[B! https] ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ishideo id:ishideo

httpsã«é–¢ã™ã‚‹ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (36)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

updown.io â€“ Website monitoring, simple and inexpensive
HTTP(S), TCP(S), ICMP Five check types to cover most of your online services (not just web). Pulse/cron Monitoring Keep an eye on your periodic tasks and cron jobs. How? Dual-Stack Zero configuration dual-stack monitoring (IPv4/v6), same price. Fast checks, fair price Set the check frequency between 15s and 1h. The pricing scales linearly. TLS/SSL testing Receive alerts in case of invalid or expir
ishideo 2025/10/19
updown.io

uptime

website

http

https

tls

expiration

alert

api

domain
ãƒªãƒ³ã‚¯
GitHub - lwthiker/curl-impersonate: curl-impersonate: A special build of curl that can impersonate Chrome & Firefox
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
ishideo 2025/01/03
edge

firefox

chrome

safari

curl

curl-impersonate

cli

tls

https

github
ãƒªãƒ³ã‚¯
â€œHTTPSãƒ¬ã‚³ãƒ¼ãƒ‰â€ã£ã¦çŸ¥ã£ã¦ã‚‹ï¼Ÿä»ŠçŸ¥ã‚‹ã¹ã4ã¤ã®æ³¨æ„ç‚¹ | IIJ Engineers Blog
[æ³¨] ã“ã®è¨˜äº‹ã¯ã™ãã«é™³è…åŒ–ã™ã‚‹ã¯ãšã®å†…å®¹ã«ã¤ã„ã¦æ‰±ã£ã¦ã„ã¾ã™ã€‚ä½•å¹´ã‹çµŒã£ã¦ã‹ã‚‰ã“ã®è¨˜äº‹ã‚’å‚ç…§ã™ã‚‹å ´åˆã€2022å¹´3æœˆã«æ›¸ã‹ã‚ŒãŸå†…å®¹ã§ã‚ã‚‹ã“ã¨ã‚’ç•™æ„ã®ä¸ŠãŠèªã¿ãã ã•ã„ã€‚ ã¯ã˜ã‚ã« IIJ DNSãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã‚µãƒ¼ãƒ“ã‚¹ã«ã¦ã€å…ˆæ—¥å¤§ããªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã¨å°ã•ãªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒã‚ã‚Šã¾ã—ãŸã€‚å¤§ããªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã¨ã„ã†ã®ã¯ã€ã“ã‚Œã¾ã§ã®ãƒžãƒãƒ¼ã‚¸ãƒ‰DNSã‚µãƒ¼ãƒ“ã‚¹ã«åŠ ãˆã¦ã‚‚ã†ã²ã¨ã¤ã€IIJ DNSãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ãƒžãƒãƒ¼ã‚¸ãƒ¡ãƒ³ãƒˆã‚µãƒ¼ãƒ“ã‚¹ã¨ã„ã†æ–°ãŸãªã‚µãƒ¼ãƒ“ã‚¹ãŒè¿½åŠ ã•ã‚ŒãŸã“ã¨ã€‚ã‚µãƒ¼ãƒã®æ»æ´»ç›£è¦–çµæžœã«å¿œã˜ã¦å‹•çš„ã«DNSã®å¿œç”ã‚’å¤‰ãˆã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚å°ã•ãªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã¯ã€å¾“æ¥ã®ãƒžãƒãƒ¼ã‚¸ãƒ‰DNSã‚µãƒ¼ãƒ“ã‚¹ã¸ã®æ©Ÿèƒ½è¿½åŠ ã€‚HTTPSãƒ¬ã‚³ãƒ¼ãƒ‰ã«å¯¾å¿œã—ã¾ã—ãŸã€‚ ã‚µãƒ¼ãƒ“ã‚¹ã®å®£ä¼ã¨ã„ã†æ„å‘³ã§ã¯å¤§ããªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã®æ–¹ã‚’ç´¹ä»‹ã—ãŸæ–¹ãŒã„ã„ã‚“ã§ã—ã‚‡ã†ã‘ã‚Œã©ã€ãƒ˜ã‚½æ›²ãŒã‚Šãªã®ã§ã“ã“ã§ã¯å°ã•ãªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã€HTTPSãƒ¬ã‚³ãƒ¼ãƒ‰ã®æ–¹ã«ç„¦ç‚¹ã‚’ã‚ã¦ã¾ã™ã€‚ ãã‚‚
ishideo 2024/04/02
iij

