[B! https] sfujiwaraã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

sfujiwara id:sfujiwara

httpsã«é–¢ã™ã‚‹sfujiwaraã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æ•°ç™¾ä¸‡ä»¶æ®‹ã£ã¦ã„ãŸHTTPã®ã¯ã¦ãªãƒ–ãƒã‚°ã‚’4å¹´è¶Šã—ã«ã™ã¹ã¦HTTPSåŒ–ã•ã›ãŸè©± - Hatena Developer Blog
ã“ã‚“ã«ã¡ã¯ id:cohalz ã§ã™ã€‚ã¯ã¦ãªãƒ–ãƒã‚°ã§ã¯2021å¹´4æœˆã®å…¬å¼ãƒ–ãƒã‚°ã§ã€ã™ã¹ã¦ã®ãƒ–ãƒã‚°ã‚’HTTPSã«ä¸€æœ¬åŒ–ã—ã¦ã„ãã“ã¨ã‚’æ¡ˆå†…ã—ã¾ã—ãŸã€‚ â–¶ ã€ŒHTTPSé…ä¿¡ã€ã¸ã®åˆ‡ã‚Šæ›¿ãˆã¨ã€ãƒ–ãƒã‚°ã®è¡¨ç¤ºã®ç¢ºèªã‚’ãŠé¡˜ã„ã„ãŸã—ã¾ã™ ã“ã®æ™‚ç‚¹ã§ã¾ã æ•°ç™¾ä¸‡ä»¶ã®HTTPã®ãƒ–ãƒã‚°ãŒæ®‹ã£ã¦ã„ã‚‹çŠ¶æ…‹ã§ã—ãŸãŒã€2021å¹´8æœˆã«ã¯ä¸Šè¨˜ã®æ¡ˆå†…ã«è¿½è¨˜ã—ãŸã‚ˆã†ã«ã€å…¨ãƒ–ãƒã‚°ã§HTTPSåŒ–ã‚’å®Œäº†ã§ãã¾ã—ãŸã€‚ å®Œäº†ã¾ã§ã«è¡Œã£ã¦ããŸã“ã¨ã‚’ã“ã®è¨˜äº‹ã§æŒ¯ã‚Šè¿”ã£ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ã¯ã¦ãªãƒ–ãƒã‚°ã®HTTPSåŒ–ã®ã“ã‚Œã¾ã§ ã¯ã¦ãªãƒ–ãƒã‚°ã®HTTPSåŒ–ã¯ã€2017å¹´9æœˆã«æœ€åˆã®ãŠçŸ¥ã‚‰ã›ã‚’è¡Œã£ã¦ã‚¹ã‚¿ãƒ¼ãƒˆã—ã¾ã—ãŸã€‚ å½“åˆã®äºˆå®šã‚ˆã‚Šæ™‚é–“ãŒã‹ã‹ã‚Šã¾ã—ãŸãŒã€2018å¹´2æœˆã«HTTPSé…ä¿¡ã®æä¾›ã‚’é–‹å§‹ã—ã€ã“ã‚Œä»¥é™ã«ä½œæˆã•ã‚ŒãŸãƒ–ãƒã‚°ã¯æœ€åˆã‹ã‚‰HTTPSã®ã¿ã§é…ä¿¡ã•ã‚Œã¦ã„ã¾ã™ã€‚ã¾ãŸã€ãã‚Œä»¥å‰ã«ä½œæˆã•ã‚ŒãŸãƒ–ãƒã‚°ã§ã‚‚ã€ãƒ¦ãƒ¼ã‚¶å´ã§è¨å®šã‚’å¤‰æ›´ã™ã‚‹ã“ã¨ã§è‡ªåˆ†ã®ãƒ–ãƒ
sfujiwara 2021/10/25
å‰æ¥

