ãƒ¼ã®ãƒãƒ¼ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ã‚„å¤±åŠ¹ã‚’å¦¨å®³ã—é€†ã«å±é™ºåº¦ãŒå¢—ã™ã®ã§ã‚„ã‚ã‚ãªã‚‹ã»ã©

tls

security
ãƒªãƒ³ã‚¯
æ•°ç™¾ä¸‡ä»¶æ®‹ã£ã¦ã„ãŸHTTPã®ã¯ã¦ãªãƒ–ãƒã‚°ã‚’4å¹´è¶Šã—ã«ã™ã¹ã¦HTTPSåŒ–ã•ã›ãŸè©± - Hatena Developer Blog
ã“ã‚“ã«ã¡ã¯ id:cohalz ã§ã™ã€‚ã¯ã¦ãªãƒ–ãƒã‚°ã§ã¯2021å¹´4æœˆã®å…¬å¼ãƒ–ãƒã‚°ã§ã€ã™ã¹ã¦ã®ãƒ–ãƒã‚°ã‚’HTTPSã«ä¸€æœ¬åŒ–ã—ã¦ã„ãã“ã¨ã‚’æ¡ˆå†…ã—ã¾ã—ãŸã€‚ â–¶ ã€ŒHTTPSé…ä¿¡ã€ã¸ã®åˆ‡ã‚Šæ›¿ãˆã¨ã€ãƒ–ãƒã‚°ã®è¡¨ç¤ºã®ç¢ºèªã‚’ãŠé¡˜ã„ã„ãŸã—ã¾ã™ ã“ã®æ™‚ç‚¹ã§ã¾ã æ•°ç™¾ä¸‡ä»¶ã®HTTPã®ãƒ–ãƒã‚°ãŒæ®‹ã£ã¦ã„ã‚‹çŠ¶æ…‹ã§ã—ãŸãŒã€2021å¹´8æœˆã«ã¯ä¸Šè¨˜ã®æ¡ˆå†…ã«è¿½è¨˜ã—ãŸã‚ˆã†ã«ã€å…¨ãƒ–ãƒã‚°ã§HTTPSåŒ–ã‚’å®Œäº†ã§ãã¾ã—ãŸã€‚ å®Œäº†ã¾ã§ã«è¡Œã£ã¦ããŸã“ã¨ã‚’ã“ã®è¨˜äº‹ã§æŒ¯ã‚Šè¿”ã£ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ã¯ã¦ãªãƒ–ãƒã‚°ã®HTTPSåŒ–ã®ã“ã‚Œã¾ã§ ã¯ã¦ãªãƒ–ãƒã‚°ã®HTTPSåŒ–ã¯ã€2017å¹´9æœˆã«æœ€åˆã®ãŠçŸ¥ã‚‰ã›ã‚’è¡Œã£ã¦ã‚¹ã‚¿ãƒ¼ãƒˆã—ã¾ã—ãŸã€‚ å½“åˆã®äºˆå®šã‚ˆã‚Šæ™‚é–“ãŒã‹ã‹ã‚Šã¾ã—ãŸãŒã€2018å¹´2æœˆã«HTTPSé…ä¿¡ã®æä¾›ã‚’é–‹å§‹ã—ã€ã“ã‚Œä»¥é™ã«ä½œæˆã•ã‚ŒãŸãƒ–ãƒã‚°ã¯æœ€åˆã‹ã‚‰HTTPSã®ã¿ã§é…ä¿¡ã•ã‚Œã¦ã„ã¾ã™ã€‚ã¾ãŸã€ãã‚Œä»¥å‰ã«ä½œæˆã•ã‚ŒãŸãƒ–ãƒã‚°ã§ã‚‚ã€ãƒ¦ãƒ¼ã‚¶å´ã§è¨å®šã‚’å¤‰æ›´ã™ã‚‹ã“ã¨ã§è‡ªåˆ†ã®ãƒ–ãƒ
$halfrack$
halfrack 2021/10/25
ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒã‚±ãƒƒãƒˆã‚’ã¡ã‚ƒã‚“ã¨å…±æœ‰ã—ã¦ã‚‹

blog

tls

hatena

security
ãƒªãƒ³ã‚¯
GitHub - aws/aws-nitro-enclaves-acm: AWS Certificate Manager for Nitro Enclaves allows the use of public and private SSL/TLS certificates with web applications and web servers running on Amazon EC2 instances with AWS Nitro Enclaves.
$halfrack$
halfrack 2020/10/29
aws

