[B! tls] koma_gã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

koma_g id:koma_g

tlsã«é–¢ã™ã‚‹koma_gã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (36)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

TLSè¨¼æ˜Žæ›¸ãƒã‚§ãƒƒã‚«ãƒ¼check-tls-certã®å…¬é–‹
ã“ã‚“ã«ã¡ã¯ã€æŠ€è¡“é–‹ç™ºå®¤ã®æ»æ¾¤ã§ã™ã€‚ TLSè¨¼æ˜Žæ›¸ãƒã‚§ãƒƒã‚«ãƒ¼check-tls-certã‚’é–‹ç™ºã—ã¦å…¬é–‹ã—ãŸã®ã§ç´¹ä»‹ã—ã¾ã™ã€‚ ã“ã®check-tls-certã«ã¤ã„ã¦ç°¡å˜ã«èª¬æ˜Žã™ã‚‹ã¨æ¬¡ã®é€šã‚Šã§ã™ã€‚ check-tls-certã¯ã€TLSè¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æ€§ã¨è¨¼æ˜Žæ›¸ãƒã‚§ã‚¤ãƒ³ã®æ¤œè¨¼ã™ã‚‹ãƒ„ãƒ¼ãƒ« ä¸»ãªç”¨é€”ã¯ã€TLSè¨¼æ˜Žæ›¸ã®è¨ç½®ãƒ»æ›´æ–°ä½œæ¥ã®éš›ã®å„ç¨®ç¢ºèªãŠã‚ˆã³TLSè¨¼æ˜Žæ›¸ã®ï¼ˆæœ‰åŠ¹æœŸé™ã‚’å«ã‚€ï¼‰æœ‰åŠ¹æ€§ã®ç›£è¦– æ§˜ã€…ãªæ¤œæŸ»ã‚’å®Ÿæ–½ã—ã€å„æ¤œæŸ»çµæžœã‚’å‡ºåŠ›ã™ã‚‹ã“ã¨ã§å•é¡Œç®‡æ‰€ã‚’æŠŠæ¡ã—ã‚„ã™ã„ check-tls-certã®æ¦‚è¦ TLSè¨¼æ˜Žæ›¸ãƒã‚§ãƒƒã‚«ãƒ¼check-tls-certã¯TLSè¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æ€§ã¨è¨¼æ˜Žæ›¸ãƒã‚§ã‚¤ãƒ³ã‚’æ¤œè¨¼ã—ã¾ã™ã€‚ ä¸»ã«TLSè¨¼æ˜Žæ›¸ã®è¨ç½®ãƒ»æ›´æ–°ä½œæ¥ã®éš›ã®å„ç¨®ç¢ºèªãŠã‚ˆã³TLSè¨¼æ˜Žæ›¸ã®ï¼ˆæœ‰åŠ¹æœŸé™ã‚’å«ã‚€ï¼‰æœ‰åŠ¹æ€§ã®ç›£è¦–ã®ãŸã‚ã«åˆ©ç”¨ã§ãã¾ã™ã€‚ æ¬¡ã®ã‚µã‚¤ãƒˆã§å…¬é–‹ã—ã¦ãŠã‚Šã€Releaseãƒšãƒ¼ã‚¸ã‹ã‚‰Linuxå‘ã‘ã¨macOSå‘ã‘ã®ãƒ
koma_g 2023/02/12
tls

tool
ãƒªãƒ³ã‚¯
TLSé€šä¿¡ã‚’ç‹™ã£ãŸã€Œã‚¢ãƒ«ãƒ‘ã‚«æ”»æ’ƒã€ãŒç™ºè¦‹ã•ã‚Œã‚‹ã€€è„†å¼±ï¼ˆãœã„ã˜ã‚ƒãï¼‰ãªã‚µã‚¤ãƒˆã®å‰²åˆã¯ï¼Ÿ
ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«ãŠã‘ã‚‹é€šä¿¡ã®å®‰å…¨æ€§ã¯TLSï¼ˆTransport Layer Securityï¼‰ã«å¼·ãä¾å˜ã—ã¦ã„ã‚‹ã€‚TLSã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å±¤ã«ä¾å˜ã—ãªã„ã‚ˆã†ã«è¨è¨ˆã•ã‚ŒãŸé€šä¿¡æš—å·åŒ–ã®æ¨™æº–è¦æ ¼ã ã€‚HTTPã‚’ã¯ã˜ã‚ã¨ã™ã‚‹ã•ã¾ã–ã¾ãªãƒ—ãƒãƒˆã‚³ãƒ«ãŒTLSã‚’ä½¿ã£ã¦é€šä¿¡ã‚’æš—å·åŒ–ã—ã¦ã„ã‚‹ã€‚ã“ã®TLSã«ã€ŒALPACA Attackã€ï¼ˆã‚¢ãƒ«ãƒ‘ã‚«æ”»æ’ƒï¼‰ã¨å‘¼ã°ã‚Œã‚‹æ–°ã—ã„å•é¡ŒãŒå ±å‘Šã•ã‚ŒãŸã€‚ ALPACA Attackã¯ãƒ‰ã‚¤ãƒ„ã®ãƒ«ãƒ¼ãƒ«å¤§å¦ãƒœãƒ¼ãƒ•ãƒ ã€ãƒŸãƒ¥ãƒ³ã‚¹ã‚¿ãƒ¼å¿œç”¨ç§‘å¦å¤§å¦ã€ãƒ‘ãƒ¼ãƒ€ãƒ¼ãƒœãƒ«ãƒ³å¤§å¦ã®ç ”ç©¶è€…ã‚‰ã«ã‚ˆã£ã¦ç™ºè¦‹ã•ã‚ŒãŸã€‚ã€ŒALPACAã€ã¯ã“ã®å•é¡Œã‚’ç™ºè¡¨ã—ãŸè«–æ–‡ã€ŒApplication Layer Protocol Confusion - Analyzing and mitigating Cracks in tls Authenticationã€ã®ã‚¿ã‚¤ãƒˆãƒ«ã«ç”±æ¥ã™ã‚‹ã€‚
koma_g 2021/06/11
tls