https

hatena

blog
ãƒªãƒ³ã‚¯
åˆ¶é™ã¨ä»•æ§˜ã‹ã‚‰Let's Encrypt(ACMEv1)ã®è©± - Qiita
ç¾è¡Œã®ACMEv1ã‚’ä½¿ã£ãŸLet's Encryptã®ãŠè©±ã€‚ (https://letsencrypt.org) V1ã¯çµ‚ã‚ã‚Šã¾ã—ãŸãŒã€V2ã§ã‚‚æ¦‚ãåŒã˜ã§ã™ã€‚ä¸€å¿œV2ã¯ã²ã¨ã¤åˆ¶é™ãŒè¿½åŠ ã•ã‚Œã¦ã¾ã™ã€è¿½è¨˜ã®3ã‚’å‚ç…§ã€‚ å€‹äººãŒæ‰‹æŒã¡ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã§åˆ©ç”¨ã™ã‚‹ã«ã¯ã‚ã¾ã‚Šæ°—ã«ã™ã‚‹ã“ã¨ã‚‚ãªã„ã§ã™ãŒã€ä½•åº¦ã‚‚è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã‚ˆã†ã¨ã™ã‚‹ã¨åˆ¶é™ã«å¼•ã£ã‹ã‹ã£ã¦ãã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ https://letsencrypt.org/docs/rate-limits/ å…ˆæ—¥Encryptã‚’å°‘ã—å¤šã‚ã«Let'sã—ãŸæ©Ÿä¼šãŒã‚ã£ãŸã®ã§ã€ãã®æ™‚ã«è‰²ã€…æ°—ã‚’ä½¿ã£ãŸã“ã¨ã‚’ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ Let's Encryptã«ã‹ã‹ã‚‹åˆ¶é™(rate-limits) ã¨ã„ã£ã¦ã‚‚ã€(ãƒ‰ãƒ¡ã‚¤ãƒ³ã®æ‰€æœ‰ã•ãˆç¢ºèªã§ãã‚Œã°)ACMEã®ä»•æ§˜ã¨ã—ã¦ã‹ã‹ã‚‹åˆ¶é™ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ã»ã¨ã‚“ã©ã¯ACMEã®ãƒ—ãƒãƒã‚¤ãƒ€ã«ã‚ˆã‚‹ã€è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚„ãã‚Œã«ã¾ã¤ã‚ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¸ã®é‡çš„ãªåˆ¶é™ã¨ãª
sfujiwara 2017/08/22
https

letsencrypt
ãƒªãƒ³ã‚¯
WEB+DB PRESS Vol.100 ç‰¹é›†ã€Œå¯¾å¿œå¿…é ˆï¼å®Œå…¨HTTPSåŒ–ã€ã‚’åŸ·ç†ã—ã¾ã—ãŸ - æ°´æ·±1024m
2017å¹´8æœˆ24æ—¥ç™ºå£²ã® WEB+DB PRESS Vol.100 ã«ã€Œå¯¾å¿œå¿…é ˆï¼å®Œå…¨HTTPSåŒ– - ç§»è¡Œæ‰‹é †ã‹ã‚‰ã¤ã¾ãšããƒã‚¤ãƒ³ãƒˆã¾ã§ã€ã¨ã„ã†ç‰¹é›†è¨˜äº‹ã‚’åŸ·ç†ã—ã¾ã—ãŸã€‚ ã“ã®ç‰¹é›†ã¯ã€2017å¹´4æœˆã«ä¼šç¤¾ã®æŠ€è¡“ãƒ–ãƒã‚°ã«åŸ·ç†ã—ãŸ Web ã‚µãƒ¼ãƒ“ã‚¹ã®å®Œå…¨ HTTPS åŒ– - ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰é–‹ç™ºè€…ãƒ–ãƒã‚° ã¨ã„ã†è¨˜äº‹ã‚’ãƒ™ãƒ¼ã‚¹ã«ã€ä¸èº«ã‚’ã»ã¼æ–°è¦ã«åŸ·ç†ã—ãŸã‚‚ã®ã§ã™ã€‚ 2017å¹´1æœˆã«ã‚¯ãƒƒã‚¯ãƒ‘ãƒƒãƒ‰ã¨ã„ã† Web ã‚µãƒ¼ãƒ“ã‚¹ã‚’å®Œå…¨ HTTPS åŒ–ã—ãŸã®ã§ã€ãã®çµŒé¨“ã‚’4æœˆã«ãƒ–ãƒã‚°è¨˜äº‹ã¨ã„ã†å½¢ã§å…¬é–‹ã—ãŸã®ã§ã™ãŒã€ã“ã‚Œã‚’ã”è¦§ã«ãªã£ãŸç·¨é›†éƒ¨ã®æ–¹ã‹ã‚‰ã”é€£çµ¡ã‚’ã„ãŸã ãä»Šå›žã®è©±ã«ç¹‹ãŒã‚Šã¾ã—ãŸã€‚ WEB+DB PRESS ã¯8å¹´ãã‚‰ã„å‰ã€æœ¬æ ¼çš„ã« Web æŠ€è¡“è€…ã‚’ç›®æŒ‡ãã†ã‹ãªã¨æ€ã„å§‹ã‚ãŸå¦ç”Ÿã®é ƒã‹ã‚‰æ™‚æŠ˜èªã‚“ã§ãŠã‚Šã€ç§ã«ã¨ã£ã¦ã‚‚ã‹ãªã‚Šèº«è¿‘ãªé›‘èªŒã§ã™ã€‚ã—ã‹ã—åŸ·ç†ã¯ã¨ã„ã†ã¨Vol.92 ã§ã¡ã‚‡ã“ãƒ¼ãƒ¼ã£ã¨ã ã‘ Fluentd ã«ã‚ˆã‚‹
sfujiwara 2017/08/22
web+dbpress

