[B! HTTPS] summer4anã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

summer4an id:summer4an

HTTPSã«é–¢ã™ã‚‹summer4anã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (24)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹ã¾ã§ã®é“ã®ã‚Šï¼ˆå¾Œç·¨ï¼‰ - pixiv inside
ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ã§é–‹ç™ºåŸºç›¤ãƒãƒ¼ãƒ ã¨ã—ã¦åƒã„ã¦ã„ã‚‹ @catatsuy ã§ã™ã€‚ å‰ç·¨ã§ã¯pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹å‰ã«ã‚„ã£ãŸå‰æº–å‚™ã¨ã—ã¦ã€åºƒå‘Šã€ç”»åƒã¨ã„ã£ãŸãƒªã‚½ãƒ¼ã‚¹ã‚’HTTPSã«åˆ‡ã‚Šæ›¿ãˆã‚‹éš›ã®æ‰‹é †ã‚’ç´¹ä»‹ã—ã¾ã—ãŸã€‚ pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹ã¾ã§ã®é“ã®ã‚Šï¼ˆå‰ç·¨ï¼‰ - pixiv inside å¾Œç·¨ã§ã¯å®Ÿéš›ã«pixivã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è‡ªä½“ã‚’å¸¸æ™‚HTTPSåŒ–ã—ã¦ã„ãæ‰‹é †ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ å¾“æ¥ã®HTTPSé…ä¿¡ pixivã¯PHPã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿè¡Œã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒãƒ¼(Apache/mod_php)ã®å‰æ®µã«nginxã‚’é…ç½®ã™ã‚‹æ§‹æˆã«ãªã£ã¦ã„ã¾ã™ã€‚ä»¥å‰ã‹ã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ã«é‡è¦ãªãƒšãƒ¼ã‚¸ã¯HTTPSã§æä¾›ã—ã¦ãŠã‚Šã€nginxã§HTTPSçµ‚ç«¯å‡¦ç†ã‚’è¡Œã£ã¦ã„ã¾ã—ãŸã€‚HTTPSã§å¿œç”ã™ã‚‹å ´åˆã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒãƒ¼ã«X-HTTPSãƒ˜ãƒƒãƒ€ãƒ¼ã‚’ä»˜ã‘ã¦ãƒ—ãƒã‚¯ã‚·ãƒ¼ã—ã¦ã„ã¾ã™ã€‚ å…·ä½“çš„ã«ã¯ä»¥ä¸‹ã®ã‚ˆ
summer4an 2017/07/02
ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

HTTPS

Webã‚µãƒ¼ãƒ“ã‚¹
ãƒªãƒ³ã‚¯
pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹ã¾ã§ã®é“ã®ã‚Šï¼ˆå‰ç·¨ï¼‰ - pixiv inside
ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ã§é–‹ç™ºåŸºç›¤ãƒãƒ¼ãƒ ã¨ã—ã¦åƒã„ã¦ã„ã‚‹ @catatsuy ã§ã™ã€‚ä¸»ã«pixivã®æŠ€è¡“çš„ãªæ”¹å–„ã‚’ã—ã¦ã„ã¾ã™ãŒã€åºƒå‘Šãƒãƒ¼ãƒ ã‚‚å…¼ä»»ã—ã¦ã„ã‚‹ã®ã§åºƒå‘Šå‘¨ã‚Šã®é–‹ç™ºã‚‚ã—ã¦ã„ã¾ã™ã€‚ ä»Šå›žpixivã®å¸¸æ™‚HTTPSåŒ–ã‚’æ‹…å½“ã—ãŸã®ã§ã‚„ã£ãŸã“ã¨ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ pixivã‚’HTTPSåŒ–ã—ãŸç†ç”± ç¾åœ¨ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå…¨ä½“ã®æµã‚Œã¨ã—ã¦å¸¸æ™‚HTTPSåŒ–ãŒé€²ã‚“ã§ã„ã¾ã™ã€‚ã‚¨ãƒ‰ãƒ¯ãƒ¼ãƒ‰ãƒ»ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³ - WikipediaãŒæš´éœ²ã—ãŸNSAã®äº‹ä»¶ç™ºè¦šã‚„ å…¬è¡†ç„¡ç·šLANã®åˆ©ç”¨æ‹¡å¤§ã«ã‚ˆã‚Šã€é€šä¿¡çµŒè·¯ä¸Šã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å€‹äººæƒ…å ±ã‚’ä¿è·ã™ã‚‹ã“ã¨ãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå…¨ä½“ã¨ã—ã¦éžå¸¸ã«é‡è¦ã«ãªã£ã¦ãã¾ã—ãŸã€‚GoogleãŒè¡Œã£ã¦ã„ã‚‹èª¿æŸ»ã«ã‚ˆã‚‹ã¨ã€HTTPSãƒšãƒ¼ã‚¸ã®é–²è¦§æ™‚é–“ã¯ã‚¦ã‚§ãƒ–å…¨ä½“ã®åˆ©ç”¨æ™‚é–“ã®3åˆ†ã®2ã«ã‚‚åŠã³ã¾ã™ã€‚ ãã‚Œã ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã«æ–°ã—ãè¿½åŠ ã•ã‚Œã‚‹APIã‚„æ©Ÿèƒ½ï¼ˆHTTP2/WebRTC/ServiceWorkerãªã©ï¼‰ã¯HTT
summer4an 2017/07/02
ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯

HTTPS

Webã‚µãƒ¼ãƒ“ã‚¹
ãƒªãƒ³ã‚¯
Google Public DNS over HTTPS ã‚’è©¦ã™ | IIJ Engineers Blog
ã€2018/11/16 è¿½è¨˜ã€‘ æœ¬è¨˜äº‹ã¯ã€2016 å¹´ 4 æœˆã« Google Public DNS ã‚µãƒ¼ãƒã«å®Ÿè£…ã•ã‚ŒãŸã€å®Ÿé¨“çš„ãª DNS over HTTPS ãƒ—ãƒãƒˆã‚³ãƒ«ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¦ã„ã¾ã™ã€‚DNS over HTTPS ãƒ—ãƒãƒˆã‚³ãƒ«ã¯ãã®å¾Œ IETF ã® doh ãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ã«ã¦æ¨™æº–åŒ–ãŒé€²ã‚ã‚‰ã‚Œã€2å¹´åŠå¾Œã® 2018 å¹´ 10 æœˆã« RFC8484 ã¨ã—ã¦å‡ºç‰ˆã•ã‚Œã¾ã—ãŸã€‚æœ¬è¨˜äº‹ã§ç´¹ä»‹ã—ãŸãƒ—ãƒãƒˆã‚³ãƒ«ã¯ RFC8484 ã«è¦å®šã•ã‚ŒãŸãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã¯ã„ãã¤ã‚‚ã®ç‚¹ã§ç•°ãªã£ã¦ã„ã‚‹ã“ã¨ã«ã”æ³¨æ„ãã ã•ã„ã€‚ Google Inc. ãŒå…¬é–‹ DNS ã‚µãƒ¼ãƒã‚’é‹å–¶ã—ã¦ã„ã‚‹ã“ã¨ã¯ã”å˜çŸ¥ã§ã—ã‚‡ã†ã‹? Google Public DNS ã¨å‘¼ã°ã‚Œã‚‹ã“ã®å…¬é–‹ DNS ã‚µãƒ¼ãƒã¯ã€â€8.8.8.8â€³ ã¨ã„ã†ç‰¹å¾´çš„ãª IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã§å…¨ä¸–ç•Œã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ¦ãƒ¼ã‚¶ã«å¯¾ã—ã¦ç„¡æ–™ã® DNS ã‚µãƒ¼ãƒ(ãƒ•ãƒ«ãƒ¬ã‚¾ãƒ«ãƒ)ã‚’æä¾›ã—
summer4an 2016/08/16
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTTPS

DNS
ãƒªãƒ³ã‚¯
Letâ€™s Encryptã®SSLè¨¼æ˜Žæ›¸ã§ã€å®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’å…¬é–‹ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
å®‰å…¨ãªã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’å…¬é–‹ã™ã‚‹ãŸã‚ã€ç„¡æ–™ã§åˆ©ç”¨å¯èƒ½ãª Let's Encrypt ã®è¨¼æ˜Žæ›¸ã‚’ä½¿ã†æ–¹æ³•ã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚Let's Encrypt ã®èƒŒæ™¯ã¨SSLè¨¼æ˜Žæ›¸ã®è‡ªå‹•ç™ºè¡Œã‚’ã¯ã˜ã‚ã€CentOS 7 ä¸Šã® Nginx ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒã‚’ SSL ã«å¯¾å¿œã™ã‚‹æ–¹æ³•ã€ãã—ã¦ã€è¨¼æ˜Žæ›¸ã‚’è‡ªå‹•æ›´æ–°ã™ã‚‹æ–¹æ³•ã‚’è¦‹ã¦ã„ãã¾ã—ã‚‡ã†ï¼ˆæ‰€è¦æ™‚é–“10ï½ž20åˆ†ï¼‰ã€‚ ãªãŠã€Let's Encrypt ã«ã¤ã„ã¦ã¯æ—¢ã«ä¸æ´¥å·ã•ã‚“ã®è¨˜äº‹ã€Œã™ã¹ã¦ã®Webã‚µã‚¤ãƒˆã®æš—å·åŒ–ã‚’ç›®æŒ‡ã™Let's Encryptã‚’è©¦ã™ã€ã§å–ã‚Šä¸Šã’ã‚‰ã‚Œã¦ã„ã¾ã™ãŒã€ä»Šå›žã¯æ–°ã—ã„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ certbot-auto ã‚’ä½¿ã†æ–¹æ³•ã‚„ã€è¨¼æ˜Žæ›¸ã®è‡ªå‹•æ›´æ–°ã®ä»•æ–¹ã‚’ã¨ã‚Šã‚ã’ã¾ã™ã€‚ ã“ã‚“ã«ã¡ã¯ï¼ã“ã‚“ã«ã¡ã¯ï¼ ã¿ãªã•ã‚“ã€ã¯ã˜ã‚ã¾ã—ã¦ã€‚ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®å‰ä½›é›…äººï¼ˆãœã‚“ã¶ã¤ã¾ã•ã²ã¨ï¼‰ã§ã™ã€‚ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸ã«ä½•ã‹æ›¸ã‘ï¼ˆæ¥å‹™å‘½ä»¤ï¼‰ã¨ã„ã†ã“ã¨ã§ã€çš†ã•ã‚“ãŒã‚µãƒ¼ãƒã‚’ã‚ˆã‚Šæ´»ç”¨ã§ãã‚‹ã‚ˆã†ã€ãƒŠ
summer4an 2016/07/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL

HTTPS

lets encrypt
ãƒªãƒ³ã‚¯
HTTPSã«ã¾ã¤ã‚ã‚‹æ€ªã—ã„ä¼èª¬ã‚’æ¤œè¨¼ã™ã‚‹ - Google I/O 2016ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‹ã‚‰ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? ä»Šå¹´ã¯Google I/Oã«åˆã‚ã¦ç¤¾å“¡ã§ã¯ãªã„ç«‹å ´ã§å‚åŠ ã—ã¾ã—ãŸã€‚å…¨ä½“ã®æ„Ÿæƒ³ã¯ Google I/O 2016ã¾ã¨ã‚ï¼ˆWebçš„è¦–ç‚¹ï¼‰ ã§å…¬é–‹ã—ã¦ã„ã¾ã™ãŒã€ä»Šå›žã¯ãã®ä¸ã§ã€æ°—ã«å…¥ã£ãŸã‚»ãƒƒã‚·ãƒ§ãƒ³ã®1ã¤ã§ã‚ã‚‹"Mythbusting HTTPS: Squashing securityâ€™s urban legends"ã«ã¤ã„ã¦æ›¸ã„ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚»ãƒƒã‚·ãƒ§ãƒ³ã¯å¤§å¤‰è‰¯ãã¾ã¨ã¾ã£ã¦ã„ã¾ã™ã®ã§ã€YouTubeã«ã‚ãŒã£ã¦ã„ã‚‹å‹•ç”»ã‚’è¦‹ã‚Œã‚‹äººã¯å‹•ç”»ã‚’è¦‹ã¦è²°ãˆã‚Œã°è‰¯ã„ã®ã§ã™ãŒã€æ™‚é–“ãŒç„¡ã„ã¨ã„ã†äººã®ãŸã‚ã«ã€ãã®å†…å®¹ã‚’ã¾ã¨ã‚ã¾ã—ãŸã€‚åŸºæœ¬çš„ã«ã¯æ–‡å—èµ·ã“ã—ã«è¿‘ã„
summer4an 2016/07/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTTPS

SSL
ãƒªãƒ³ã‚¯
ç„¡å„ŸSSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸Letâ€™s Encryptã®æ™®åŠã¨HTTP/2ãŠã‚ˆã³å¸¸æ™‚SSLåŒ– | OSDN Magazine
Webã‚µã‚¤ãƒˆã®æš—å·åŒ–ï¼ˆSSLåŒ–ã€HTTPSå¯¾å¿œï¼‰ã¯ã“ã‚Œã¾ã§Eã‚³ãƒžãƒ¼ã‚¹ã‚„ãƒ—ãƒ©ã‚¤ãƒã‚·ã‚’å®ˆã‚‹ç›®çš„ã§éƒ¨åˆ†çš„ã«å°Žå…¥ã•ã‚Œã¦ããŸãŒã€SHA1ã‹ã‚‰SHA2ã¸ã®åˆ‡ã‚Šæ›¿ãˆã€ãƒ¢ãƒã‚¤ãƒ«ç«¯æœ«ã®æ™®åŠã‚„HTTP/2ã®ç™»å ´ã«ã‚ˆã£ã¦ã€ã‚µã‚¤ãƒˆå…¨ä½“ã‚’å¸¸ã«HTTPSé€šä¿¡ã«ã™ã‚‹å¸¸æ™‚SSLåŒ–ã®å‹•ããŒæ´»ç™ºã«ãªã£ã¦ã„ã‚‹ã€‚ã•ã‚‰ã«SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ç„¡å„Ÿã§å…¥æ‰‹å¯èƒ½ãªLetâ€™s Encryptã®ã‚µãƒ¼ãƒ“ã‚¹é–‹å§‹ã‚„ä¸»è¦ãªWebã‚µãƒ¼ãƒãƒ¼ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®å®‰å®šç‰ˆã§HTTP/2ãŒåˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã“ã¨ã§ãã®å‹•ãã¯åŠ é€Ÿã—ã¦ã„ã‚‹ã€‚æœ¬ç¨¿ã§ã¯SSLåŒ–ã‚’å–ã‚Šå·»ãæœ€è¿‘ã®çŠ¶æ³ã‚’æ•´ç†ã—ã€Nginxã¨Letâ€™s Encryptã«ã‚ˆã‚‹HTTP/2ï¼†SSLåŒ–ã®å®Ÿè£…ä¾‹ã‚‚ç´¹ä»‹ã—ã¦ã„ãã€‚ ã“ã‚Œã¾ã§è¨¼æ˜Žæ›¸ã®ç„¡å„Ÿå…¥æ‰‹ã¯é™å®šçš„ HTTPSã®Webã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ã«ã¯é€šå¸¸ã€å•†ç”¨ã®èªè¨¼å±€ã«SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’ç”³ã—è¾¼ã¿ã€å¿…ãšè²»ç”¨ãŒç™ºç”Ÿã™ã‚‹ã‚‚ã®ã ã£ãŸã€‚ä¸€éƒ¨é™å®šã—ãŸç›®çš„ã§ã¯ç„¡å„Ÿã§åˆ©ç”¨ã§ã
summer4an 2016/06/28
SSL

HTTPS
ãƒªãƒ³ã‚¯
ã€è¿½è¨˜ã€‘ iOS 10ã¯ATSãŒã‚ªãƒ³ã§ã‚‚HTTPã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’èªã¿è¾¼ã‚ã‚‹è¨å®šãŒè¿½åŠ ã•ã‚Œã‚‹ãã†ã§ã™ã€‚â† ã‚‚ã†å¾…ã£ãŸãªã—ï¼Ÿ2017å¹´1æœˆã‚ˆã‚Šå…¨ã¦ã®HTTPã‚µã‚¤ãƒˆã¯iPhoneã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒæ¿€æ¸›ã™ã‚‹å¯èƒ½æ€§ã€‚
å’Œæ´‹é¢¨KAIã¯ã€Appleãƒ»æ°´æ¨¹å¥ˆã€…ãƒ»é£Ÿã¹æ©ããŒä¸‰æœ¬æŸ±ã®ãƒ–ãƒã‚°ã§ã™ã€‚ãƒ¢ãƒƒãƒˆãƒ¼ã¯ã€Œæ¥½ã—ãã€ã€Œä¾¿åˆ©ã§ã€ã€Œç«¯çš„ã«ã€ã€‚ â‡’ ã‚¢ãƒã‚¦ãƒˆ â‡’ å…è²¬äº‹é … ////////////////////////////////// ã€è¿½è¨˜ã€‘ã²ã¨ã‚Šã¶ã‚ãã•ã‚“ã«ã‚ˆã‚‹ã¨ã€iOS 10ã«ã¯ã€ATSãŒã‚ªãƒ³ã§ã‚‚ã€HTTPã®Webã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’èªã¿è¾¼ã¿ã‚’è¨±å¯ã™ã‚‹ã€ŒNSAllowsArbitraryLoadsInWebContentã€ã¨ã„ã†è¨å®šã‚ãƒ¼ãŒè¿½åŠ ã•ã‚Œã‚‹ãã†ã§ã™ã€‚ ã‚ˆã£ã¦ã€iOS 10ã«é–¢ã—ã¦ã¯ã‚¢ãƒ—ãƒªå†…ãƒ–ãƒ©ã‚¦ã‚¶ã§HTTPã‚µã‚¤ãƒˆãŒè¦‹ã‚‰ã‚Œãªããªã‚‹å¯èƒ½æ€§ã¯ãªã•ãã†ã§ã™ã€‚ å‚è€ƒ: 2017å¹´1æœˆä»¥é™ã‚‚HTTPSéžå¯¾å¿œã‚µã‚¤ãƒˆã¸ã®iPhoneã‹ã‚‰ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯æ¿€æ¸›ã—ãªã„ | ã²ã¨ã‚Šã¶ã‚ã ////////////////////////////////// ã‚‚ã†å¾…ã£ãŸãªã—ã€‚2017å¹´1æœˆã‹ã‚‰Webã«æŽ¥ç¶šã™ã‚‹ã™ã¹ã¦ã®iOSã‚¢ãƒ—ãƒªã«App
summer4an 2016/06/15
ãƒ–ãƒ©ã‚¦ã‚¶ã‚‚ãªã®ã‹â€¦ï¼Ÿâ†’è¿½è¨˜ã«ã¦ã€ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãŒç”¨æ„ã•ã‚Œã‚‹ã‚‰ã—ã„ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