tls

pki
ãƒªãƒ³ã‚¯
Microsoftã€TLS 1.0/1.1ã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆç„¡åŠ¹åŒ–ã‚’å»¶æœŸ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
Microsoftã¯3æœˆ31æ—¥ã€åŒç¤¾è£½Webãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã®TLS 1.0/1.1ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆç„¡åŠ¹åŒ–ã‚’å»¶æœŸã™ã‚‹ã¨ç™ºè¡¨ã—ãŸ(Microsoft Edge Blogã®è¨˜äº‹ã€ Ghacksã®è¨˜äº‹ã€ Neowinã®è¨˜äº‹ã€ On MSFTã®è¨˜äº‹)ã€‚ Apple/Google/Microsoft/Mozillaã®ãƒ¡ã‚¸ãƒ£ãƒ¼ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼4ç¤¾ã¯TLS 1.0/1.1ç„¡åŠ¹åŒ–è¨ˆç”»ã‚’2018å¹´10æœˆã«ç™ºè¡¨ã—ã¦ãŠã‚Šã€Microsoftã¯2020å¹´ä¸ŠåŠæœŸã«ãã®æ™‚ç‚¹ã§ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®Microsoft Edgeã¨Internet Explorer 11ã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ç„¡åŠ¹åŒ–ã™ã‚‹è¨ˆç”»ã‚’ç¤ºã—ã¦ã„ãŸã€‚ ã—ã‹ã—ã€ç¾åœ¨ã®ä¸–ç•Œã‚’å–ã‚Šå·»ãçŠ¶æ³(COVID-19ãƒ‘ãƒ³ãƒ‡ãƒŸãƒƒã‚¯)ã‚’è€ƒæ…®ã—ã¦ã€ä¸ŠåŠæœŸä¸ã«ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆç„¡åŠ¹ã«ã—ãªã„ã“ã¨ã‚’æ±ºã‚ãŸãã†ã ã€‚ãã®ãŸã‚ã€Chromiumãƒ™ãƒ¼ã‚¹ã®æ–°Microsoft Edgeã§ã¯7æœˆã«ãƒªãƒªãƒ¼ã‚¹äºˆå®šã®ãƒãƒ¼
$halfrack$
halfrack 2020/04/06
ã‚“ã”ãƒ¼ãƒ¼ãƒ¼(ã„ã¾ã“ã‚Œã®å¯¾å¿œã‚’ã‚„ã£ã¦ã„ã‚‹

tls

mozilla

chrome

web

security
ãƒªãƒ³ã‚¯
ACME v1/v2: Validating challenges from multiple network vantage points - API Announcements - Let's Encrypt Community Support
On Wednesday February 19th, 2020 weâ€™ll turn on stricter validation requirements in production. Weâ€™ll make multiple validation requests from different network perspectives. Most issuance should continue as normal; we believe that a small number of domain names may need fixing. The most common issue will be hosts that use extremely strict firewall rules to allow validation from only specified IP add
$halfrack$
halfrack 2020/02/27
security

