[B! security] mather314ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mather314 id:mather314

securityã«é–¢ã™ã‚‹mather314ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Peing-è³ªå•ç®±-ã«é–¢ã™ã‚‹ãŠè©«ã³ã¨è©³ç´°ã®ã”èª¬æ˜Žï¼ˆç¬¬ä¸€å ±ï¼‰ | æ ªå¼ä¼šç¤¾ã‚¸ãƒ©ãƒ•
å¹³æˆï¼“ï¼‘å¹´ï¼‘æœˆï¼’ï¼™æ—¥ å„ ä½ ä¼šç¤¾å æ ªå¼ä¼šç¤¾ã‚¸ãƒ©ãƒ• ä»£è¡¨è€…å ä»£è¡¨å–ç· å½¹ éº»ç”Ÿè¼æ˜Ž Peing-è³ªå•ç®±-ã«é–¢ã™ã‚‹ãŠè©«ã³ã¨è©³ç´°ã®ã”èª¬æ˜Žï¼ˆç¬¬ä¸€å ±ï¼‰ ã“ã®åº¦ã€æ ªå¼ä¼šç¤¾ã‚¸ãƒ©ãƒ•ï¼ˆä»¥ä¸‹ã€Œå¼Šç¤¾ã€ã¨ã„ã„ã¾ã™ã€‚ï¼‰ã«ã¦é‹å–¶ã‚’è¡Œã£ã¦ãŠã‚Šã¾ã™Peing-è³ªå•ç®±-ã«ãŠã„ã¦ã€ç¬¬ä¸‰è€…ã®APIãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç”¨ã„ã¦è©²å½“ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®æƒ…å ±ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹äº‹è±¡ãŒç¢ºèªã•ã‚ŒãŸãŸã‚ã€ä¸‹è¨˜ï¼’ã«è¨˜è¼‰ã®æƒ…å ±ãŒç¬¬ä¸‰è€…ã«ã‚ˆã‚Šé–²è¦§ã§ãã‚‹ãªã©ã®çŠ¶æ³ã«ãªã£ã¦ãŠã‚Šã¾ã—ãŸã€‚ç¾æ®µéšŽã«ãŠã„ã¦ã¯ã€ã“ã®ã‚ˆã†ãªäº‹è±¡ã¯è§£æ¶ˆã•ã‚Œã¦ã„ã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼æ§˜åŠã³é–¢ä¿‚è€…ã®çš†æ§˜ã«å¤šå¤§ãªã‚‹ã”å¿ƒé…ã¨ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã—ãŸã“ã¨ã€æ·±ããŠè©«ã³ç”³ã—ä¸Šã’ã¾ã™ã€‚ è¨˜ 1ï¼Žæ¦‚è¦ã€çµŒç·¯ å¹³æˆï¼“ï¼‘å¹´ï¼‘æœˆï¼’ï¼˜æ—¥ï¼‘ï¼˜æ™‚ï¼‘ï¼˜åˆ†ã«ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼æ§˜ã‚ˆã‚Šã®å•ã„åˆã‚ã›ãŒã‚ã‚Šã€ç¤¾å†…èª¿æŸ»ã‚’è¡Œã£ãŸçµæžœã€ç¬¬ä¸‰è€…ã®APIãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç”¨ã„ã¦è©²å½“ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®æƒ…å ±ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹äº‹è±¡ãŒåˆ¤æ˜Žã—ã¾ã—ãŸã€‚ã“ã®äº‹è±¡ã«ã‚ˆã£ã¦é–²è¦§å¯èƒ½ãªæƒ…
mather314 2019/01/29
ãƒˆãƒ¼ã‚¯ãƒ³ã®ç„¡åŠ¹åŒ–ã®æ¡ˆå†…ãŒãªã„ãªã€‚ä»¶æ•°ã‚„å¯¾è±¡è€…ãŒã‚ã‹ã‚“ãªã„ã‹ã‚‰ã‹ãªã€‚å…¨å“¡ã ã‚ã†ã‘ã©ã€‚