iOS

HTTPS
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2016/06/15/20160614apple-will-require-https-connections-for-ios-apps-by-the-end-of-2016/
summer4an 2016/06/15
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTTPS

iOS
ãƒªãƒ³ã‚¯
HTTPSã§ä¿è·ã•ã‚Œã¦ã„ã‚‹ã¯ãšã®é€šä¿¡ã‚’å‚å—ã§ãã‚‹è„†å¼±æ€§ã€ŒForbidden Attack(ç¦æ–ã®æ”»æ’ƒ)ã€ã¯VISAé–¢é€£ã‚µã‚¤ãƒˆãªã©è¤‡æ•°ã§åˆ©ç”¨å¯èƒ½
By Sean MacEntee é‡‘èžã‚µãƒ¼ãƒ“ã‚¹å¤§æ‰‹ã®VISAãŒæ‰€æœ‰ã™ã‚‹HTTPSã§ä¿è·ã•ã‚Œã¦ã„ã‚‹ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆãŒã€ç‰¹å®šã®ã‚³ãƒ¼ãƒ‰ã«å¯¾ã—ã¦è„†å¼±æ€§ã‚’æŒã£ã¦ã„ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã‚Šã¾ã—ãŸã€‚ â€œForbidden attackâ€ makes dozens of HTTPS Visa sites vulnerable to tampering | Ars Technica http://arstechnica.com/security/2016/05/faulty-https-settings-leave-dozens-of-visa-sites-vulnerable-to-forgery-attacks/ ãƒ‰ã‚¤ãƒ„ã®æ ªå¼å–å¼•æ‰€ã§ã‚ã‚‹Deutsche Borseã‚„ãƒãƒ¼ãƒ©ãƒ³ãƒ‰ã®éŠ€è¡Œå”ä¼šã§ã‚ã‚‹ZBPã‚’å«ã‚€ã€184ã®ã‚µãƒ¼ãƒãƒ¼ãŒ10å¹´æ¥ã®è„†å¼±æ€§ã‚’æŒã£ã¦ã„ã‚‹ã“ã¨ãŒã‚¢ãƒ¡ãƒªã‚«å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ã®èª¿æŸ»ã«ã‚ˆã‚Šæ˜Žã‚‰ã‹ã«ãªã‚Šã¾ã—
summer4an 2016/06/02
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL

HTTPS
ãƒªãƒ³ã‚¯
ç„¡æ–™ã§è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦HTTPSã®å°Žå…¥ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã€ŒLetâ€™s Encryptã€ãŒãƒ™ãƒ¼ã‚¿ç‰ˆã‹ã‚‰æ£å¼ç‰ˆã«
By Sean MacEntee SSLã‚’ç”¨ã„ãŸHTTPé€šä¿¡ã®æš—å·åŒ–ã‚’èª°ã§ã‚‚æ‰‹è»½ã«è¡Œãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ç«‹ã¡ä¸ŠãŒã£ãŸã®ãŒEFFã€Mozillaã€Cisco Systemsã€Akamai Techno logiesã€IdenTrustã€ãƒŸã‚·ã‚¬ãƒ³å¤§å¦ã®ç ”ç©¶è€…ãªã©ã§ã€ã“ã‚Œã‚‰ã®ãƒ¡ãƒ³ãƒãƒ¼ãŒHTTPSæ™®åŠã®ãŸã‚ã«ã‚¹ã‚¿ãƒ¼ãƒˆã—ãŸå–ã‚Šçµ„ã¿ãŒã€ŒLet's Encryptã€ã§ã™ã€‚ã“ã‚Œã¾ã§æ‰‹é–“ãŒã‹ã‹ã‚Šé‡‘éŠçš„ãªè² æ‹…ã‚‚å¤§ãã„ã¨è¨€ã‚ã‚Œã¦ããŸã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’ç„¡æ–™ã§è¡Œãˆã‚‹ã‚ˆã†ã«ãªã‚‹ã®ã§ã™ãŒã€åŒå–ã‚Šçµ„ã¿ã¯ã¤ã„ã«ãƒ™ãƒ¼ã‚¿ç‰ˆã‹ã‚‰æ£å¼ç‰ˆã«ã‚µãƒ¼ãƒ“ã‚¹ã‚’ç§»è¡Œã—ã¦ã„ã¾ã™ã€‚ Leaving Beta, New Sponsors - Let's Encrypt - Free SSL/TLS Certificates https://letsencrypt.org//2016/04/12/leaving-beta-new-sponsors.h
summer4an 2016/04/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTTPS

SSL
ãƒªãƒ³ã‚¯
ç±³å›½å®¶å®‰å…¨ä¿éšœå±€ã§ã‚‚ç ´ã‚Œãªã„æš—å·åŒ–ãƒ„ãƒ¼ãƒ«ã®å˜åœ¨ã€æ–°ãŸã«ãƒªãƒ¼ã‚¯
NSAãŒä¸‡èƒ½ã§ã¯ãªã„ã¨ã„ã†ã“ã¨ãŒã‚ã‹ã£ãŸã ã‘ã§ã€ã¨ã‚Šã‚ãˆãšä¸€å®‰å¿ƒâ€¦ã‹ãªï¼Ÿ ã‚¨ãƒ‰ãƒ¯ãƒ¼ãƒ‰ãƒ»ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³æ°ã®ãƒªãƒ¼ã‚¯æ–‡æ›¸ã‹ã‚‰ã€ç±³å›½å®¶å®‰å…¨ä¿éšœå±€ï¼ˆNSAï¼‰ã§ã‚‚å‚å—ã§ããªã„æš—å·åŒ–ãƒ„ãƒ¼ãƒ«ãŒç™ºè¦‹ã•ã‚ŒãŸã¨ç‹¬ãƒ‡ã‚¢ãƒ»ã‚·ãƒ¥ãƒ”ãƒ¼ã‚²ãƒ«ãŒå ±ã˜ã¦ã„ã¾ã™ã€‚2012å¹´ã®æ™‚ç‚¹ã§NSAã§ã‚‚å‚å—ã§ããªã‹ã£ãŸãƒ„ãƒ¼ãƒ«ã¨ã—ã¦ã€åŒ¿åé€šä¿¡ã‚·ã‚¹ãƒ†ãƒ Torã‚„é›»åãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹Zohoã€ãƒ•ã‚¡ã‚¤ãƒ«æš—å·åŒ–ã‚½ãƒ•ãƒˆTruecryptï¼ˆç¾åœ¨ã¯é–‹ç™ºçµ‚äº†ï¼‰ã€ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ³ã‚°OTRï¼ˆOff-the-Recordï¼‰ã®åå‰ãŒã‚ã’ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚é©šãã¹ãã“ã¨ã«ã€20å¹´ä»¥ä¸Šå‰ã«é–‹ç™ºã•ã‚ŒãŸæš—å·åŒ–ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã€PGPï¼ˆPretty Good Privacyï¼‰ã‚‚é€šä¿¡å‚å—ã§ã¯é¬¼é–€ã¨ã•ã‚Œã¦ã„ãŸãã†ã€‚ ã•ã‚‰ã«ã€ã“ã‚Œã‚‰ã®ãƒ„ãƒ¼ãƒ«ã‚’çµ„ã¿åˆã‚ã›ãŸå ´åˆã®é€šä¿¡å‚å—ã¯ã€NSAã«ã¨ã£ã¦ï½¢æ‚²æƒ¨ï½£ãªãã‚‰ã„å›°é›£ã ã£ãŸã¨è¨˜äº‹ã¯è¿°ã¹ã¦ã„ã¾ã™ã€‚ ä¾‹ãˆã°Torã¨ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ãƒˆãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚·ã‚¹ãƒ†ãƒ ã®CSpace
summer4an 2015/11/17
æš—å·åŒ–

NSA

Tor

HTTPS
ãƒªãƒ³ã‚¯
Nginxã§SSLã®è©•ä¾¡ã‚’A+ã«ã™ã‚‹æ‰‹é †
æ˜¨æ—¥ HTTPS åŒ–ã—ãŸ ã‚·ãƒ£ãƒ³ãƒ—ãƒ¼è©•ä¾¡ã‚µã‚¤ãƒˆ ã®SSLè©•ä¾¡ã‚’A+ã«ã—ã¾ã—ãŸã€‚ å‚è€ƒã«ã—ãŸã®ã¯ä¸‹ã®è¨˜äº‹ HTTPS on Nginx: From Zero to A+ (Part 2) - Configuration, Ciphersuites, and Performance - Julian Simioni ã“ã®è¨˜äº‹ã®Nginxè¨¼æ˜Žæ›¸è¨å®šã‚’POSTDã•ã‚“ãŒç¿»è¨³ã—ã¦ã„ã‚‹ã®ã§ã€è¿‘ã„ã†ã¡ã«è©³ã—ã„è¨³ã¯æ—¥æœ¬èªžã§èªã‚ã‚‹ã‹ã‚‚ã€‚ã“ã“ã§ã¯é©å½“ã«ã‹ã„ã¤ã¾ã‚“ã æ‰‹é †ã‚’æ›¸ã„ã¦ãŠãã€‚ä¸€éƒ¨æ™‚é–“ã®ã‹ã‹ã‚‹ã‚³ãƒžãƒ³ãƒ‰ã‚‚ã‚ã‚‹ã‘ã©ã€åŸºæœ¬çš„ã«æ±ºã¾ã£ãŸè¨å®šæ›¸ãã ã‘ãªã®ã§æ™‚é–“ã¯ã‹ã‹ã‚Šã¾ã›ã‚“ã€‚ï¼ˆã‚‚ã¡ã‚ã‚“ã©ã†ã„ã†æ„å‘³ãªã®ã‹çŸ¥ã£ã¦ãŠãã«è¶Šã—ãŸã“ã¨ã¯ãªã„ï¼‰ SSLã®è©•ä¾¡è¨ˆæ¸¬ã«ã¤ã„ã¦ SSLã‚µãƒ¼ãƒãƒ¼ã®ãƒ†ã‚¹ãƒˆã¯Qualys SSL Reportã§ç¢ºèªã—ã¾ã™ã€‚ Nginxãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®è¨å®šã§è¨ˆæ¸¬ã—ãŸã‚‰Cã ã£ãŸã€‚ SSLv3 ã‚’ç„¡åŠ¹ã«ã™ã‚‹ SSLv3
summer4an 2015/03/23
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

linux

SSL

HTTPS

nginx
ãƒªãƒ³ã‚¯
ç„¡æ–™ã§SSLè¨¼æ˜Žæ›¸ã‚’å–å¾—ã§ãã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã€æ¥å¹´å¤ç™»å ´äºˆå®š | ã‚¹ãƒ©ãƒ‰ IT
Mozillaã‚„Ciscoã€Akamaiã€é›»åãƒ•ãƒãƒ³ãƒ†ã‚£ã‚¢è²¡å›£ï¼ˆEFFï¼‰ãªã©ãŒä½œã£ãŸç ”ç©¶ã‚°ãƒ«ãƒ¼ãƒ—ã€ŒInternet Security Research Groupã€ãŒã€ç„¡æ–™ã§åˆ©ç”¨ã§ãã‚‹SSLè¨¼æ˜Žæ›¸ç™ºè¡Œæ©Ÿé–¢ã‚’å‰µè¨ã™ã‚‹ã¨ã„ã†ï¼ˆTechCrunchã€CNET Japanï¼‰ã€‚ ã“ã®å–ã‚Šçµ„ã¿ã¯ã€ŒLet's Encryptã€ã¨å‘¼ã°ã‚Œã¦ãŠã‚Šã€SSLè¨¼æ˜Žæ›¸ã‚’ç„¡å„Ÿã§å®¹æ˜“ã«å¾—ã‚‰ã‚Œã‚‹ã‚ˆã†ãªä»•çµ„ã¿ã‚’ä½œã‚Šä¸Šã’ã‚‹ã¨ã„ã†ã€‚å…·ä½“çš„ã«ã¯ã€ã‚·ã‚§ãƒ«ä¸Šã§ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã ã‘ã§HTTPSã‚’åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ãã†ã§ã€é–¢é€£ã‚³ãƒ¼ãƒ‰ã¯GitHubä¸Šã§å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã€‚
summer4an 2015/02/25
SSL

