HSTS (HTTP Strict Transport Security) ã®å°Žå…¥ - QiitaHTTPã§æŽ¥ç¶šã—ãŸéš›ã«ã€å¼·åˆ¶çš„ã«HTTPSã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã—ã€ä»¥é™ã®ãã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã¸ã®æŽ¥ç¶šã¯ã™ã¹ã¦HTTPSã¨ã™ã‚‹æ©Ÿèƒ½ãŒHSTS (HTTP Strict Transport Security) ã§ã‚る。RFC6797ã§æ¨™æº–化ã•ã‚Œã¦ã„る。 ã“ã‚Œã¯HTTPヘッダã«ä»¥ä¸‹ã‚’å«ã‚€ã“ã¨ã§å®Ÿç¾ã•ã‚Œã‚‹ã€‚ Strict-Transport-Security:max-age=有効期間秒数;includeSubDomains max-ageã§ã¯HTTPSã§é€šä¿¡ã™ã‚‹æœŸé–“ã‚’è¨å®šã™ã‚‹ã€‚ã¾ãŸã€includeSubDomainsを指定ã™ã‚‹ã“ã¨ã§ã€ã‚µãƒ–ドメインã«ã‚‚HSTSãŒé©ç”¨ã•ã‚Œã‚‹ã‚ˆã†ã«è¨å®šã§ãる。 HSTSã®ã‚µãƒãƒ¼ãƒˆã¯ã€2015å¹´6月9æ—¥ã«ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆãŒIEã¸ã®ã‚µãƒãƒ¼ãƒˆã‚’è¿½åŠ ã—ãŸã“ã¨ã§ã€ã™ã¹ã¦ã®ãƒ¡ã‚¸ãƒ£ãƒ¼ãƒ–ラウザã«ãŠã„ã¦ã‚µãƒãƒ¼ãƒˆãŒå®Œäº†ã—ã€HTTPサーãƒãƒ¼ã¨ã—ã¦ã‚‚Apacheを始ã‚ã¨ã—è¨å®šãŒå¯èƒ½ã 。 Apacheã®è¨å®š A
HTTPSã«ã¾ã¤ã‚る怪ã—ã„ä¼èª¬ã‚’検証ã™ã‚‹ - Google I/O 2016ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‹ã‚‰ - Qiita
pythonã§googleã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹
Loading...
memozilla:openssl を利用ã—ã¦ã€https 接続を試ã¿ã‚‹ - livedoor Blog（ブãƒã‚°ï¼‰
{{#tags}}- {{label}}
{{/tags}}