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Account authentication and password management best practices | Google Cloud Blog
13 best practices for user account, authentication, and password management Editor's note: This post includes updated best practices including the latest from Google's Best Practices for Password Management whitepapers for both users and system designers. Account management, authentication and password management can be tricky. Often, account management is a dark corner that isn't a top priority f
mather314 2018/02/20
google

security

authorization

auth

èªè¨¼

ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹
ãƒªãƒ³ã‚¯
SymantecãŒå†ã³Googleã®ä¿¡é ¼ã‚’å¤±ã£ãŸä»¶ã«ã¤ã„ã¦ã®ãƒ¡ãƒ¢ - Technically, technophobic.
ï¼ˆåˆã‚ã«è¨€ã„è¨³ã—ã¦ãŠãã¨ã€è¨¼æ˜Žæ›¸ç•Œéšˆã«ã¤ã„ã¦ã¯è©³ã—ããªã„ã§ã™ã€‚æŸèª¤è¨³é‡ç”£ã‚µã‚¤ãƒˆãŒé©å½“ãªè¨˜äº‹ã‚’æ›¸ã„ã¦ã„ãŸã®ã§ã€ãªã«ã‹æ›¸ã‹ãã°ã¨æ€ã£ã¦æ›¸ã„ã¦ã„ã‚‹ã¨ã„ã†ç¨‹åº¦ã®ã¾ã¨ã‚è¨˜äº‹ã§ã™ã€‚é–“é•ã„ãªã©ã‚ã‚Œã°ã”æŒ‡æ‘˜ãã ã•ã„ï¼‰ ä½•ãŒèµ·ã“ã‚‹ã®ã‹ Ryan Sleeviã•ã‚“ï¼ˆGoogleã®äººï¼‰ãŒBlink-devã®ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã«æŠ•ç¨¿ã—ãŸã“ã‚Œã«ã¾ã¨ã¾ã£ã¦ã„ã¾ã™ï¼šhttps://groups.google.com/a/chromium.org/d/msg/blink-dev/eUAKwjihhBs/rpxMXjZHCQAJ çµŒç·¯ã«ã¤ã„ã¦ã¯ã„ã£ãŸã‚“é£›ã°ã—ã¦ã€ã©ã®ã‚ˆã†ãªã‚¢ã‚¯ã‚·ãƒ§ãƒ³ãŒææ¡ˆã•ã‚Œã¦ã„ã‚‹ã®ã‹è¦‹ã¾ã™ã€‚ To restore confidence and security of our users, we propose the following steps: A reduction in the accepted
mather314 2017/03/27
google

security

è¨¼æ˜Žæ›¸

Symantec
ãƒªãƒ³ã‚¯
Redirecting to ssl-config.mozilla.org...
Mozilla SSL Configuration Generator Redirecting to the updated SSL Configuration Generatorâ€¦
mather314 2014/10/28
security

ssl

nginx

apache

haproxy
ãƒªãƒ³ã‚¯
OAuth Security
mather314 2014/10/20
OAuth2

security

cheatsheet
ãƒªãƒ³ã‚¯
The POODLE Attack and the End of SSL 3.0 â€“ Mozilla Security Blog
Summary SSL version 3.0 is no longer secure. Browsers and websites need to turn off SSLv3 and use more modern security protocols as soon as possible, in order to avoid compromising usersâ€™ private information. We have a plan to turn off SSLv3 in Firefox. This plan was developed with other browser vendors after a team at Google discovered a critical flaw in SSLv3, which can allow an attacker to extr
mather314 2014/10/15
SSLv3 is no longer secure.

security

ssl
ãƒªãƒ³ã‚¯
OAuth/OpenID Connectã‚’ç”¨ã„ã¦IDé€£æºã‚’å®Ÿè£…ã™ã‚‹ã¨ãã«æ°—ã‚’ä»˜ã‘ã‚‹ã“ã¨ #yapcasia
YAPC::Asia Tokyo 2014 ã§è©±ã—ãŸã‚¹ãƒ©ã‚¤ãƒ‰ã§ã™ã€‚ http://yapcasia.org/2014/talk/show/cc57f3ca-01b8-11e4-b7e8-e4a96aeab6a4
mather314 2014/09/01
OAuth

OpenID

security

é–‹ç™º
ãƒªãƒ³ã‚¯
http://tetraph.com/covert_redirect/oauth2_openid_covert_redirect.html
mather314 2014/05/07
ãƒã‚§ãƒƒã‚¯ã—ã¦ãŠã“ã†ã€‚

è„†å¼±æ€§

security
ãƒªãƒ³ã‚¯
1