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ZeroSSL ãªã‚‰IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŒå–å¾—ã§ãã‚‹ - ASnoKaze blog
IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŒæ¬²ã—ã„å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ãã†ã™ã‚Œã°ã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’å–å¾—ã›ãšã¨ã‚‚ã‚µãƒ¼ãƒã¨HTTPSé€šä¿¡ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ãã®ä»–ã«ã‚‚ä¾‹ãˆã°DNS over HTTPSã§ã¯IPã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã‚¢ã‚¯ã‚»ã‚¹å‡ºæ¥ã‚‹ã‚ˆã†ã«ã€æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ãŒã‚»ãƒƒãƒˆã•ã‚Œã¦ã„ãŸã‚Šã—ã¾ã™ã€‚ https://1.1.1.1 https://8.8.8.8 ã—ã‹ã—ã€Let's Encryptã§ã¯ã€IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯å–å¾—ã§ãã¾ã›ã‚“ ~$ sudo certbot certonly --nginx -d 160.16.124.39 Requested name 160.16.124.39 is an IP address. The Let's Encrypt certificateauthority will not issue certificates for a bare IP address.ZeroSSLã§ã¯å‡ºæ¥
koma_g 2021/01/19
SSL

è¨¼æ˜Žæ›¸

https

tls

zerossl
ãƒªãƒ³ã‚¯
PiroðŸŽ‰"ï½¼ï½½ç®¡ç³»å¥³å"ï½¼ï¾˜ï½°ï½½ï¾žç´¯è¨ˆ5ä¸‡éƒ¨çªç ´!!ðŸŽ‰ on Twitter: "HTTPã‚„SSL/TLSã«é–¢ã‚ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã¯çŸ¥ã£ã¦ãŠãã¨ã„ã„æƒ…å ±ãªã‚“ã§ã™ã‘ã©ã€ https://t.co/ZcO29mS1P8 ã¨ã„ã†ã‚µã‚¤ãƒˆã‚’ä½¿ã†ã¨ã€æœŸé™åˆ‡ã‚Œã®è¨¼æ˜Žæ›¸ã§ã®TLSã®æ¤œè¨¼ã¨ã‹ãŒç°¡å˜ã«ã§ãã¦ã„ã„ã§ã™ã€‚"
HTTPã‚„SSL/TLSã«é–¢ã‚ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã¯çŸ¥ã£ã¦ãŠãã¨ã„ã„æƒ…å ±ãªã‚“ã§ã™ã‘ã©ã€ https://t.co/ZcO29mS1P8 ã¨ã„ã†ã‚µã‚¤ãƒˆã‚’ä½¿ã†ã¨ã€æœŸé™åˆ‡ã‚Œã®è¨¼æ˜Žæ›¸ã§ã®TLSã®æ¤œè¨¼ã¨ã‹ãŒç°¡å˜ã«ã§ãã¦ã„ã„ã§ã™ã€‚
koma_g 2021/01/06
ã‚ã¨ã§èªã‚€