https

dns

kdig

dig
ãƒªãƒ³ã‚¯
CloudFrontã®ã‚ªãƒªã‚¸ãƒ³ã‚’EC2ã«ã—ã¦HTTPSé€šä¿¡ã‚’å¼·åˆ¶ã™ã‚‹æ§‹æˆã«ã¤ã„ã¦ | DevelopersIO
ã—ã°ãŸã§ã™ã€‚ å€‹äººçš„ã«ã¯ã‚ã¾ã‚ŠãŠå‹§ã‚ã—ãªã„ã®ã§ã™ãŒã€å°è¦æ¨¡ãªç’°å¢ƒã§ã‚³ã‚¹ãƒˆã‚’é‡è¦–ã™ã‚‹å ´åˆã«EC2ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹å˜ä½“ã‚’CloudFrontã®ã‚ªãƒªã‚¸ãƒ³ã«ã™ã‚‹ã“ã¨ãŒã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚ ã¾ãŸã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦ä»¶ã«ã‚ˆã‚Šã‚¨ãƒ³ãƒ‰ãƒ„ãƒ¼ã‚¨ãƒ³ãƒ‰ã§é€šä¿¡ã®æš—å·åŒ–ãŒå¿…é ˆã¨ã„ã†å ´åˆã‚‚ã‚ã‚‹ã§ã—ã‚‡ã†ã€‚ ã“ã®æ§˜ãªå ´åˆã–ã£ãã‚Šä¸‹å›³ã®æ§‹æˆã«ãªã‚‹ã¨æ€ã„ã¾ã™ã€‚ ã‚¨ãƒ³ãƒ‰ãƒ„ãƒ¼ã‚¨ãƒ³ãƒ‰ã§æš—å·åŒ–é€šä¿¡ã‚’è¡Œã†ãŸã‚EC2ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã«ã‚‚SSLè¨¼æ˜Žæ›¸ã‚’å°Žå…¥ã—CloudFrontâ‡”EC2é–“ã®é€šä¿¡ã‚’HTTPSã«ã—ã¦ã‚„ã‚Šã¾ã™ã€‚ ç’°å¢ƒã«ã‚ˆã£ã¦ã¯AWS WAFã‚’å°Žå…¥ã—ãŸã‚Šé™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’S3ãƒã‚±ãƒƒãƒˆã«é…ç½®ã™ã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã§ã—ã‚‡ã†ã€‚ æœ¬è¨˜äº‹ã§ã¯ã“ã®æ§‹æˆã®ã†ã¡CloudFrontã¨EC2ã‚’ä¸å¿ƒã«ã—ãŸæ§‹ç¯‰æ–¹æ³•ã«ã¤ã„ã¦è§£èª¬ã—ã¦ã„ãã¾ã™ã€‚ CloudFrontã¨ã‚«ã‚¹ã‚¿ãƒ ã‚ªãƒªã‚¸ãƒ³é–“ã®é€šä¿¡ã§HTTPSã‚’å¿…é ˆã«ã™ã‚‹ CloudFrontã‹ã‚‰EC2ã‚ªãƒªã‚¸ãƒ³(ã‚«ã‚¹ã‚¿ãƒ ã‚ªãƒªã‚¸ãƒ³)ã®é–“ã§HT
ishideo 2024/01/23
aws

cloudfront

origin-ip

https

tls

certificate

classmethod
ãƒªãƒ³ã‚¯
A Detailed Guide on httpx
ishideo 2023/10/20
httpx

cli

http

https

hackingarticles

scan
ãƒªãƒ³ã‚¯
Masscan with HTTPS support
Masscan is a fast network scanner that is good for scanning a large range of IP addresses and ports. Weâ€™ve adapted it to our needs by giving it a little tweak. The biggest inconvenience in the original version was the inability to collect banners from HTTPS servers. And what is a modern web without HTTPS? You canâ€™t really scan anything. Thatâ€™s what motivated us to modify masscan. As it usually hap
ishideo 2023/10/07
masscan

https

port

scan

medium

nmap
ãƒªãƒ³ã‚¯
GitHub - byu-imaal/dohjs: DNS over HTTPS client for use in the browser
ishideo 2023/03/24
dns