https
ãƒªãƒ³ã‚¯
pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹ã¾ã§ã®é“ã®ã‚Šï¼ˆå‰ç·¨ï¼‰ - pixiv inside
ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ã§é–‹ç™ºåŸºç›¤ãƒãƒ¼ãƒ ã¨ã—ã¦åƒã„ã¦ã„ã‚‹ @catatsuy ã§ã™ã€‚ä¸»ã«pixivã®æŠ€è¡“çš„ãªæ”¹å–„ã‚’ã—ã¦ã„ã¾ã™ãŒã€åºƒå‘Šãƒãƒ¼ãƒ ã‚‚å…¼ä»»ã—ã¦ã„ã‚‹ã®ã§åºƒå‘Šå‘¨ã‚Šã®é–‹ç™ºã‚‚ã—ã¦ã„ã¾ã™ã€‚ ä»Šå›žpixivã®å¸¸æ™‚HTTPSåŒ–ã‚’æ‹…å½“ã—ãŸã®ã§ã‚„ã£ãŸã“ã¨ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ pixivã‚’HTTPSåŒ–ã—ãŸç†ç”± ç¾åœ¨ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå…¨ä½“ã®æµã‚Œã¨ã—ã¦å¸¸æ™‚HTTPSåŒ–ãŒé€²ã‚“ã§ã„ã¾ã™ã€‚ã‚¨ãƒ‰ãƒ¯ãƒ¼ãƒ‰ãƒ»ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³ - WikipediaãŒæš´éœ²ã—ãŸNSAã®äº‹ä»¶ç™ºè¦šã‚„ å…¬è¡†ç„¡ç·šLANã®åˆ©ç”¨æ‹¡å¤§ã«ã‚ˆã‚Šã€é€šä¿¡çµŒè·¯ä¸Šã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å€‹äººæƒ…å ±ã‚’ä¿è·ã™ã‚‹ã“ã¨ãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå…¨ä½“ã¨ã—ã¦éžå¸¸ã«é‡è¦ã«ãªã£ã¦ãã¾ã—ãŸã€‚GoogleãŒè¡Œã£ã¦ã„ã‚‹èª¿æŸ»ã«ã‚ˆã‚‹ã¨ã€HTTPSãƒšãƒ¼ã‚¸ã®é–²è¦§æ™‚é–“ã¯ã‚¦ã‚§ãƒ–å…¨ä½“ã®åˆ©ç”¨æ™‚é–“ã®3åˆ†ã®2ã«ã‚‚åŠã³ã¾ã™ã€‚ ãã‚Œã ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã«æ–°ã—ãè¿½åŠ ã•ã‚Œã‚‹APIã‚„æ©Ÿèƒ½ï¼ˆHTTP2/WebRTC/ServiceWorkerãªã©ï¼‰ã¯HTT
sfujiwara 2017/06/13
https