dns

tls
ãƒªãƒ³ã‚¯
ã•ãã‚‰ã®ã‚¯ãƒ©ã‚¦ãƒ‰ã€Œã‚¨ãƒ³ãƒãƒ³ã‚¹ãƒ‰LBã€ã‚’ä½œã£ãŸè©±(å¾Œç·¨) - Qiita
ã“ã®è¨˜äº‹ã¯ ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ Advent Calendar 2019 5æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆç ”ç©¶æ‰€ã®å¤§ä¹…ä¿ã§ã™ã€‚ æ˜¨æ—¥å…¬é–‹ã—ãŸå‰ç·¨ã§ã¯ã€å¼Šç¤¾ã®IaaSã§ã‚ã‚‹ã•ãã‚‰ã®ã‚¯ãƒ©ã‚¦ãƒ‰ä¸Šã§æä¾›ã—ã¦ã„ã‚‹ã€Œã‚¨ãƒ³ãƒãƒ³ã‚¹ãƒ‰ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã€æ©Ÿèƒ½ã«ã¤ã„ã¦ã€æ¦‚è¦ã¨å…¨ä½“æ§‹æˆã®ç´¹ä»‹ã‚’ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ å¾Œç·¨ã¨ãªã‚‹æœ¬ç¨¿ã§ã¯ã€ã‚·ã‚¹ãƒ†ãƒ ã‚’æ§‹æˆã™ã‚‹å„ãƒ‘ãƒ¼ãƒ„ã®è©³ç´°ã«ã¤ã„ã¦å¼•ãç¶šãç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ VIPãƒ•ã‚§ã‚¤ãƒ«ã‚ªãƒ¼ãƒæ©Ÿèƒ½ã«ã¤ã„ã¦ ä»Šå›žã¾ãšã¯ã˜ã‚ã«ã€DDoSæ”»æ’ƒå¯¾ç–ã¨ã—ã¦å®Ÿè£…ã—ãŸæ©Ÿèƒ½ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ ãŒã€ã‚ã‚‰ã‹ã˜ã‚ç”³ã—ä¸Šã’ã¦ãŠãã¾ã™ã¨ã€ã“ã‚Œã§ã©ã‚“ãªDDoSã«ã‚‚å®Œç’§ã«å¯¾å¿œã§ãã¾ã™ï¼ ã¨ã„ã†ã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ ðŸ˜‡ ä¸€èˆ¬çš„ãªDDoSãƒŸãƒ†ã‚£ã‚²ãƒ¼ã‚·ãƒ§ãƒ³ã®ä»•çµ„ã¿ã§ã¯ã€DPI(Deep Packet Inspection)ã‚’ç”¨ã„ã¦æ”»æ’ƒãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã®ã¿ã‚’æŠ½å‡ºç ´æ£„ã—ã€æ£å¸¸ãªãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã®ã¿ã‚’é€šéŽã•ã›ã‚‹ã“ã¨ãŒè¡Œ
$halfrack$
halfrack 2019/12/09
TLS å¤šå°‘å‰ã®ã‚ã‚Šãªè¨å®šã

ddos

tls

loadbalancer
ãƒªãƒ³ã‚¯
DigiCertã«ã‚ˆã‚‹ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹ã®é€†å¼•ãåã®è¨¼æ˜Žæ›¸èª¤ç™ºè¡Œ - ASnoKaze blog
DigiCertã®ç™ºè¡Œã—ãŸè¨¼æ˜Žæ›¸ã§ã€ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚¢ãƒ‰ãƒ¬ã‚¹(192.168.1.)ã®é€†å¼•ãåã§ã‚ã‚‹ã€Œ1.1.168.192.in-addr.arpaã€ã‚’å«ã‚€è¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒåˆ¤æ˜Žã—è©±é¡Œã¨ãªã£ãŸã€‚ ã™ã§ã«ã€revokeã•ã‚Œã¦ã„ã‚‹ãŒã€ä¸‹è¨˜ã®é€šã‚ŠSANsã«ã€Œ1.1.168.192.in-addr.arpaã€ãŒå«ã¾ã‚Œã¦ã„ãŸã€‚ X509v3 Subject Alternative Name: DNS:cynthia.re DNS:www.cynthia.re DNS:1.1.168.192.in-addr.arpa DNS:69.168.110.79.in-addr.arpahttps://crt.sh/?id=1231411316 æœ€åˆã®å ±å‘Šã¯ã€2æœˆ27æ—¥ã«mozilla.dev.security.policyãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã«æŠ•ç¨¿ã•ã‚ŒãŸã€ŒPossible DigiCert in-addr
$halfrack$
halfrack 2019/03/06
é€†å¼•ãã«é™ã‚‰ãšä»–äººãŒä½¿ã„ã†ã‚‹ã‚¢ãƒ‰ãƒ¬ã‚¹ã«è¨¼æ˜Žæ›¸å‡ºã—ã¡ã‚ƒãƒ€ãƒ¡ãã†â€¦

dns

security

tls
ãƒªãƒ³ã‚¯
New â€“ TLS Termination for Network Load Balancers | Amazon Web Services
AWS News Blog New â€“ TLS Termination for Network Load Balancers When you access a web site using the HTTPS protocol, a whole lot of interesting work (formally known as an SSL/TLS handshake) happens to create and maintain a secure communication channel. Your client (browser) and the web server work together to negotiate a mutually agreeable cipher, exchange keys, and set up a session key. Once estab
$halfrack$
halfrack 2019/01/25
ã“ã‚Šã‚ƒå®Œå…¨ãªç‹¬è‡ªå®Ÿè£…ã ã‚ã†ãªã