tls

SSL

https

ãƒ†ã‚¹ãƒˆ

tool
ãƒªãƒ³ã‚¯
Microsoftã€TLS 1.0/1.1å»ƒæ¢æ—¥ä¸€è¦§ã‚’å…¬é–‹
TLS 1.0ãŠã‚ˆã³TLS 1.1ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã€è„†å¼±ã§ã‚ã‚‹ã¨è€ƒãˆã‚‰ã‚Œã¦ãŠã‚Šã€å¤šãã®ãƒ™ãƒ³ãƒ€ãŒä½¿ç”¨åœæ¢ã‚’é€²ã‚ã¦ã„ã‚‹ã€‚Microsoftã‚‚åŒç¤¾ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚„ãƒ—ãƒãƒ€ã‚¯ãƒˆã«ãŠã„ã¦TLS 1.0ãŠã‚ˆã³1.1ã®ä½¿ç”¨åœæ¢ã‚’é€²ã‚ã¦ã„ã‚‹ã€‚ã—ã‹ã—ã€ã“ã®ä½œæ¥ã¯ä¸€åº¦ã«é€²ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã®ã§ã¯ãªãã€ã‚µãƒ¼ãƒ“ã‚¹ã‚„ãƒ—ãƒãƒ€ã‚¯ãƒˆã”ã¨ã«å€‹åˆ¥ã«é€²ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã€‚ã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã§ã„ã¤åˆ©ç”¨ã§ããªããªã‚‹ã®ã‹ã€ã¾ã¨ã¾ã£ãŸæƒ…å ±ã¯å…¬é–‹ã•ã‚Œã¦ã„ãªã„ã€‚ Microsoftã¯ã“ã®ã»ã©ã€ŒTLS 1.0 and 1.1 deprecation - Microsoft Tech Community - 1620264ã€ã«ãŠã„ã¦ã€åŒç¤¾ã®ã‚µãƒ¼ãƒ“ã‚¹ãŠã‚ˆã³ãƒ—ãƒãƒ€ã‚¯ãƒˆã«ãŠã‘ã‚‹TLS 1.0/1.1ã‚µãƒãƒ¼ãƒˆå»ƒæ¢ã®ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ã‚’ç°¡å˜ã«ã¾ã¨ã‚ãŸæƒ…å ±ã‚’å…¬é–‹ã—ãŸã€‚ã©ã®ã‚µãƒ¼ãƒ“ã‚¹ãŒã„ã¤ã‚µãƒãƒ¼ãƒˆå»ƒæ¢ã¨ãªã‚‹ã‹ã‚’ç¢ºèªã§ãã‚‹ã€‚ æŽ²è¼‰ã•ã‚Œã¦ã„ã‚‹ä¸»ãªæƒ…å ±ã¯æ¬¡ã®ã¨ãŠã‚Šã€‚
koma_g 2020/09/05
microsoft

tls

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
2021å¹´ã«Letâ€™s Encryptã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ãŒå¤‰æ›´ï¼å½±éŸ¿ã‚„å‚™ãˆã¦ãŠãã¹ãã“ã¨ã¨ã¯ï¼Ÿ | ã•ãã‚‰ã®SSL
Letâ€™s Encryptã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã¨ã¯ï¼Ÿ Let's Encryptã‚’é‹å–¶ã—ã¦ã„ã‚‹éžå–¶åˆ©å›£ä½“ã®ISRGï¼ˆInternet Security Research Groupï¼‰ã¯2014å¹´ã«è¨ç«‹ã•ã‚ŒãŸæ–°ã—ã„èªè¨¼å±€ã§ã™ã€‚ã‚‚ã¡ã‚ã‚“ã€å½“æ™‚ã¯è¨ç«‹ã•ã‚ŒãŸã°ã‹ã‚Šãªã®ã§ISRGã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã¯æ§˜ã€…ãªç«¯æœ«ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚ãã®ãŸã‚ã€åˆ¥ã®èªè¨¼å±€ã§ã‚ã‚‹Iden TrustãŒ2000å¹´ã«ç™ºè¡Œã—ãŸã€ŒDST Root X3ã€ã¨ã„ã†ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ã€ã‚¯ãƒã‚¹ç½²åã•ã‚ŒãŸä¸é–“CAè¨¼æ˜Žæ›¸ã‚’ç¾åœ¨ã‚‚åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚ ã“ã®é–“ï¼ˆ2014å¹´ï½žç¾åœ¨ã¾ã§ï¼‰ISRGã¯ä½•ã‚’ã—ã¦ã„ãŸã‹ã¨ã„ã†ã¨ã€å„OSï¼ˆWindowsã€Macã€Androidç‰ï¼‰ã‚„Mozillaï¼ˆFirefoxãƒ–ãƒ©ã‚¦ã‚¶ã®é–‹ç™ºå…ƒï¼‰ã«å¯¾ã—ã¦ã€è‡ªç¤¾ã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã§ã‚ã‚‹ã€ŒISRG Root X1ã€ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã‚‚ã‚‰ã†ã‚ˆã†ã«ãŠé¡˜ã„ã‚’ã—ã¦ã€å¾ã€…ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ¸ˆã¿ç«¯æœ«
koma_g 2020/08/14
èªè¨¼

SSL

tls
ãƒªãƒ³ã‚¯
DigiCert's Position on 1-Year TLS SSL Certificates
UPDATE: While the industry has shortened validity times, we still offer service plans of up to 2, 3, even 6 yearsâ€”and the automation to make it seamless. Three, Two, One, Liftoff on One-Year TLS Certificates At the CA/Browser (CA/B) Forum in Bratislava, Slovakia, this week, Apple announced that beginning Sept. 1, newly issued publ icly trusted TLS certificates are valid for no longer than 398 days.
koma_g 2020/03/07
tls