pixiv
ãƒªãƒ³ã‚¯
Google Public DNS over HTTPS ã‚’è©¦ã™ | IIJ Engineers Blog
ã€2018/11/16 è¿½è¨˜ã€‘ æœ¬è¨˜äº‹ã¯ã€2016 å¹´ 4 æœˆã« Google Public DNS ã‚µãƒ¼ãƒã«å®Ÿè£…ã•ã‚ŒãŸã€å®Ÿé¨“çš„ãª DNS over HTTPS ãƒ—ãƒãƒˆã‚³ãƒ«ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ã¾ã™ã€‚DNS over HTTPS ãƒ—ãƒãƒˆã‚³ãƒ«ã¯ãã®å¾Œ IETF ã® doh ãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ã«ã¦æ¨™æº–åŒ–ãŒé€²ã‚ã‚‰ã‚Œã€2å¹´åŠå¾Œã® 2018 å¹´ 10 æœˆã« RFC8484 ã¨ã—ã¦å‡ºç‰ˆã•ã‚Œã¾ã—ãŸã€‚æœ¬è¨˜äº‹ã§ç´¹ä»‹ã—ãŸãƒ—ãƒãƒˆã‚³ãƒ«ã¯ RFC8484 ã«è¦å®šã•ã‚ŒãŸãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã¯ã„ãã¤ã‚‚ã®ç‚¹ã§ç•°ãªã£ã¦ã„ã‚‹ã“ã¨ã«ã”æ³¨æ„ãã ã•ã„ã€‚ Google Inc. ãŒå…¬é–‹ DNS ã‚µãƒ¼ãƒã‚’é‹å–¶ã—ã¦ã„ã‚‹ã“ã¨ã¯ã”å˜çŸ¥ã§ã—ã‚‡ã†ã‹? Google Public DNS ã¨å‘¼ã°ã‚Œã‚‹ã“ã®å…¬é–‹ DNS ã‚µãƒ¼ãƒã¯ã€â€8.8.8.8â€³ ã¨ã„ã†ç‰¹å¾´çš„ãª IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã§å…¨ä¸–ç•Œã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ã«å¯¾ã—ã¦ç„¡æ–™ã® DNS ã‚µãƒ¼ãƒ(ãƒ•ãƒ«ãƒ¬ã‚¾ãƒ«ãƒ)ã‚’æä¾›ã—
sfujiwara 2016/08/15
Google

dns

https
ãƒªãƒ³ã‚¯
ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å†…ã§httpsã«ã‚ˆã‚‹å¤–éƒ¨APIã‚’å©ã„ã¦ã„ã‚‹ã‚µãƒ¼ãƒã®ãƒ¡ãƒ¢ãƒªä½¿ç”¨é‡ãŒå¢—åŠ ã—ç¶šã‘ã‚‹ä»¶ã«ã¤ã„ã¦ - s_tajima:TechBlog
å•é¡Œ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å†…ã§httpsã«ã‚ˆã‚‹å¤–éƒ¨APIã‚’å©ã„ã¦ã„ã‚‹ã‚µãƒ¼ãƒã®ãƒ¡ãƒ¢ãƒªä½¿ç”¨é‡ãŒå¢—åŠ ã—ç¶šã‘ã‚‹ä»¶ã«ã¤ã„ã¦èª¿ã¹ãŸã€‚ è©²å½“ã®ã‚µãƒ¼ãƒã§ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ã«ãƒ¡ãƒ¢ãƒªã®ä½¿ç”¨çŽ‡ãŒå¾ã€…ã«ä¸Šæ˜‡ã—ã¦ã„ãã€‚ ã¾ãŸã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ãƒ—ãƒã‚»ã‚¹è‡ªä½“ãŒãƒ¡ãƒ¢ãƒªã‚’æ¶ˆè²»ã—ã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„çŠ¶æ…‹ã€‚ åŽŸå› èª¿æŸ»ã™ã‚‹ã¨ã€ã“ã®ãƒã‚°ä»•æ§˜ã‚’è¸ã‚“ã§ã„ã‚‹ã®ã§ã¯ãªã„ã‹ã¨æ€ã‚ã‚Œã‚‹ãƒšãƒ¼ã‚¸ã‚’è¦‹ã¤ã‘ãŸã€‚ https://bugzilla.redhat.com/show_bug.cgi?id=1044666 å†…å®¹ã¨ã—ã¦ã¯ã€curlã‚’å®Ÿè¡Œã—ãŸéš›ã« /etc/pki/nssdb/ä»¥ä¸‹ã®å˜åœ¨ã—ãªã„ãƒ•ã‚¡ã‚¤ãƒ«(æ¯Žå›žé•ã†ãƒ‘ã‚¹)ã«å¯¾ã—ã¦accessã‚·ã‚¹ãƒ†ãƒ ã‚³ãƒ¼ãƒ«ãŒå¤§é‡ã«ã‚³ãƒ¼ãƒ«ã•ã‚Œã€ negative dentry cacheãŒæºœã¾ã£ã¦ã„ãã€ãƒ¡ãƒ¢ãƒªä½¿ç”¨é‡ãŒåœ§è¿«ã•ã‚Œã‚‹ã¨ã„ã†ã‚‚ã®ã€‚ å®Ÿéš›ã€ã“ã®çŠ¶æ³ãŒèµ·ãã¦ã„ã‚‹ã‚µãƒ¼ãƒã‚’èª¿ã¹ã‚‹ã¨ãƒ¡ãƒ¢ãƒªä½¿ç”¨çŽ‡ã®ã†ã¡å¤šãã‚’å ã‚ã¦ã„ã‚‹ã®ã¯nega
sfujiwara 2015/11/17
https