AWS

TLS

network

loadbalancer
ãƒªãƒ³ã‚¯
[PDF] The Rise of Certificate Transparency and Its Implications on the Internet Ecosystem (IETF 103, Bangkok, 2018)
$halfrack$
halfrack 2018/11/07
ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆä»•æŽ›ã‘ãŸã¨ã“ã‚ CT log ã‚’æ‚ªç”¨ã—ã¦ã„ã‚‹é€£ä¸ãŒæ—¢ã«å˜åœ¨ã™ã‚‹ã“ã¨ãŒç¢ºèªã•ã‚ŒãŸ

security

TLS
ãƒªãƒ³ã‚¯
TLS 1.3ã®æ¨™æº–åŒ–ã¨å®Ÿè£… | IIJ Engineers Blog
IIJ-II æŠ€è¡“ç ”ç©¶æ‰€ æŠ€è¡“é–‹ç™ºå®¤ã®å±±æœ¬ã§ã™ã€‚ç¾åœ¨æŠ€è¡“é–‹ç™ºå®¤ã¯ã€ç§ã‚’å«ã‚ãŸ4äººã§æ§‹æˆã•ã‚Œã¦ãŠã‚Šã€ä¸»ã«ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžHaskellã‚’ä½¿ã£ã¦é–‹ç™ºã‚’é€²ã‚ã¦ã„ã¾ã™ã€‚ä»Šå›žã®è©±é¡Œã§ã‚ã‚‹ TLS(Transport Layer Security) 1.3 ã‚‚Haskellã§å®Ÿè£…ã—ã¾ã—ãŸã€‚ 4å¹´ã®æ³æœˆã‚’ã‹ã‘ã¦è°è«–ã•ã‚Œã¦ããŸTLS 1.3ã§ã™ãŒã€ã“ã®8æœˆã«ã‚ã§ãŸãä»•æ§˜ãŒRFC 8446ã¨ãªã‚Šã¾ã—ãŸã€‚è²¢çŒ®è€…ãƒªã‚¹ãƒˆã«ç§ã®åå‰ãŒè¼‰ã£ã¦ã„ã‚‹ã“ã¨ã‚’èžãã¤ã‘ãŸåºƒå ±ã‹ã‚‰ã€ãƒ–ãƒã‚°è¨˜äº‹ã®åŸ·ç†ä¾é ¼ãŒã‚ã‚Šã¾ã—ãŸã®ã§ã€TLS 1.3ã®æ¨™æº–åŒ–ã‚„å®Ÿè£…ã®è©±ã«ã¤ã„ã¦æ›¸ã„ã¦ã¿ã¾ã™ã€‚ ãªãœTLS 1.3ã‚’æ¨™æº–åŒ–ã™ã‚‹å¿…è¦ãŒã‚ã£ãŸã®ã‹ç†ç”±ã‚’çŸ¥ã‚ŠãŸã„æ–¹ã¯ã€ã€ŒTLSã®å‹•å‘ã€ã¨ã„ã†è¨˜äº‹ã‚„ã€ŒTLS 1.3ã€ã¨ã„ã†ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’èªã‚“ã§ä¸‹ã•ã„ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«ã¯ã€IETFã¨ã„ã†å›£ä½“ã§ä»•æ§˜ãŒè°è«–ã•ã‚Œã¦ç–å®šã•ã‚Œã¾ã™ã€‚IETFã«ã¯ã€èª°ã§ã‚‚
$halfrack$
halfrack 2018/09/28
é¢ç™½ã‹ã£ãŸ

security

tls
ãƒªãƒ³ã‚¯
Go to DigiCert WebSite
The page will move to DigiCert Web Site 3 secounds latter.
$halfrack$
halfrack 2018/09/25
ã‚µã‚¤ãƒãƒ¼ãƒˆãƒ©ã‚¹ãƒˆãŒç±³å›½DigiCert ã®ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ã‚„ã£ã¦ã‚‹ãŒã€ç±³å›½DigiCert åä¼šç¤¾ã®ãƒ‡ã‚¸ã‚µãƒ¼ãƒˆã‚¸ãƒ£ãƒ‘ãƒ³ã‚‚å˜åœ¨ã™ã‚‹ã€ã¨çŸ¥ã£ãŸã¨ãã®é¡”ã‚’ã—ã¦ã„ã‚‹