SSL
ãƒªãƒ³ã‚¯
GitHub - genkiroid/cert: Cert is the Go tool to get TLS certificate information.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
koma_g 2020/02/05
ã‚ã¨ã§èªã‚€

tool

tls

SSL

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½¿ã„ç¶šã‘ã‚‹ä¸Šå ´ä¼æ¥ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - megamouthã®è‘¬åˆ—
ã‚ã‚‹ã„ã¯ç§ãŸã¡ãŒPKIã«ã¤ã„ã¦èª¬æ˜Žã—ç¶šã‘ãªã‘ã‚Œã°ã„ã‘ãªã„ç†ç”± Webå±‹ã®ãªããªã‚‰ãªã„ä»•äº‹ã®ä¸€ã¤ã«ã€ŒSSLè¨¼æ˜Žæ›¸ã¨PKIã«ã¤ã„ã¦èª¬æ˜Žã™ã‚‹ã€ã¨ã„ã†ã®ãŒã‚ã‚‹ã€‚ ä¸–ã®ä¸ã®ã‚µã‚¤ãƒˆã¯ã ã„ãŸã„https://ã¨ã„ã†ã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã¤ãªãŒã‚‹ã‚ˆã†ã«å‡ºæ¥ã¦ã„ã¦ã€httpsã§ã¤ãªãŒã‚‹ã¨ã„ã†ã“ã¨ã¯ä½•ã‚‰ã‹ã®SSL/TLSè¨¼æ˜Žæ›¸ãŒå¿…è¦ã ã¨ã„ã†ã“ã¨ã ã€‚ï¼ˆã•ã‚‚ãªã‘ã‚Œã°chromeãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ä¸å‰ãªè¦å‘Šã‚’ç™ºã™ã‚‹ã“ã¨ã«ãªã‚‹ï¼‰ è¨¼æ˜Žæ›¸ãŒå¿…è¦ã«ãªã‚‹åº¦ã€åŒã˜è³ªå•ãŒç¹°ã‚Šè¿”ã•ã‚Œã‚‹ã€‚ã€Œãªã‚“ã‹å…¨éƒ¨å€¤æ®µãŒé•ã†ã‘ã©ã€ã©ã®è¨¼æ˜Žæ›¸ï¼ˆãƒ–ãƒ©ãƒ³ãƒ‰ï¼‰ãŒã„ã„ã®ï¼Ÿã€ã¨ã€‚ãã—ã¦ç§ãŸã¡ã¯æ¯Žå›žå›°ã£ã¦ã—ã¾ã†ã€‚ ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ç«‹å ´ã§è¨€ãˆã°ã€è¨¼æ˜Žæ›¸ãŒæœ‰åŠ¹ã§ã‚ã‚Šã•ãˆã™ã‚Œã°ã€ç„¡æ–™ã®Let's Encryptã§ã‚‚21ä¸‡å††ã™ã‚‹DigiCertã‚°ãƒãƒ¼ãƒãƒ«ãƒ»ã‚µãƒ¼ãƒID EVã§ã‚‚ã€Webã‚µã‚¤ãƒˆã®åˆ©ä¾¿æ€§ã¯ä½•ã‚‚å¤‰ã‚ã‚‰ãªã„ã€‚ç§ãŸã¡Webåˆ¶ä½œæ¥è€…ã®ç«‹å ´ã§ã‚‚ã€ä»£ç†åº—å¥‘ç´„ã§ã‚‚ã—ãªã„é™ã‚Šã€è¨¼æ˜Žæ›¸ãã®ã‚‚
koma_g 2020/01/17
SSL

tls

https

EDINET
ãƒªãƒ³ã‚¯
The Illustrated TLS Connection: Every Byte Explained
The session begins with the client saying "Hello". The client provides the following: protocol version client random data (used later in the handshake) an optional session id to resume a list of cipher suites a list of compression methods a list of extensions TLS sessions are broken into the sending and receiving of "records", which are blocks of data with a type, a protocol version, and a length.
koma_g 2019/12/31
tls