dohjs

javascript

https

doh

github
ãƒªãƒ³ã‚¯
ã‚¼ãƒå††ã‹ã‚‰å§‹ã‚ã‚‹HTTP(S)ãƒãƒ‹ãƒ¼ãƒãƒƒãƒˆ - HackMD
ishideo 2022/03/17
ninoseki

hackmd

https

http

honeypot

heroku

logz.io

free

sleep.warm
ãƒªãƒ³ã‚¯
ã‚¤ãƒ©ã‚¹ãƒˆã§æ£ã—ãç†è§£ã™ã‚‹TLS 1.3ã®æš—å·æŠ€è¡“
ã‚¤ãƒ©ã‚¹ãƒˆã§æ£ã—ãç†è§£ã™ã‚‹TLS 1.3ã®æš—å·æŠ€è¡“ åˆã‚ã« ã“ã“ã§ã¯TLS 1.3ï¼ˆä»¥ä¸‹TLSã¨ç•¥è¨˜ï¼‰ã§ä½¿ã‚ã‚Œã¦ã„ã‚‹æš—å·æŠ€è¡“ã‚’è§£èª¬ã—ã¾ã™ã€‚ ä¸»çœ¼ã¯TLSã®ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã¯ãªãã€ã€Œæš—å·æŠ€è¡“ã€ã®ç”¨èªžã®æŒ™å‹•ï¼ˆä½•ã‚’å…¥åŠ›ã—ã¦ä½•ã‚’å‡ºåŠ›ã™ã‚‹ã®ã‹ï¼‰ã¨ç›®çš„ã®ç†è§£ã§ã™ã€‚ å®Ÿéš›ã«ã©ã®ã‚ˆã†ãªæ–¹å¼ãªã®ã‹ã¨ã„ã£ãŸã€ã‚ˆã‚Šè©³ã—ã„èª¬æ˜Žã¯æ‹™è‘—ã€Žå›³è§£å³æˆ¦åŠ› æš—å·ã¨èªè¨¼ã®ã—ãã¿ã¨ç†è«–ãŒã“ã‚Œ1å†Šã§ã—ã£ã‹ã‚Šã‚ã‹ã‚‹æ•™ç§‘æ›¸ã€ï¼ˆæš—èªæœ¬ï¼‰ã‚„ã€Žæš—èªæœ¬ã€ã®å†…å®¹ã‚’ç´¹ä»‹ã—ãŸã‚¹ãƒ©ã‚¤ãƒ‰ã‚„å‹•ç”»ãªã©ã®è³‡æ–™é›†ã‚’ã”ã‚‰ã‚“ãã ã•ã„ã€‚ ãªãŠè¡¨é¡Œã®ã€Œã‚¤ãƒ©ã‚¹ãƒˆã§ã€ã¯æ•°å¼ã‚’ä½¿ã‚ãªã„ã¨ã„ã†ç¨‹åº¦ã®æ„å‘³ã§ã™ã€‚ TLSã§å®ˆã‚ŠãŸã„ã‚‚ã® TLSã¯ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿åŒå£«ãŒå®‰å…¨ã«é€šä¿¡ã™ã‚‹ãŸã‚ã®è¦æ ¼ã§ã™ã€‚ ä¸»ã«äººãŒãƒ–ãƒ©ã‚¦ã‚¶ã‚’ä»‹ã—ã¦ã€Œhttps://ã€ã§å§‹ã¾ã‚‹Webã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ãã«åˆ©ç”¨ã•ã‚Œã¾ã™ã€‚ å®‰å…¨ã«é€šä¿¡ã™ã‚‹ãŸã‚ã«ã¯ã€é€šä¿¡å†…å®¹ãŒç›—è´ã•ã‚Œã¦ã‚‚æƒ…å ±ãŒæ¼ã‚Œãªã„æ©Ÿå¯†æ€§ãŒå¿…è¦ã§ã™ã€‚ ãã‚Œã‹ã‚‰é€šä¿¡ãŒæ”¹
ishideo 2022/03/16
tls