TLS

security
ãƒªãƒ³ã‚¯
DigiCert Statement on Trustico Certificate Revocation
Resources Explore these pages to discover how DigiCert is helping organizations establish, manage and extend digital trust to solve real-world probl ems. BLOG > PR & NEWS > EVENTS > CASE STUDIES > WEBINARS >
$halfrack$
halfrack 2018/03/01
ä»£ç†åº—ãŒä½•æ•…ã‹é¡§å®¢ã®ç§˜å¯†éµã‚’æŒã£ã¦ãŠã‚Šã‹ã¤ä½•æ•…ã‹ DigiCert ã«ãƒ¡ãƒ¼ãƒ«ã§é€ä»˜ã—ã¦ããŸã€ã—ã‹ã‚‚ Chrome ã®ä»¶ã«æ··ãœã¦èª¤é”åŒ–ãã†ã¨ã—ã¦ã„ãŸã€ã®ã§ 24æ™‚é–“ä»¥å†…ã«å…¨éƒ¨ revoke!!ä½•ãŒèµ·ãã¦ã„ã‚‹ã®ï¼Ÿï¼Ÿ

TLS

security

Symantec
ãƒªãƒ³ã‚¯
Redirecting to ssl-config.mozilla.org...
Mozilla SSL Configuration Generator Redirecting to the updated SSL Configuration Generatorâ€¦
$halfrack$
halfrack 2018/03/01
æ”»ã‚ãŸè¨å®šã§ã¯ãªã„ã—ã“ã‚Œãã‚‰ã„ã«ã—ã¦ã„ã„ã‹ã‚‚ãªã

mozilla

security

TLS
ãƒªãƒ³ã‚¯
A Technical Deep Dive: Securing the Automation of ACME DNS Challenge Validation
$halfrack$
halfrack 2018/02/28
DNS

TLS

security
ãƒªãƒ³ã‚¯
ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼åž‹ | ã•ãã‚‰ã®SSL
ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼åž‹ æœ€çŸå³æ—¥ç™ºè¡Œå¯èƒ½ãªãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼åž‹ã®SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã§ã™ã€‚ ã€Œ.jpã€ã‚’ç™»éŒ²ç®¡ç†ã™ã‚‹JPRSãŒç™ºè¡Œã™ã‚‹å®‰å¿ƒã¨ä¿¡é ¼ã®è¨¼æ˜Žæ›¸ã‚’å¹´é–“990å††ã®ãŠæ‰‹é ƒä¾¡æ ¼ã§ã”æä¾›ã—ã¾ã™ã€‚ ä½Žã‚³ã‚¹ãƒˆã§ã™ãã«SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’å°Žå…¥ã•ã‚ŒãŸã„æ–¹ã«ãŠã™ã™ã‚ã§ã™ã€‚ ä»Šã™ãç”³ã—è¾¼ã‚€
$halfrack$
halfrack 2018/01/30
ã‚€ã£ã¡ã‚ƒå®‰ã„ãªã“ã‚Œ