å¯è¦–åŒ–

edu
ãƒªãƒ³ã‚¯
ã€Œãƒãƒƒãƒˆä¸–ç•Œã®è¨¼æ˜Žæ›¸ã®30ï¼…ã¯Letâ€™s Encryptè£½ã€ã€Œ3017å¹´ã¾ã§æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ãŒ1000ä»¶ä»¥ä¸Šã€ãªã©3å„„5000ä¸‡ä»¶ã®SSLæŽ¥ç¶šãƒ‡ãƒ¼ã‚¿ã‚»ãƒƒãƒˆã‹ã‚‰ã‚ã‹ã£ãŸã“ã¨ã¯ï¼Ÿ
by TBIT ã€Œã€Žæœ€è¿‘ã®ã‚¦ã‚§ãƒ–ã§ã€SSLã¯ã©ã®ã‚ˆã†ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹ã®ã‹ã€ã¨ã„ã†æ—¢å˜ãƒ‡ãƒ¼ã‚¿ã‚»ãƒƒãƒˆãŒãªã‹ã£ãŸã®ã§è‡ªåˆ†ã§ä½œã£ãŸã€ã¨ã„ã†ãƒªãƒ¼ãƒ»ãƒã‚¿ãƒ¼ãƒžãƒ³(@leebutterman)ã•ã‚“ãŒã€ãã®3å„„5000ä¸‡ä»¶ã®SSLæŽ¥ç¶šãƒ‡ãƒ¼ã‚¿ã‚»ãƒƒãƒˆã‚’åˆ†æžã—ã€ã€Œã©ã“ã®è¨¼æ˜Žæ›¸ãŒå¤šãä½¿ã‚ã‚Œã¦ã„ã‚‹ã‹ã€ã‚„ã©ã†ã„ã£ãŸæš—å·ã‚¹ã‚¤ãƒ¼ãƒˆãŒäººæ°—ã‹ã¨ã„ã†æƒ…å ±ã‚’ã¾ã¨ã‚ã¦å…¬é–‹ã—ã¦ã„ã¾ã™ã€‚ Letâ€™s Encrypt makes certs for almost 30% of web domains! RC4/3DES/TLS 1.0 are still used! Certs for hundreds of years! Analyzing hundreds of millions of SSL handshakes | Little Short Bulletins https://www.leebutterman.com/2019/08
koma_g 2019/09/25
SSL

tls

letsencrypt
ãƒªãƒ³ã‚¯
SSL/TLSã¨ã¯ä½•ãªã‚“ã ï¼Ÿ ä»Šã“ãçŸ¥ã£ã¦ã‚‚ã‚‰ã„ãŸã„SSL/TLSã®ãŠè©± ã€œ 1å›žç›® ã€œ SSL/TLSã¨ã¯ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
koma_g 2019/09/11
ã‚ã¨ã§èªã‚€

SSL

tls

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã¼ã¡ã¼ã¡æ—¥è¨˜
ã¯ã˜ã‚ã« ã€Žãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«TLS&PKIæ”¹é¡Œç¬¬2ç‰ˆï¼ˆåŽŸé¡Œ: Bulletproof TLS and PKI Second Editionï¼‰ã€ãŒå‡ºç‰ˆã•ã‚Œã¾ã—ãŸã€‚ä»Šå›žã¯å‡ºç‰ˆå‰ã®ãƒ¬ãƒ“ãƒ¥ãƒ¼ã«ã¯å‚åŠ ã—ã¦ã„ã¾ã›ã‚“ãŒã€ç™ºå£²ç›´å¾Œã«ãƒ©ãƒ ãƒ€ãƒŽãƒ¼ãƒˆã•ã‚“ã‹ã‚‰çŒ®æœ¬ã‚’ã„ãŸã ãã¾ã—ãŸã€‚ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™(ãã®ãŸã‚ã‚¿ã‚¤ãƒˆãƒ«ã«PRã‚’å…¥ã‚Œã¦ã¾ã™)ã€‚åŽŸè‘—ã®ã‚µã‚¤ãƒˆã§ã¯å‰ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¨ã®DiffãŒå…¬é–‹ã•ã‚Œã¦ãŠã‚Šã€ä»Šå›žã¯ç¿»è¨³ã®ç¢ºèªã‚’å…¼ãã¦æ›´æ–°éƒ¨åˆ†ã‚’é‡ç‚¹çš„ã«èªã¿ã¾ã—ãŸã€‚ã“ã®ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã§ã¯ã€æ”¹è¨‚ç‰ˆã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆéƒ¨åˆ†ãŒã©ã®ã‚ˆã†ãªã‚‚ã®ã§ã€ä»Šå¾Œã©ã†å¦ã‚“ã ã‚‰ã‚ˆã„ã‹ã¨ã„ã†ã“ã¨ã‚’ä¸å¿ƒã«æ›¸ã„ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ çŸã„ã¾ã¨ã‚ï¼š HTTPSã¸ã®å®‰å…¨æ„è˜ãŒé«˜ã¾ã£ã¦ã„ã‚‹ä»Šã ã‹ã‚‰ã“ãã€Žãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«TLS&PKIã€ã‚’èªã¿ã¾ã—ã‚‡ã†ã€‚ é•·æ–‡æ³¨æ„ï¼ï¼š æ›¸ã„ã¦ã„ã‚‹ã†ã¡ã«éžå¸¸ã«é•·æ–‡(1ä¸‡å—ä»¥ä¸Š)ã«ãªã£ã¦ã—ã¾ã£ãŸã®ã§ã€é•·æ–‡ãŒè‹¦æ‰‹ãªæ–¹ã¯ã€GPT-4è¦ç´„(400å—)ã‚’
koma_g 2019/04/05
person

node.js

tls
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ãƒ»æ¤œæŸ»ã®GMOã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ byã‚¤ã‚¨ãƒ©ã‚¨
â€»1 å½“ç¤¾èª¿ã¹ â€»2 HTB Business CTF 2024:å›½å†…1ä½ â€»3 2023å¹´ DEF CON 31 Cloud Village CTF:ä¸–ç•Œ1ä½ã€2024å¹´ DEF CON 32 Cloud Village CTF :ä¸–ç•Œ1ä½
koma_g 2019/02/13
tls