pke

1.3

aead

https

encryption

certificate

zenn
ãƒªãƒ³ã‚¯
ã€å›³è§£ã€‘ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸(https,eap-tls)ã®ä»•çµ„ã¿ ~ã‚·ãƒ¼ã‚±ãƒ³ã‚¹,ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼,ãƒ¡ãƒªãƒƒãƒˆ~
ãªãŠã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã¨ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®èªè¨¼å±€ã¯åŒä¸€ã§ã‚‚æ§‹ã„ã¾ã›ã‚“ã€‚ãã®å ´åˆã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã¨ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ãŒåŒä¸€ã®ã‚‚ã®ã«ãªã‚Šã¾ã™ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’ä½¿ã†å…·ä½“çš„ãªã‚·ãƒ¼ãƒ³ã¨æ§‹æˆã®ä¾‹ã€ŽWeb ã‚µãƒ¼ãƒã‚’ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå…¬é–‹ã—ã€ç‰¹åˆ¥ã«è¨±å¯ã‚’ä¸ŽãˆãŸé¡§å®¢ã®ã¿ã‚¢ã‚¯ã‚»ã‚¹è¨±å¯ã—ãŸã„ã€ã¨ã„ã†å ´åˆã€ID/ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã‚ˆã‚‹èªè¨¼ã‚‚å¯èƒ½ã§ã™ãŒã€ãã®ä»£ã‚ã‚Šã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã«ã‚ˆã‚‹èªè¨¼ã¨ã™ã‚‹ã“ã¨ã€ã‚‚ã—ãã¯ ID/ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŠã‚ˆã³ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã®èªè¨¼ã‚’ä½µç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã“ã‚Œã«ã‚ˆã‚Šã€é€šå¸¸ã® ID ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã‚ˆã‚‹èªè¨¼ã‚ˆã‚Šã‚‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åº¦ã‚’é«˜ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ Web ã‚µãƒ¼ãƒå´ã«ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸åŠã³ä¸é–“è¨¼æ˜Žæ›¸ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ãŠãã€ã•ã‚‰ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã®æç¤ºã‚’æ±‚ã‚ã‚‹è¨å®šã¨ã—ã¾ã™ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã¯ã€ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†è€…ç‰ãŒæ§‹ç¯‰ã—ãŸè¨¼æ˜Žæ©Ÿé–¢ã«ç™ºè¡Œã‚’ä¾é ¼ã™ã‚‹ã“
ishideo 2022/02/21
tls

authentication

certificate

https

eap-tls
ãƒªãƒ³ã‚¯
Website Response & SSL Checker - SSL Test - MxToolBox
ishideo 2021/08/19
https

ssl

tls

checker

mxtoolbox

lookup

webservice
ãƒªãƒ³ã‚¯
Using JSON
Cloudflare's DNS over HTTPS endpoint also supports JSON format for querying DNS data. For lack of an agreed upon JSON schema for DNS over HTTPS in the Internet Engineering Task Force (IETF), Cloudflare has chosen to follow the same schema as Google's DNS over HTTPS resolver. JSON formatted queries are sent using a GET request. When making requests using GET, the DNS query is encoded into the URL.
ishideo 2021/08/10
cloudflare

1.1.1.1

json

format

dns

https

api

public-dns
ãƒªãƒ³ã‚¯
JSON API for DNS over HTTPS (DoH) Â |Â Public DNS Â |Â Google for Developers
JSON API for DNS over HTTPS (DoH) Stay organized with collections Save and categorize content based on your preferences. outlined_flag Google Public DNS offers a web-friendly API for DNS-over-HTTPS (DoH) with DNSSEC validation, eliminating the need for browser extensions. This API uses simple GET requests with parameters like name, type, cd, ct, do, and edns_client_subnet to specify the DNS query.
ishideo 2021/08/10
google

public

dns

https

api

json
ãƒªãƒ³ã‚¯
GitHub - mehrdadrad/tcpprobe: Modern TCP tool and service for network performance observability.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
ishideo 2021/07/05
tcpprobe