curl

Linux
ãƒªãƒ³ã‚¯
ãƒ¢ãƒã‚¤ãƒ«ã‚¦ã‚§ãƒ–ç’°å¢ƒã®HTTPSã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚° Â« NAVER Engineers' Blog
ã“ã‚“ã«ã¡ã¯æ¤œç´¢ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºï¼”ãƒãƒ¼ãƒ ã®å´”ç‰ç§€ã¨ç”³ã—ã¾ã™ã€‚ ã‚¤ãƒ³ãƒ•ãƒ©ã‚„ã‚·ã‚¹ãƒ†ãƒ ã¨ã®é€£æºã‚„çµ±è¨ˆã®ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã‚’æ‹…å½“ã—ã¦ãŠã‚Šã¾ã™ã€‚ ãƒ¢ãƒã‚¤ãƒ«ã®ã‚¦ã‚§ãƒ–ç’°å¢ƒã¯PCã®ã‚¦ã‚§ãƒ–ä½¿ç”¨ç’°å¢ƒã¨ã¯è‰²ã€…ãªé•ã„ãŒæœ‰ã‚Šã¾ã™ã€‚ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®é€Ÿåº¦ã ã‘ã§ã¯ãªããƒãƒƒãƒ†ãƒªãƒ¼ã®åŠ¹çŽ‡ã‚’è€ƒãˆãŸä»•çµ„ã¿ãªã©ã€PCã«æ¯”ã¹ãƒªã‚½ãƒ¼ã‚¹ãŒååˆ†ã§ã¯ãªã„ãŸã‚ãƒ¢ãƒã‚¤ãƒ«ãƒ–ãƒ©ã‚¦ã‚¶ã®å‹•ä½œãŒç•°ãªã£ã¦ã„ã‚‹ã“ã¨ã‚‚æœ‰ã‚Šã¾ã™ã€‚ ä»Šå›žã¯ãƒ¢ãƒã‚¤ãƒ«ã®ã‚¦ã‚§ãƒ–Applicationã«ãŠã‘ã‚‹SSLé–¢ä¿‚ã®æ€§èƒ½ã«é–¢ã™ã‚‹å·¥å¤«ã®å†…å®¹ã‚’Q&Aå½¢å¼ã§è§£èª¬ã—ã¦ã„ãã¾ã™ã€‚ Q. ä½•ãŒå•é¡Œã§ã—ãŸã‹ï¼Ÿ A. ãƒ¢ãƒã‚¤ãƒ«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ(iPhone, Android)ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰ã®HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å¿œç”æ™‚é–“ã«é…å»¶ã®å•é¡ŒãŒæœ‰ã‚Šã¾ã™ã€‚ æœ€åˆã¯web access logã‹ã‚‰ã®slow response(ï¼‘ç§’ä»¥ä¸Š)ã®HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒçµæ§‹ã‚ã‚Šã¾ã—ãŸã€‚ ãã®HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’protoc
sfujiwara 2011/10/27
https

ssl
ãƒªãƒ³ã‚¯
1