SNI
ãƒªãƒ³ã‚¯
ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯å¤§è¦æ¨¡é€šä¿¡éšœå®³ã®åŽŸå› :Geekãªãºãƒ¼ã˜
2018å¹´12æœˆ6æ—¥ã€ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ãŠã„ã¦ã€4æ™‚é–“25åˆ†ã«ã‚ãŸã‚Šç´„3060ä¸‡å›žç·šã®åˆ©ç”¨è€…ã«å½±éŸ¿ã‚’åŠã¼ã™é€šä¿¡éšœå®³ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚ ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ãŠã‚ˆã³ãƒ¯ã‚¤ãƒ¢ãƒã‚¤ãƒ«ã®4G(LTE)æºå¸¯é›»è©±ã‚µãƒ¼ãƒ“ã‚¹ã€ã€ŒãŠã†ã¡ã®ã§ã‚“ã‚ã€ã€Softbank Airã€3Gã‚µãƒ¼ãƒ“ã‚¹ãªã©ãŒå½±éŸ¿ã‚’å—ã‘ã¾ã—ãŸã€‚ ã“ã®éšœå®³ã¯ã€Ericssonã®MMEå†…éƒ¨ã«ãƒãƒ¼ãƒ‰ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã•ã‚ŒãŸè¨¼æ˜Žæ›¸ãŒæœŸé™åˆ‡ã‚Œã«ãªã£ãŸãŸã‚ã€SGSN-MME(Serving GPRS Support Nodex - Mobility Management Entity)ãŒå†èµ·å‹•ã‚’ç¹°ã‚Šè¿”ã—ã¦ã—ã¾ã£ãŸã®ãŒåŽŸå› ã§ã™ã€‚ ãŸã ã€è¨¼æ˜Žæ›¸ãŒæœŸé™åˆ‡ã‚Œã«ãªã‚‹ã“ã¨ã§ã€ãªãœå¤§è¦æ¨¡ãªé€šä¿¡éšœå®³ã«ç¹‹ãŒã£ã¦ã—ã¾ã†ã®ã‹ãŒè‰¯ãã‚ã‹ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ ã©ã®ã‚ˆã†ãªè¨è¨ˆã‚’ã—ãŸã‚‰ã€è¨¼æ˜Žæ›¸ãŒæœŸé™åˆ‡ã‚Œã«ãªã£ãŸã“ã¨ã§é€šä¿¡æ©Ÿå™¨ãŒå†èµ·å‹•ã‚’ç¹°ã‚Šè¿”ã™ã‚ˆã†ãªçŠ¶æ³ã«ãªã‚‹ã®ã‹ã€æ˜¨å¹´æ®µéšŽã§ã¯ã€ã„ã¾ã„ã¡ç†è§£ã§ããªã‹
koma_g 2019/02/04
ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

ãƒˆãƒ©ãƒ–ãƒ«

è¨¼æ˜Žæ›¸

tls
ãƒªãƒ³ã‚¯
æ¬¡ä¸–ä»£Webã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ 2019ï¼šHTTPSã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒé¢ç™½ã‹ã£ãŸ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
ä»¥å‰ã‹ã‚‰æ°—ã«ãªã£ã¦ã„ãŸã€Œæ¬¡ä¸–ä»£ Web ã‚«ãƒ³ãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ 2019ã€ã‚’ã€ã‚ˆã†ã‚„ãè´ãã«è¡Œãã“ã¨ãŒã§ãã¾ã—ãŸã€‚ ãŸãã•ã‚“ã®ãƒˆãƒ¼ã‚¯ãŒã‚ã‚Šã¾ã—ãŸãŒã€ã“ã“ã§ã¯HTTPS (hashtag: #nwc_https)ã‚’ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ãªãŠã€ã“ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒé–“é•ã„ãªãä¸€ç•ªã‚¢ãƒ„ãã€ä¸€ç•ªé¢ç™½ã‹ã£ãŸã§ã™! å½“æ—¥ã®å‹•ç”» https://www.youtube.com/watch?v=_8dCa8wj8QY togetter https://togetter.com/li/1268794 ä»¥ä¸‹ã€å½“æ—¥å‚åŠ ã—ãŸã€ã‚‚ã—ãã¯å‹•ç”»ã‚’è¦‹ãŸã¨ã„ã†å‰æã§ã®ãƒ¡ãƒ¢ãªã®ã§ã€è¦‹ã¦ãªã„äººã¯ãœã²è¦‹ã¾ã—ã‚‡ã†ã€‚ PKI ã€Œä½Žãƒ¬ã‚¤ãƒ¤ã‹ã‚‰è¡Œãã¾ã—ã‚‡ã†ã€ã¨ã„ã†ã“ã¨ã§ã€ã¯ã˜ã‚ã¯PKIçµ¡ã¿ã€‚Symantecã®distrustã¨ã€æ—¥æœ¬ã®GPKIã®è©±ã§ã—ãŸã€‚ ãƒˆãƒ¼ã‚¯ä¸ã«ä½•åº¦ã‹å‡ºã¦ãã¾ã—ãŸãŒã€èªè¨¼å±€(åŽ³å¯†ã«ã¯CAã¨RAã‚’åˆ†ã‘ã¦æ›¸ãã¹ãã§ã™ãŒã€ã©ã†ã›ã¿ã‚“ãªä¸€ç·’ãª
koma_g 2019/01/15
https