http

https

cli

golang

socket

github
ãƒªãƒ³ã‚¯
å…¬é–‹éµãƒ”ãƒ³ãƒ‹ãƒ³ã‚°ã«ã¤ã„ã¦ | POSTD
ã¤ã„ã«ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŠ€è¡“ã‚¿ã‚¹ã‚¯ãƒ•ã‚©ãƒ¼ã‚¹ï¼ˆIETFï¼‰ãŒ RFC7469 HTTPå…¬é–‹éµãƒ”ãƒ³ãƒ‹ãƒ³ã‚°æ‹¡å¼µ ï¼ˆHPKPï¼‰ã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚ã“ã®ã‚¢ã‚¤ãƒ‡ã‚¢ã‚’å‡ºã—ã¦ãã‚ŒãŸåŒåƒšã®Ryan Sleeviã€Adam Langleyã€Chris Evansã«æ„Ÿè¬ã—ã¾ã™ã€‚ã¾ãŸã€Ryanã¨Chris Eã¯RFCã®æœ€çµ‚ç¨¿ã«å…ˆç«‹ã¤å¤§é‡ã®ãƒ‰ãƒ©ãƒ•ãƒˆã®åŸ·ç†ã‚’åŠ©ã‘ã¦ãã‚Œã¾ã—ãŸã€‚ãã—ã¦ã€ãƒ‰ãƒ©ãƒ•ãƒˆã«ã‚³ãƒ¡ãƒ³ãƒˆã—ã€RFCã¨ã—ã¦å…¬é–‹ã§ãã‚‹ã¾ã§ã«ã—ã¦ãã‚ŒãŸIETFã®å¤šãã®å‚åŠ è€…ã«ã‚‚æ„Ÿè¬ã—ã¾ã™ã€‚ ãƒ”ãƒ³ãƒ‹ãƒ³ã‚°ã¨ã¯ä½•ã‹ï¼Ÿã€€ä½•ã‚’è§£æ±ºã§ãã‚‹ã®ã‹ï¼Ÿ HPKPã¯ Web PKI ã®å¤§ããªå•é¡Œã®1ã¤ã‚’è§£æ±ºã™ã‚‹è©¦ã¿ã§ã™ã€‚ãã®å•é¡Œã¨ã¯ã€åŸºæœ¬çš„ã«èªè¨¼å±€ï¼ˆCAï¼‰ã‚„ä¸é–“èªè¨¼å±€ã¯ã€ã©ã®Webã‚µã‚¤ãƒˆã«ã‚‚ã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆEEã¾ãŸã¯â€ãƒªãƒ¼ãƒ•â€ï¼‰è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹ã“ã¨ãŒã§ãã¦ã—ã¾ã†ã“ã¨ã§ã™ã€‚ä¾‹ãˆã°ã€mail.google.comã®è¨¼æ˜Žæ›¸ãŒâ€Google Internet
ishideo 2021/04/14
ssl

tls

hpkp

security

https

postd
ãƒªãƒ³ã‚¯
å®‰å…¨ãªWebã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ãŸã‚ã®ãƒã‚§ãƒƒã‚¯ãƒ„ãƒ¼ãƒ«é›† - Qiita
SSL/TLS SSL/TLSæš—å·è¨å®šã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ SSL/TLSæš—å·è¨å®šã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³(PDF) IPA(æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹)ãŒç™ºè¡Œã—ã¦ã„ã‚‹ã€SSLè¨å®šã®ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã§ã™ã€‚(PDF) å…¨éƒ¨é‡è¦ã§ã™ãŒã€ã‹ãªã‚Šé•·ã„ã®ã§ é«˜ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åž‹ã€æŽ¨å¥¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åž‹ã§ã®æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã®è©³ç´°è¦æ±‚è¨å®š ã‚’è¦‹ã¦ä¸‹ã•ã„ã€‚ SSL Server Test (by Qualys) SSL Server Test SSLå°Žå…¥æ™‚ã€æœ€åˆã«è¡Œã£ã¦ã‚‚ã‚‰ã„ãŸã„ãƒ†ã‚¹ãƒˆãƒ„ãƒ¼ãƒ«ã§ã™ã€‚ æ§˜ã€…ãªè„†å¼±æ€§ãªã©ã‚’ãƒã‚§ãƒƒã‚¯ã—ã€æ˜Žç¤ºã—ã¦ãã‚Œã¾ã™ã€‚ æœ‰åãªãƒã‚§ãƒƒã‚¯ãƒ„ãƒ¼ãƒ«ãªã®ã§è§£èª¬ã‚µã‚¤ãƒˆãªã©ã§A+ã‚’å–ã‚‹ãŸã‚ã®è¨å®šå€¤ãªã©ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ãŒã€æƒ…å ±ãŒå¤ã„ã‚‚ã®ãŒå¤šã„ã®ã§ã€è¦æ³¨æ„ã§ã™ã€‚ ã€ŒDo not show the results on the boardsã€ã«ãƒã‚§ãƒƒã‚¯ã‚’å…¥ã‚Œã‚‹ã¨ãƒªã‚¹ãƒˆã«è¡¨ç¤ºã•ã‚Œãªããªã‚Šã¾ã™ã€‚ CryptCheck CryptCheck æš—å·
ishideo 2020/11/10
chrome

