å¤ãã®Googleã®SSLãµã¼ãã¹ã«å¯¾ãã¦Man-in-the-Middleæ»æå¯è½ã«ãã â*.google.comâã¨ããã¯ã¤ã«ãã«ã¼ãã使ã£ãSSL証ææ¸ãçºè¡ããã¦ãã¾ã£ãããã§ãã ãã®åé¡ã®è¨¼ææ¸ã¯ãªã©ã³ãã®èªè¨¼å±DigiNotarã§7æ10æ¥ã«çºè¡ããã¾ããã証ææ¸ã¯è¨¼ææ¸å¤±å¹ãªã¹ãï¼CRLï¼ã«è¼ãããã¦ç¡å¹ã«ãªãããã«ããã¦ãã¾ããããã©ã¦ã¶ã«ãã£ã¦ã¯ããã©ã«ãã§CRLããã§ãã¯ããªããã¨ãããã®ã§ãæå¹ãªã¾ã¾ãªãã¨ãããã¾ãã Fraudulent certificates issued by Comodo, is it time to rethink who we trust? | Naked Security ããã¦ãã¤ã©ã³ãGmailãã¹ãã¤ããããã«ãã®è¨¼ææ¸ã使ã£ãã®ã§ã¯ãªããã¨ãã話ãããããã§ããã§ã«æ»æã«ä½¿ããã¦ããããããã¾ããã FirefoxãThu
â ãVeriSignã·ã¼ã«ãã¨ããå¹»æ³ ãªã¬ãªã¬è¨¼ææ¸ã§ã¯ãªãSSLãµã¼ã証ææ¸ã¯ã2ã¤ã®ç¬ç«ããæ©è½ãæããã¦ããã¨è¨ããã1ã¤ç®ã¯ãSSLãããã³ã«ã«ãããµã¼ãã¨ã¯ã©ã¤ã¢ã³ãéã®æå·åéä¿¡ã®ããã«ä¸å¯æ¬ ãªå½¹å²ã§ããã2ã¤ç®ã¯å½è©²ãµã¤ãéå¶è ã®å®å¨è¨¼æã®æ©è½ã§ããããã ããä»æ¥ã§ã¯ãå¾è ãå«ã¾ãªããåè ã ãã®ãµã¼ã証ææ¸ãããã å¾è ã®å®å¨è¨¼æã¯ããã¤ã¦ã¯èªè¨¼å±ãµã¼ãã¹ãæä¾ããåäºæ¥è ãããããã®ç¬èªã®åºæºã§ããµã¤ãéå¶è ã®å®å¨æ§ã確èªãèªè¨¼ãã¦ããããããã§ã¯å©ç¨è ã«ãããã«ãããã¨ãããèªè¨¼ã®éã®å®å¨æ§ç¢ºèªã®æ¹æ³ãæ¨æºåãããèªçããã®ãEV SSLã§ãã£ãã ãã®çµæãVeriSignãªã©ãå¤ãããå®å¨è¨¼æã«åãå ¥ãã¦ããèªè¨¼å±ãµã¼ãã¹ã§ã¯ãEVã®ãã®ã¨EVã§ãªãå®å¨è¨¼æä»ããµã¼ã証ææ¸ã®2種é¡ãåå¨ãããã¨ã¨ãªã£ããVeriSignã§ã¯ãEV証ææ¸ã®æä¾éå§å¾ããEVã§ãªãå®
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}