tls

èªè¨¼

google

chrome
ãƒªãƒ³ã‚¯
ç¥RFCï¼Transport Layer Security (TLS) 1.3 ç™ºè¡Œã®è»Œè·¡ ï½žç†Ÿæˆã•ã‚ŒãŸ4å¹´é–“ã®å®‰å…¨æ€§è§£æžï½žï½œæ ªå¼ä¼šç¤¾ãƒ¬ãƒ”ãƒ€ãƒ
GMOã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ byã‚¤ã‚¨ãƒ©ã‚¨æ ªå¼ä¼šç¤¾ã¯å›½å†…ãƒˆãƒƒãƒ—ã‚¯ãƒ©ã‚¹ã®ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ãŒå¤šæ•°åœ¨ç±ã™ã‚‹ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ä¼šç¤¾ã§ã™ã€‚æ”»æ’ƒæ‰‹æ³•ã«é–¢ã™ã‚‹è±Šå¯ŒãªçŸ¥è˜ã¨æœ€å…ˆç«¯ã®æŠ€è¡“ã‚’æŒã¤ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ãŒä»®æƒ³æ•µã¨ãªã‚Šã€ãŠå®¢æ§˜ã®æŠ±ãˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œã®å¯è¦–åŒ–ã¨èª²é¡Œè§£æ±ºã‚’ã‚µãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ ã€Œèª°ã‚‚ãŒçŠ ç‰²ã«ãªã‚‰ãªã„ç¤¾ä¼šã‚’å‰µã‚‹ã€ã‚’ãƒŸãƒƒã‚·ãƒ§ãƒ³ã¨ã—ã¦æŽ²ã’ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒã‚¤ãƒ†ã‚£ãƒ–ã®æ™‚ä»£ã‚’ç”Ÿãã‚‹ã™ã¹ã¦ã®äººãŒå®‰å…¨ã«æš®ã‚‰ã›ã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆç¤¾ä¼šå‰µã‚Šã«è²¢çŒ®ã—ã¾ã™ã€‚
koma_g 2018/10/02
ã‚ã¨ã§èªã‚€

tls

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

å®‰å…¨æ€§

æš—å·

è€ƒãˆæ–¹
ãƒªãƒ³ã‚¯
TLS 1.3ã®æ¨™æº–åŒ–ã¨å®Ÿè£… | IIJ Engineers Blog
IIJ-II æŠ€è¡“ç ”ç©¶æ‰€ æŠ€è¡“é–‹ç™ºå®¤ã®å±±æœ¬ã§ã™ã€‚ç¾åœ¨æŠ€è¡“é–‹ç™ºå®¤ã¯ã€ç§ã‚’å«ã‚ãŸ4äººã§æ§‹æˆã•ã‚Œã¦ãŠã‚Šã€ä¸»ã«ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžHaskellã‚’ä½¿ã£ã¦é–‹ç™ºã‚’é€²ã‚ã¦ã„ã¾ã™ã€‚ä»Šå›žã®è©±é¡Œã§ã‚ã‚‹ TLS(Transport Layer Security) 1.3 ã‚‚Haskellã§å®Ÿè£…ã—ã¾ã—ãŸã€‚ 4å¹´ã®æ³æœˆã‚’ã‹ã‘ã¦è°è«–ã•ã‚Œã¦ããŸTLS 1.3ã§ã™ãŒã€ã“ã®8æœˆã«ã‚ã§ãŸãä»•æ§˜ãŒRFC 8446ã¨ãªã‚Šã¾ã—ãŸã€‚è²¢çŒ®è€…ãƒªã‚¹ãƒˆã«ç§ã®åå‰ãŒè¼‰ã£ã¦ã„ã‚‹ã“ã¨ã‚’èžãã¤ã‘ãŸåºƒå ±ã‹ã‚‰ã€ãƒ–ãƒã‚°è¨˜äº‹ã®åŸ·ç†ä¾é ¼ãŒã‚ã‚Šã¾ã—ãŸã®ã§ã€TLS 1.3ã®æ¨™æº–åŒ–ã‚„å®Ÿè£…ã®è©±ã«ã¤ã„ã¦æ›¸ã„ã¦ã¿ã¾ã™ã€‚ ãªãœTLS 1.3ã‚’æ¨™æº–åŒ–ã™ã‚‹å¿…è¦ãŒã‚ã£ãŸã®ã‹ç†ç”±ã‚’çŸ¥ã‚ŠãŸã„æ–¹ã¯ã€ã€ŒTLSã®å‹•å‘ã€ã¨ã„ã†è¨˜äº‹ã‚„ã€ŒTLS 1.3ã€ã¨ã„ã†ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’èªã‚“ã§ä¸‹ã•ã„ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«ã¯ã€IETFã¨ã„ã†å›£ä½“ã§ä»•æ§˜ãŒè°è«–ã•ã‚Œã¦ç–å®šã•ã‚Œã¾ã™ã€‚IETFã«ã¯ã€èª°ã§ã‚‚
koma_g 2018/09/25
tls