apache

symantec

https

tls

csp

qualys

cryptcheck

extension

observatory
ãƒªãƒ³ã‚¯
ã‚ãªãŸã®ã‚µãƒ¼ãƒãƒ¼ã¯å¤§ä¸ˆå¤«ï¼Ÿå®‰å…¨ãªHTTPSè¨å®šã®ç¢ºèªæ–¹æ³•ãƒ»æ¤œè¨¼ãƒ„ãƒ¼ãƒ« - Qiita
ã¯ã˜ã‚ã« æœ¬è¨˜äº‹ã§ã¯æ—¥ã€…å¤‰ã‚ã£ã¦ã„ãå®‰å…¨ãªHTTPS(SSL/TLS)ã®è¨å®šã«é–¢ã™ã‚‹ç¢ºèªæ‰‹æ®µã‚’ç´¹ä»‹ã—ã¾ã™ã€‚å¸¸ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç³»ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’ã‚¦ã‚©ãƒƒãƒã™ã‚‹ã®ãŒç†æƒ³ãªã®ã§ã™ãŒã€å®Œå…¨ã«è¿½ã„ã¤ãã®ã¯è‡³é›£ã®æ¥ã§ã™ã‚ˆãã€‚ è„†å¼±æ€§ã¨ã¯ Wikipedia ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã‚ˆã‚Š ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ« ã¯ã€è„†å¼±æ€§ã«ã¤ã„ã¦ã®ä¿—è¡¨ç¾ã§ã‚ã‚‹ã€‚ è„†å¼±æ€§ã¯ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®æ¬ é™¥ï¼ˆãƒã‚°ã€ä¸å…·åˆã€ã‚ã‚‹ã„ã¯ã‚·ã‚¹ãƒ†ãƒ ä¸Šã®ç›²ç‚¹ï¼‰ã®ä¸€ã¤ã§ã€æœ¬æ¥æ“ä½œã§ããªã„ã¯ãšã®æ“ä½œï¼ˆæ¨©é™ã®ãªã„ãƒ¦ãƒ¼ã‚¶ãŒæ¨©é™ã‚’è¶…ãˆãŸæ“ä½œã‚’å®Ÿè¡Œã™ã‚‹ãªã©ï¼‰ãŒã§ãã¦ã—ã¾ã£ãŸã‚Šã€è¦‹ãˆã‚‹ã¹ãã§ãªã„æƒ…å ±ãŒç¬¬ä¸‰è€…ã«è¦‹ãˆã¦ã—ã¾ã†ã‚ˆã†ãªä¸å…·åˆã‚’ã„ã†ã€‚ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ãŠã‚ˆã³ãã‚Œã‚’å«ã‚ãŸã‚·ã‚¹ãƒ†ãƒ å…¨èˆ¬ã®æ¬ é™¥ã‚’æŒ‡ã™ã“ã¨ã‚‚ã‚ã‚‹ã€‚ è£½å“XXXã®ãƒã‚°ã«ã‚ˆã‚Šç¬¬ä¸‰è€…ã«æ‚ªç”¨ã•ã‚Œã¦ã—ã¾ã†ï¼ã¨ã„ã£ãŸã‚‚ã®ã‹ã‚‰ã€å…ˆæ—¥ã®ã‚¤ãƒ³ãƒ†ãƒ«CPUã«å¯¾ã™ã‚‹Meltdown, Spectreã¨ã„ã£ãŸã€ä»•æ§˜ã«å¯¾ã™ã‚‹è„†å¼±æ€§ã¾ã§æ§˜
ishideo 2020/04/16
https