TLS
ãƒªãƒ³ã‚¯
TLS over HTTPã®ææ¡ˆä»•æ§˜ - ASnoKaze blog
TLS over HTTPã§ã‚ã‚‹ã€‚HTTP over TLSã§ã¯ãªã„ã€‚ ã€ŒApplication-Layer TLSã€ã¨ã„ã†ææ¡ˆä»•æ§˜ãŒCiscoã®æ–¹ã‚ˆã‚Šæå‡ºã•ã‚Œã¦ã„ã‚‹ã€‚(ä»•æ§˜ä¸ã§ã¯ATLSã¨è¨˜è¿°ã•ã‚Œã‚‹) HTTPä¸Šã§TLSãƒ¬ã‚³ãƒ¼ãƒ‰ã‚’é€å—ä¿¡ã™ã‚‹ä»•æ§˜ã§ã‚ã‚‹ã€‚ TLSãƒ¬ã‚¤ãƒ¤ã®å®Ÿè£…å¤‰æ›´ã¯ãªããƒ¬ã‚³ãƒ¼ãƒ‰ã‚’HTTPã®ãƒœãƒ‡ã‚£ã§é€å—ä¿¡ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã€‚ãªãŠã€httpã¨httpsä¸¡æ–¹ã§ä½¿ç”¨å¯èƒ½ã§ã‚ã‚‹ã€‚ ã¾ãŸã€TLS1.2ã¨TLS1.3ãªã©ã™ã¹ã¦ã®TLSãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«å¯¾å¿œã™ã‚‹ã€‚ æ¥é€±ã‹ã‚‰ã¯ã˜ã¾ã‚‹IETF100ã§ã‚‚è°è«–ã•ã‚Œã‚‹ã‚ˆã†ãªã®ã§ã€ã‹ã„ã¤ã¾ã‚“ã§èªã‚“ã§è¦‹ã‚‹ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ã®åŸºæœ¬çš„ãªãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã¯ã€POSTã§JSONã‚’é€ä¿¡ã™ã‚‹ã€‚ Content-Typeã«ã¯application/atls+jsonã‚’æŒ‡å®šã™ã‚‹ POST /atls Content-Type: application/atls+jso
$halfrack$
halfrack 2017/11/14
MITM ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿå™¨ã‚’è¿‚å›žã™ã‚‹ãŸã‚ã« TLS over HTTP ãªã‚‹ã»ã©åœ°ç„ã®å†ç”Ÿç”£

TLS

security
ãƒªãƒ³ã‚¯
Application Load BalancerãŒSNIã‚’åˆ©ç”¨ã—ãŸè¤‡æ•°ã®TLSè¨¼æ˜Žæ›¸ã®ã‚¹ãƒžãƒ¼ãƒˆã‚»ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¾ã—ãŸ | Amazon Web Services
Amazon Web Services ãƒ–ãƒã‚° Application Load BalancerãŒSNIã‚’åˆ©ç”¨ã—ãŸè¤‡æ•°ã®TLSè¨¼æ˜Žæ›¸ã®ã‚¹ãƒžãƒ¼ãƒˆã‚»ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³ã‚’ã‚µãƒãƒ¼ãƒˆã—ã¾ã—ãŸ æœ¬æ—¥ã€æˆ‘ã€…ã¯Application Load Balancer (ALB)ã§Server Name Indication (SNI)ã‚’ä½¿ã£ãŸè¤‡æ•°ã®TLS/SSLè¨¼æ˜Žæ›¸ã®ã‚µãƒãƒ¼ãƒˆã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸã€‚ã“ã‚Œã«ã‚ˆã£ã¦ã€å˜ä¸€ã®ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã®èƒŒå¾Œã«ã€ãã‚Œãžã‚Œåˆ¥ã®è¨¼æ˜Žæ›¸ã‚’æŒã£ãŸTLSã§ä¿è·ã•ã‚ŒãŸã‚»ã‚ãƒ¥ã‚¢ãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¤‡æ•°é…ç½®ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚Šã¾ã™ã€‚SNIã‚’åˆ©ç”¨ã™ã‚‹ãŸã‚ã«ã¯ã€è¤‡æ•°ã®è¨¼æ˜Žæ›¸ã‚’ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã®åŒã˜ã‚»ã‚ãƒ¥ã‚¢ãƒªã‚¹ãƒŠãƒ¼ã«ç´ä»˜ã‘ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ALBã¯å„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«æœ€é©ãªTLSè¨¼æ˜Žæ›¸ã‚’è‡ªå‹•çš„ã«é¸æŠžã—ã¾ã™ã€‚ã“ã‚Œã‚‰ã®æ–°æ©Ÿèƒ½ã¯è¿½åŠ æ–™é‡‘ç„¡ã—ã§ã”åˆ©ç”¨å¯èƒ½ã§ã™ã€‚ ã‚‚ã—æ–°ã—ã„æ©Ÿèƒ½ã‚’ã©ã†ã‚„ã£ã¦ä½¿ãˆã°ã„ã„ã‹ã‚’æ‰‹ã£å–ã‚Šæ—©ãçŸ¥ã‚ŠãŸã‘ã‚Œã°
$halfrack$
halfrack 2017/10/12
ä¾‹ç¤ºã®ãƒ‰ãƒ¡ã‚¤ãƒ³åï¼Ÿï¼Ÿï¼Ÿï¼Ÿ

AWS

security

emacs

vim

TLS
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