IIJ

person
ãƒªãƒ³ã‚¯
çµ„ã¿è¾¼ã¿æŠ€è¡“è€…å‘ã‘TLS1.3åŸºç¤Žè§£èª¬ï¼ˆå‰ç·¨ï¼‰ï¼šã¾ãšã¯SSL/TLSã«ã¤ã„ã¦çŸ¥ã‚ã†
çµ„ã¿è¾¼ã¿æŠ€è¡“è€…å‘ã‘TLS1.3åŸºç¤Žè§£èª¬ï¼ˆå‰ç·¨ï¼‰ï¼šã¾ãšã¯SSL/TLSã«ã¤ã„ã¦çŸ¥ã‚ã†ï¼šIoTã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åŸºç¤Žè§£èª¬ï¼ˆ1/3 ãƒšãƒ¼ã‚¸ï¼‰ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŽ¥ç¶šæ©Ÿå™¨ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“ã¨ã—ã¦åºƒãç”¨ã„ã‚‰ã‚Œã¦ã„ã‚‹TLSã®æœ€æ–°ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã€ŒTLS1.3ã€ã¯ã€IoTãƒ‡ãƒã‚¤ã‚¹ã‚’å¼·ãæ„è˜ã—ã¦æ¨™æº–åŒ–ãŒé€²ã‚ã‚‰ã‚ŒãŸã€‚æœ¬ç¨¿ã§ã¯ã€çµ„ã¿è¾¼ã¿æŠ€è¡“è€…å‘ã‘ã«TLS1.3ã®åŸºç¤Žã‚’è§£èª¬ã™ã‚‹ã€‚å‰ç·¨ã§ã¯ã¾ãšã€TLS1.3ã®ãƒ™ãƒ¼ã‚¹ã¨ãªã‚‹ä¸€èˆ¬çš„ãªæš—å·åŒ–é€šä¿¡æŠ€è¡“ã§ã‚ã‚‹SSL/TLSã«ã¤ã„ã¦èª¬æ˜Žã™ã‚‹ã€‚ 1ï¼Žã¯ã˜ã‚ã« çµ„ã¿è¾¼ã¿æ©Ÿå™¨ã®ä¸ã§ã‚‚ã€IoTï¼ˆãƒ¢ãƒŽã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆï¼‰ãƒ‡ãƒã‚¤ã‚¹ãŒæ‰±ã†æƒ…å ±ã¯ãƒ“ã‚¸ãƒã‚¹ä¾¡å€¤ã®é«˜ã„ãƒ“ãƒƒã‚°ãƒ‡ãƒ¼ã‚¿ã‚„ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼æƒ…å ±ãªã©ã‚»ãƒ³ã‚·ãƒ†ã‚£ãƒ–ãªæƒ…å ±ã®å®åº«ã§ã‚ã‚Šã€ãƒ‡ãƒã‚¤ã‚¹ã®å¢—åŠ ã¨ã¨ã‚‚ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å¼·åŒ–ãŒå–«ç·Šã®èª²é¡Œã¨ãªã£ã¦ã„ã‚‹ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŽ¥ç¶šæ©Ÿå™¨ã®é€šä¿¡ã®ç§˜å¯†ã‚’å®ˆã‚‹ãŸã‚ã«æ—¥å¸¸çš„ã«ä½¿ç”¨ã•ã‚Œã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®1ã¤ãŒæš—å·åŒ–ã§ã‚ã‚‹ã€‚æš—å·åŒ–æŠ€è¡“
koma_g 2018/09/18
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL

tls
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2018/09/15/2018-09-14-three-years-later-lets-encrypt-now-secures-75-of-the-web/
koma_g 2018/09/15
https

tls

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