ssl

tls

securty

vulnerability

poodle

freak

logjam

sslyze

python
ãƒªãƒ³ã‚¯
SSL3.0 å¾¹åº•è§£å‰–ï¼ï¼ï¼ ã€œ ãªãœ POODLE ã«æ®ºã•ã‚ŒãŸã®ã‹ ã€œ - ã‚‚ã‚ãš blog
Â©Copyright Yasuhiko Ito 10æœˆã®ä¸æ—¬ã“ã‚ã«ã€google ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ ã‹ã‚‰ POODLE ã¨ã„ã† SSL3.0 ã®è„†å¼±æ€§ãŒå ±å‘Šã•ã‚ŒãŸã¨ã„ã†ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’è¦‹ã¾ã—ãŸ POODLE ã«ã‚ˆã£ã¦ SSL3.0 ã®æš—å·é€šä¿¡ãŒè§£èªã§ãã‚‹ã“ã¨ãŒå®Ÿè¨¼ã•ã‚ŒãŸã®ã§ã€ä»Šå¾Œ SSL3.0 ã¯ä½¿ã‚ãšã«å®Œå…¨ã«æ¨ã¦ã¾ã—ã‚‡ã†ã¨ã„ã†æµã‚Œã«ãªã£ã¦ã„ã¾ã™ ä»Šå›žæ”¹ã‚ã¦èª¿ã¹ã¦ã¿ã‚‹ã¨ã€SSL ã¯éŽåŽ»ã«ã‚‚ CBC æš—å·ã‚’ä½¿ç”¨ã—ãŸå ´åˆã®è„†å¼±æ€§ãŒã„ãã¤ã‹å ±å‘Šã•ã‚Œã¦ã„ã¾ã—ãŸ Padding Oracle æ”»æ’ƒ (2002å¹´) BEAST æ”»æ’ƒ (2011å¹´) Lucky Thirteen æ”»æ’ƒ (2013å¹´) ã“ã‚Œã‚‰ã®æ”»æ’ƒã‚’ãªã‚“ã¨ã‹ã—ã®ã„ã§ç”Ÿãæ®‹ã£ã¦ããŸ SSL3.0 ã§ã—ãŸãŒã€ä»Šå›žã® POODLE ãŒè‡´å‘½å‚·ã¨ãªã£ã¦ã¤ã„ã«æ»ã‚“ã§ã—ã¾ã—ã¾ã—ãŸ SSL3.0 ã®ä½•ãŒãƒžã‚ºã‹ã£ãŸã®ã‹ã€ã©ã‚“ãªå¼±ç‚¹ãŒã‚ã£ãŸã®ã‹ã‚’è¦‹ã¦ã„ãã¾ã—ã‚‡
ishideo 2020/04/16
https