HTTPS

SSLè¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
ç„¡æ–™ã§SSLä½¿ãˆã‚‹æ™‚ä»£ãã¦ãŸï¼CloudFlareæœ€é«˜ï¼ï¼ï¼ï¼ˆï¼Ÿï¼‰ - uzullaãŒãƒ–ãƒã‚°
ã—ã‚‡ã†ã‚‚ãªã„æ—¥è¨˜ YAPCè¡Œè„šã€ç¦å²¡ç·¨ - uzullaãŒãƒ–ãƒã‚° ã¨ã‹ã‹ã„ãŸå¾Œã«ãªã‚“ã¨ãªããƒ„ã‚¤ãƒƒã‚¿ãƒ¼ã‚’ã¿ã¦ã„ãŸã‚‰ã€ã‚ã‚‹ãƒ„ã‚¤ãƒ¼ãƒˆã‚’ã¿ã¾ã—ã¦ã€‚ packagist.jpã‚’cloudflareå¯¾å¿œã—ãŸã‚‰ã€è‡ªå‹•çš„ã«HTTPSå¯¾å¿œã§ããŸã§ã”ã–ã‚‹ã€‚ã™ã”ã„ã€‚ä¸€å††ã‚‚æ‰•ã£ã¦ãªã„ã®ã« https://t.co/moCiiSwb44â€” Hiraku (@Hiraku) 2015å¹´2æœˆ24æ—¥ ãã‚Œã§CloudFlare(http://cloudflare.com/)ãŒã‚¿ãƒ€ã§SSLè¨¼æ˜Žæ›¸ã‚’ç”¨æ„ã—ã¦ãã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ãŸã®ã‚’çŸ¥ã‚Šã¾ã—ãŸã€‚ Cloudflare Free SSL/TLS | Get SSL Certificates | Cloudflare ã‚¿ãƒ€ï¼ãªã‚“ã¨ç”˜ç¾ŽãªéŸ¿ãï¼ ã‚ªãƒ SNIã§ã‹ã¾ã‚ãªã„ãªã‚‰ã€CloudFlareã‚’ã¤ã‹ãˆã°ValidãªSSLãŒã‚¿ãƒ€ã§åˆ©ç”¨ã§ãã‚‹ã€‚ SNIã¨ã¯ï¼Ÿ NameBaseã®Vir
summer4an 2015/02/25
SSL

HTTPS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSLè¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
Superfishã®ã‚ˆã†ã«å‹æ‰‹ã«ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã‚½ãƒ•ãƒˆã€ç¶šã€…è¦‹ã¤ã‹ã‚‹ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
å…ˆæ—¥ã€LenovoãŒåŒç¤¾è£½å“ã«SSLãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’å‹æ‰‹ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã€ŒSuperfishã€ãªã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚’ãƒ—ãƒªã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã„ãŸã“ã¨ãŒè©±é¡Œã«ãªã£ãŸãŒã€ã“ã®ã‚ˆã†ãªã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãŒSuperfishä»¥å¤–ã«ã‚‚ç¶šã€…ã¨ç™ºè¦‹ã•ã‚Œã¦ã„ã‚‹ï¼ˆArs Technicaï¼‰ã€‚ Superfishã¯SSLã«ã‚ˆã‚‹é€šä¿¡ã®ã€Œä¹—ã£å–ã‚Šã€ã«Komodiaã¨ã„ã†ä¼šç¤¾ãŒæä¾›ã—ã¦ã„ã‚‹æŠ€è¡“ã‚’ä½¿ã£ã¦ã„ã‚‹ãã†ãªã®ã ãŒã€ã“ã®æŠ€è¡“ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¯Superfishã ã‘ã§ã¯ãªã„ã‚‰ã—ã„ã€‚ãã®ä¸€ä¾‹ã¨ã—ã¦æŒ™ãŒã£ã¦ã„ã‚‹ã®ãŒã€ã¾ãšã€ŒLavasoft Ad-aware Web Companionã€ã¨ã„ã†ã€ã„ã‚ã‚†ã‚‹ç„¡æ–™ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚½ãƒ•ãƒˆã ã€‚ã¾ãŸã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ã§ã‚ã‚‹ComodoãŒè²©å£²ã—ã¦ã„ãŸã€Œåºƒå‘Šå·®ã—æ›¿ãˆã‚½ãƒ•ãƒˆã€ã§ã‚ã‚‹ã€ŒPrivDogã€ã¨ã„ã†ã‚½ãƒ•ãƒˆã«ã‚‚å•é¡ŒãŒã‚ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ã¦ã„ã‚‹ã¨ã„ã†ã€‚
summer4an 2015/02/24
SSL

https

MITM

Lenovo
ãƒªãƒ³ã‚¯
SSLè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹ä¼æ¥ãŒè¨¼æ˜Žæ›¸ã‚’å½é€ ã™ã‚‹æ‚ªè³ªãªã‚¢ãƒ‰ã‚¦ã‚§ã‚¢ã€ŒPrivdogã€ã‚’è²©å£²ã—ã¦ã„ãŸã“ã¨ãŒåˆ¤æ˜Ž
COMODO Internet Securityãªã©ã®PCå‘ã‘ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ„ãƒ¼ãƒ«ã®é–‹ç™ºã‚„ã€SSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’è¡Œã†ComodoãŒè²©å£²ã—ã¦ã„ãŸã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ã€ŒPrivdogã€ã¯ã€Lenovoè£½PCã«ãƒ—ãƒªã‚¤ãƒ³ã•ã‚Œã¦ã„ã‚‹ã‚¢ãƒ‰ã‚¦ã‚§ã‚¢ã€ŒSuperfishã€ã‚ˆã‚Šã‚‚æ‚ªè³ªãªã‚¢ãƒ‰ã‚¦ã‚§ã‚¢ã§ã€HTTPSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å®Œå…¨ã«ç ´å£Šã—ã¦ã—ã¾ã†å±é™ºæ€§ãŒã‚ã‚‹ã¨ã„ã†ã“ã¨ãŒã€ãƒ‰ã‚¤ãƒ„äººã‚¸ãƒ£ãƒ¼ãƒŠãƒªã‚¹ãƒˆã®Hanno BÃ¶ckã•ã‚“ã®ãƒ–ãƒã‚°å†…ã§æ˜Žã‹ã•ã‚Œã¾ã—ãŸã€‚ Comodo ships Adware Privdog worse than Superfish - Hanno's blog https://blog.hboeck.de/archives/865-Comodo-ships-Adware-Privdog-worse-than-Superfish.html Lenovoè£½ã®ãƒŽãƒ¼ãƒˆPCã«ãƒ—ãƒªã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã€ŒV
summer4an 2015/02/23
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL

HTTPS

comodo

Lenovo
ãƒªãƒ³ã‚¯
ã¿ãšã»éŠ€è¡Œã®Webã‚µã‚¤ãƒˆã€HTTPSã§ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’ãƒ–ãƒãƒƒã‚¯ã—ã¦è©±é¡Œã« | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ã¿ãšã»éŠ€è¡Œã®Webã‚µã‚¤ãƒˆï¼ˆhttp://www.mizuhobank.co.jp/ï¼‰ã«HTTPSã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€ã€Œãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ï¼ˆãŠæ°—ã«å…¥ã‚Šï¼‰ã®ç™»éŒ²å¤‰æ›´ã‚’ãŠé¡˜ã„ã—ã¾ã™ã€ã¨ã„ã†ãƒšãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã€‚ã“ã®ãƒšãƒ¼ã‚¸ã«ã‚ˆã‚‹ã¨ã€ã€Œhttps://www.mizuhobank.co.jp/ï½žã¯2014å¹´11æœˆ27æ—¥ã‚ˆã‚Šã”åˆ©ç”¨ã„ãŸã ã‘ãªããªã‚Šã¾ã—ãŸã€ã¨ã®ã“ã¨ã§ã€HTTPSã§ã¯ã‚¢ã‚¯ã‚»ã‚¹ãŒã§ããªããªã£ãŸæ¨¡æ§˜ã€‚ è¿‘å¹´ã§ã¯GoogleãŒHTTPæŽ¥ç¶šæ™‚ã«ã€Œå®‰å…¨ã§ãªã„ã€ã¨æ˜Žç¤ºã™ã‚‹ã“ã¨ã‚’ææ¡ˆã™ã‚‹ãªã©ã€HTTPSã®åˆ©ç”¨ã‚’æŽ¨é€²ã™ã‚‹å‹•ããŒå¼·ã¾ã£ã¦ã„ã‚‹ãŒã€ã¿ãšã»ã®å‹•ãã¯ã“ã‚Œã«é€†è¡Œã™ã‚‹ã‚‚ã®ã«ãªã‚‹ã€‚ ãªãŠã€ä¼æ¥ã‚µã‚¤ãƒˆã§HTTPSã§ã®ã‚¢ã‚¯ã‚»ã‚¹ãŒã§ããªã„ç‚¹ã«ã¤ã„ã¦ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã®é«˜æœ¨æµ©å…‰æ°ãŒ2010å¹´ã«å–ã‚Šä¸Šã’ã¦ãŠã‚Šã€ã€Žã©ã“ãžã®ç³žã‚³ãƒ³ã‚µãƒ«ãŒã€Œhttps:// ã®ãƒšãƒ¼ã‚¸ã¯http:///ã§ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¦ã¯ã„ã‘ãªã„ã€
summer4an 2015/01/16
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

éŠ€è¡Œ

ã¿ãšã»éŠ€è¡Œ

HTTPS
ãƒªãƒ³ã‚¯
ãƒ—ãƒ¼ãƒ‰ãƒ«ã‚‚çµæ§‹ã ã‘ã©ã€ã‚¯ãƒƒã‚ãƒ¼ã«ã‚»ã‚ãƒ¥ã‚¢ä»˜ã„ã¦ã¾ã™ã‹ï¼Ÿ
Hiromitsu Takagi @HiromitsuTakagi ã‚ãªãŸã®åˆ©ç”¨ã‚µã‚¤ãƒˆã€ã‚¯ãƒƒã‚ãƒ¼ã«ã‚»ã‚ãƒ¥ã‚¢ä»˜ã„ã¦ã¾ã™ï¼Ÿ Safariã§ç¢ºèª â‘ ãƒã‚°ã‚¤ãƒ³ã—ã€ç™»éŒ²æƒ…å ±å¤‰æ›´ã®ç”»é¢ã¸è¡Œãã€https://ã§ã‚ã‚‹ã“ã¨ã‚’ç¢ºèª â‘¢ã‚³ãƒžãƒ³ãƒ‰+ã‚ªãƒ—ã‚·ãƒ§ãƒ³+Iã§ã€ŒWebã‚¤ãƒ³ã‚¹ãƒšã‚¯ã‚¿ã€ã‚’è¡¨ç¤º â‘£ãƒªã‚½ãƒ¼ã‚¹ã§cookieã‚’é¸ã¶ â‘¤ã€Œä¿è·ã€ã«ãƒã‚§ãƒƒã‚¯æœ‰ã‚ŠãŒ1å€‹ä»¥ä¸Šã‚ã‚‹ã‹ ãƒŠã‚«ãƒ ãƒ©ãƒƒã‚³ @nakamurakko ANAã‹ã‚‰ã€Œãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å¤‰æ›´ã™ã‚‹ãŸã‚ã«ãƒã‚°ã‚¤ãƒ³ã—ã¦ãã€ã£ã¦é€£çµ¡æ¥ã¦ã‚‹ã‘ã©ã€ãƒã‚°ã‚¤ãƒ³IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯SSLã§æš—å·åŒ–ã—ã¦ã„ãªã„ãƒˆãƒƒãƒ—ãƒšãƒ¼ã‚¸ã§å…¥åŠ›ã™ã‚‹äº‹ã«ãªã£ã¦ã„ã‚‹â€¦
summer4an 2014/12/15
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL

HTTPS

cookie

TLS
ãƒªãƒ³ã‚¯
å¤šãã®ã‚µã‚¤ãƒˆã§ã¯HTTPã‚ˆã‚Šã‚‚HTTPSã®ã»ã†ãŒé€Ÿãã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ï¼Ÿ | ã‚¹ãƒ©ãƒ‰ IT
ã¾ãšã€å‚ç…§ã•ã‚Œã¦ã„ã‚‹å…ƒã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã€ŒHTTP vs HTTPS Testã€ã®ãƒ†ã‚¹ãƒˆå†…å®¹ãŒéŒ¯èª¤ã«é™¥ã‚‰ã›ã‚‹å†…å®¹ãªã®ã§ã€ãã‚Œã¯ã©ã†ãªã®?ã¨æ€ã„ã¾ã™ã€‚ (èª¤) HTTPã¨HTTPSã®æ¯”è¼ƒ (æ£) HTTPã¨HTTPS+SPDYã®æ¯”è¼ƒ ã•ã¦ã€ã‚¿ã‚¤ãƒˆãƒ«ãŒé½Žã™éŒ¯èª¤ã‚ˆã‚Šå¤§ããªã€ã“ã®ãƒ†ã‚¹ãƒˆã®å•é¡Œã¯ã€èªã¿è¾¼ã¾ã‚Œã‚‹ç”»åƒã«Expiresãƒ˜ãƒƒãƒ€ãƒ¼ãŒå…¥ã£ã¦ãŠã‚Šã€äºŒå›žç›®ä»¥é™ã®èªã¿è¾¼ã¿ã¯ã€IMS(If-Modified-Since)ãƒªã‚¯ã‚¨ã‚¹ãƒˆã€ã¤ã¾ã‚Šãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã›ãšã€å¤‰æ›´ç¢ºèªã ã‘ã§æ¸ˆã‚€ç‚¹ã§ã™ã€‚ Firebugã‚’é–‹ã„ãŸçŠ¶æ…‹ã§ã€ https://www.httpvshttps.com/ [httpvshttps.com] ã‚’é–‹ã„ã¦ã¿ã¦ãã ã•ã„ã€‚ ã‚‚ã—ã€æ—¢ã«ãƒ–ãƒ©ã‚¦ã‚¸ãƒ³ã‚°ã—ãŸã“ã¨ãŒã‚ã‚‹ã®ã§ã‚ã‚Œã°ã€Ctrl+F5ã§ã€ã‚¹ãƒ¼ãƒ‘ãƒ¼ãƒªãƒãƒ¼ãƒ‰ã‚’ã•ã›ã¦ã€å†åº¦ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã•ã›ã¾ã™ã€‚ ãã®ç§’æ•°ã‚’ç¢ºèªã—ã¦ä¸‹ã•ã„ã€‚ ã§ã¯ã€æ¬¡ã«ã€http:
summer4an 2014/12/09
HTTP

HTTPS

SPDY
ãƒªãƒ³ã‚¯
Webè¡¨ç¤ºã®é«˜é€ŸåŒ–ã‚’å®Ÿç¾ã™ã‚‹SPDYã¨HTTP/2.0ã®æ¨™æº–åŒ– | IIJã®æŠ€è¡“ | ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ–ï¼ˆIIJï¼‰
ï¼ˆâ€»ï¼‰ã“ã®ãƒšãƒ¼ã‚¸ã§ç´¹ä»‹ã—ã¦ã„ã‚‹äº‹é …ã¯è¨˜äº‹åˆå‡ºæ™‚ç‚¹ã®æƒ…å ±ã«åŸºã¥ã„ãŸã‚‚ã®ã§ã™ã€‚æœ¬ãƒšãƒ¼ã‚¸ã¯ã‚¢ãƒ¼ã‚«ã‚¤ãƒ–ã¨ã—ã¦æŽ²è¼‰ã—ã¦ã„ã¾ã™ã€‚ ãƒ„ã‚¤ãƒ¼ãƒˆ 2013å¹´8æœˆ6æ—¥ ã¯ã˜ã‚ã« SPDY(ã‚¹ãƒ”ãƒ¼ãƒ‡ã‚£ã¨èªã¿ã¾ã™)ã¯ã€GoogleãŒWebã®è¡¨ç¤ºã‚’é«˜é€ŸåŒ–ã™ã‚‹ãŸã‚ã«é–‹ç™ºã—ãŸã€æ–°ã—ã„ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã™ã€‚æ–°ã—ã„ã¨è¨€ã£ã¦ã‚‚ã€ä»Šå¾Œæ™®åŠãŒè¦‹è¾¼ã¾ã‚Œã‚‹ã‚ˆã†ãªæ–°æŠ€è¡“ã§ã¯ãªãã€æ—¢ã«å®Ÿç”¨åŒ–ã•ã‚Œå¤šãã®æ–¹ãŒæ—¥å¸¸çš„ã«åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚ ç¾åœ¨Chromeã‚„Firefoxã€Operaã®ãƒ–ãƒ©ã‚¦ã‚¶ã‚’ä½¿ã‚ã‚Œã¦ã„ã‚‹æ–¹ã¯ã€Googleã®ã‚µãƒ¼ãƒ“ã‚¹ã‚„twitterã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„ã‚‹ã¨ã€å®Ÿã¯å…¨ãæ°—ä»˜ã‹ãªã„ã†ã¡ã«ã€ã“ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã‚’åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚ SPDYã¯2010å¹´6æœˆã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸChromeã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³6å®‰å®šç‰ˆã‹ã‚‰ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§æœ‰åŠ¹ã«ãªã£ã¦ãŠã‚Šã€Chromeåˆ©ç”¨è€…ã¯ã“ã®æ–°æŠ€è¡“ã‚’3å¹´ä»¥ä¸Šã‚‚åˆ©ç”¨ã—ã¦ã„ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ä¸€èˆ¬ã®ãƒ¦ãƒ¼ã‚¶ã¯SPDYã‚’ä½¿ã£ã¦ã„ã‚‹ã‹ã©ã†ã‹ã€ã©ã†
summer4an 2014/12/03
ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ

ãƒ—ãƒãƒˆã‚³ãƒ«

HTTP

HTTPS

SPDY
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