ssl

tls

poodle

vulnerability

security
ãƒªãƒ³ã‚¯
ä»ŠãªãœHTTPSåŒ–ãªã®ã‹ï¼Ÿã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ä¿¡é ¼æ€§ã®ãŸã‚ã«ã€æŠ€è¡“è€…ãŒçŸ¥ã£ã¦ãŠããŸã„TLSã®æ´å²ã¨æŠ€è¡“èƒŒæ™¯
ã€å¤‰æ›´å±¥æ´ 2018å¹´2æœˆ15æ—¥ã€‘å½“åˆã®è¨˜äº‹ã‚¿ã‚¤ãƒˆãƒ«ã¯ã€Œã„ã¾ãªãœHTTPSåŒ–ãªã®ã‹ï¼Ÿ æŠ€è¡“è€…ãŒçŸ¥ã£ã¦ãŠããŸã„SEOã‚ˆã‚Šãšã£ã¨å¤§åˆ‡ãªã“ã¨ â€• TLSã®æ´å²ã¨æŠ€è¡“èƒŒæ™¯ã€ã§ã—ãŸãŒã€ç¾è¡Œã®ã‚‚ã®ã«å¤‰æ›´ã—ã¾ã—ãŸã€‚ç¾åœ¨Googleã§ã¯Webã‚µã‚¤ãƒˆã®HTTPSå¯¾å¿œã¨æ¤œç´¢çµæžœã®é–¢ä¿‚ã‚’å¼·èª¿ã—ã¦ãŠã‚‰ãšã€æœ¬è¨˜äº‹ã®è¶£æ—¨ã®ä¸€ã¤ã«ã‚‚æœ¬æ¥ã¯ç‹¬ç«‹ã—ãŸå•é¡Œã§ã‚ã‚‹SEOã¨HTTPSåŒ–ã‚’é–¢é€£ä»˜ã‘ã‚‹ã¨ã„ã†æ ¹å¼·ã„èª¤è§£ã‚’è§£ãã“ã¨ãŒã‚ã‚Šã¾ã™ãŒã€å½“åˆã®ã‚¿ã‚¤ãƒˆãƒ«ã§ã¯ã‹ãˆã£ã¦SEOã¨HTTPSã‚’é–¢é€£ä»˜ã‘ã¦èªã¾ã‚Œã‚‹ãŠãã‚ŒãŒã‚ã‚Šã€ã¾ãŸåŒæ§˜ã®æŒ‡æ‘˜ã‚‚ã„ãŸã ã„ãŸã“ã¨ã‹ã‚‰å¤‰æ›´ã„ãŸã—ã¾ã—ãŸã€‚ HTTPã¨HTTPSã¯ã€å…±ã«TCPé€šä¿¡ä¸Šã§å‹•ä½œã—ã¾ã™ã€‚ã—ãŸãŒã£ã¦ã€ã„ãšã‚Œã‚‚TCPãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã§é€šä¿¡ã‚’é–‹å§‹ã—ã¾ã™ã€‚ HTTPé€šä¿¡ã®å ´åˆã«ã¯ã€ã“ã®TCPãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ç›´å¾Œã«ã€HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã®ã‚„ã‚Šå–ã‚ŠãŒå§‹ã¾ã‚Šã¾ã™ã€‚ã“ã®HTTPã®ã‚„ã‚Šå–ã‚Šã¯å¹³æ–‡é€šä¿¡ã§ã‚ã‚Šã€é€”
ishideo 2020/04/16
https

ssl

tls

protocol

poodle

drown

server

quic
ãƒªãƒ³ã‚¯
OWASP/Go-SCPã‚’èªã‚“ã§ã‚»ã‚ãƒ¥ã‚¢ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã¨Goã‚’å¦ã¶ - My External Storage
ã“ã®è¨˜äº‹ã¯ Go Advent Calendar 2019ã®4æ—¥ç›®ã®è¨˜äº‹ã«ãªã‚‹ã€‚ 3æ—¥ç›®ã¯ @ikawahaã•ã‚“ã®ã€Œ Goa v3 ã®ãƒ†ã‚¹ãƒˆã‚’ã‚·ãƒ¥ãƒƒã¨ã™ã‚‹]ã€ã ã£ãŸã€‚ æœ¬è¨˜äº‹ã§ã¯Open Web Application Security Projectï¼ˆOWASP)ãŒå…¬é–‹ã—ã¦ã„ã‚‹Go-SCPãƒªãƒã‚¸ãƒˆãƒªã‚’ç´¹ä»‹ã™ã‚‹ã€‚ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã¯ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ï¼ˆXSSï¼‰ã‚„ ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ•ã‚©ãƒ¼ã‚¸ã‚§ãƒªï¼ˆCSRFï¼‰ãªã©ã€æ§˜ã€…ãªè„†å¼±æ€§ãŒæ½œã‚€å¯èƒ½æ€§ãŒã‚ã‚‹ã€‚ è„†å¼±æ€§å¯¾ç–ã®æ›¸ç±ã¨ã—ã¦ã¯ã€ ä½“ç³»çš„ã«å¦ã¶ å®‰å…¨ãªWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ä½œã‚Šæ–¹ï¼ˆå¾³ä¸¸æœ¬ï¼‰ãªã©ãŒæœ‰åã ã‚ã†ã€‚ Go-SCPãƒªãƒã‚¸ãƒˆãƒªã«ã¯Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿè£…ã™ã‚‹éš›ã«å¿…è¦ãªè„†å¼±æ€§ã®çŸ¥è˜ã¨ã€Goã‚’ä½¿ã£ãŸè„†å¼±æ€§å¯¾ç–ã®å®Ÿè£…æ–¹æ³•ãŒå«ã¾ã‚Œã¦ã„ã‚‹ã€‚ https://github.com/OWASP/Go-SCP TL;DR OWASP
ishideo 2019/12/05
security

go

golang

https

go-scp

owasp

secure
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