[B! ssl] taninswã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

taninsw id:taninsw

sslã«é–¢ã™ã‚‹taninswã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (28)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

https://jp.techcrunch.com/2014/11/19/20141118mozilla-eff-and-others-band-together-to-provide-free-ssl-certificates/
taninsw 2014/11/19
https

ssl
ãƒªãƒ³ã‚¯
ä¸»è¦ãƒ–ãƒ©ã‚¦ã‚¶ã«ãŠã‘ã‚‹ SSL 3.0 ç„¡åŠ¹åŒ–ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã®ã¾ã¨ã‚
SSL 3.0 ã®è„†å¼±æ€§ ï¼ˆPOODLEï¼‰ ã®ä»¶ã§ã€10æœˆã«ä¸‹è¨˜ã®è¨˜äº‹ã‚’æ›¸ã„ãŸã‚“ã§ã™ãŒã€ãã®ä¸ã§ã‚‚è§¦ã‚ŒãŸã€å„ä¸»è¦ãƒ–ãƒ©ã‚¦ã‚¶ã«ãŠã‘ã‚‹ SSL 3.0 ç„¡åŠ¹åŒ–ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã ã‘ã€ã‚ã‹ã‚Šã‚„ã™ã„ã‚ˆã†ã«æŠœãå‡ºã—ã¦ã“ã¡ã‚‰ã«ã¾ã¨ã‚ã¦ãŠã“ã†ã¨æ€ã„ã¾ã™ã€‚ãƒ¡ãƒ¢ä»£ã‚ã‚Šã€‚ SSL 3.0 ã®è„†å¼±æ€§ ï¼ˆPOODLEï¼‰ å¯¾ç–ã§ Web ã‚µãƒ¼ãƒã® SSL 3.0 ã‚’ç„¡åŠ¹ã«ã—ãŸä»¶ã¨ãƒ–ãƒ©ã‚¦ã‚¶å´ã®å¯¾å‡¦ã¾ã¨ã‚ Internet Explorer SSL 3.0 ãŒç„¡åŠ¹ã«ãªã‚‹æ™‚æœŸï¼š æ£å¼ãªæ™‚æœŸã¯ä¸æ˜Žã ãŒã€æ•°ãƒ¶æœˆä»¥å†… ç±³å›½æ™‚é–“ã® 2015å¹´ 4æœˆ 14æ—¥ä»¥é™ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ç„¡åŠ¹ã«ã€‚ ã€Œãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒª 3009008ã€ å†…ã§ã¯ã€ä¸‹è¨˜ã®é€šã‚Šã€ï¼ˆ10æœˆ 15æ—¥ã‹ã‚‰èµ·ç®—ã—ã¦ï¼‰ æ•°ãƒ¶æœˆä»¥å†…ã« IE ã®æ—¢å˜è¨å®š ï¼ˆãŠã‚ˆã³åŒç¤¾ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚µãƒ¼ãƒ“ã‚¹ï¼‰ ã§ SSL 3.0 ãŒç„¡åŠ¹ã«ãªã‚‹æ—¨ãŒã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã¦ã„ã¾ã™ã€‚ ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆ
taninsw 2014/11/13
SSL
ãƒªãƒ³ã‚¯
Automated configuration analysis for Mozilla's TLS guidelines - Quelques digressions sous GPL
Automated configuration analysis for Mozilla's TLS guidelines Last week, we updated Mozilla's Server Side TLS guidelines to add a third recommended configurations. Each configuration maps to a target compatibility level: Old supports Windows XP pre-SP2 with IE6 and IE7. Those clients do not support AES ciphers, and for them we need to maintain a configuration that accepts 3DES, SSLv3 and SHA-1 cer
taninsw 2014/10/14
security

tls

ssl
ãƒªãƒ³ã‚¯
Security/Server Side TLS - MozillaWiki
The ordering of cipher suites in the Old configuration is very important, as it determines the priority with which algorithms are selected. OpenSSL will ignore cipher suites it doesn't understand, so always use the full set of cipher suites below, in their recommended order. The use of the Old configuration with modern versions of OpenSSL may require custom builds with support for deprecated ciphe
taninsw 2014/10/14
security

tls

ssl
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : Chromeã®SHA1è¨¼æ˜Žæ›¸ã®ã‚¢ãƒ©ãƒ¼ãƒˆè¡¨ç¤ºãƒãƒªã‚·ã®å•é¡Œç‚¹ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
è¡¨ã‚’è¦‹ã¦ã„ãŸã ã‘ã‚Œã°ã‚ã‹ã‚‹é€šã‚Šã€Microsoft Windowsã®SHA1ç§»è¡Œãƒãƒªã‚·ã«æ¯”ã¹ã¦ã€Chromeã¯ã‹ãªã‚Šã‚¢ã‚°ãƒ¬ãƒƒã‚·ãƒ–ãªè¨å®šã«ãªã£ã¦ãŠã‚Šã€é–‹ç™ºç‰ˆã¯2014å¹´9æœˆ26æ—¥ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‹ã‚‰ã€å®‰å®šç‰ˆã¯2014å¹´11æœˆé ƒãƒªãƒªãƒ¼ã‚¹ã®39ã‹ã‚‰æ£å¸¸ãªHTTPSæŽ¥ç¶šã§ãªã„ã‹ã®ã‚ˆã†ãªã‚¹ãƒ†ãƒ¼ã‚¿ã‚¹è¡¨ç¤ºã¨ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚ ä»Šå›žã®Chromeã®SHA1å¯¾å¿œãƒãƒªã‚·ã®å•é¡Œç‚¹ ä»Šå›žã®Google Chromeã®SHA1è¨¼æ˜Žæ›¸ã«å¯¾ã™ã‚‹å¯¾å¿œè¨ˆç”»ã¯æ§˜ã€…ãªå•é¡ŒãŒã‚ã‚‹ã¨è€ƒãˆã¦ã„ã¦ã€è«–ç‚¹ã‚’æ•´ç†ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ æœ€ã‚‚é‡è¦ã ã¨æ€ã†ã®ãŒã€ãƒ–ãƒ©ã‚¦ã‚¶æ¯Žã«HTTPSã®ã‚¨ãƒ©ãƒ¼ã‚„å•é¡Œã«å¯¾ã™ã‚‹è¡¨ç¤ºã®æ„å‘³ãŒç•°ãªã£ã¦ã—ã¾ã†ã¨ã„ã†ç‚¹ã§ã™ã€‚ä»Šå›žã®SHA1è¨¼æ˜Žæ›¸ã®è¡¨ç¤ºã®è¨ˆç”»ãŒãƒ–ãƒ©ã‚¦ã‚¶ãƒ™ãƒ³ãƒ€ãƒ¼æ¯Žã«ç•°ãªã‚‹ã®ã¯ãƒ¦ãƒ¼ã‚¶ãŒæ··ä¹±ã™ã‚‹ã“ã¨ã«ãªã‚Šã€è‰¯ããªã‹ã£ãŸã¨æ€ã„ã¾ã™ã€‚æœ¬æ¥ãªã‚‰CA Browser Forumã®Baseline Profileãªã©ã§ã€æ¥ç•Œã§æ„æ€
taninsw 2014/09/22
security

chrome

ssl
ãƒªãƒ³ã‚¯
Webãƒ–ãƒ©ã‚¦ã‚¶ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦å‘Šã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®åå¿œã¯ï¼Ÿ
ç±³Googleãªã©ã®ç ”ç©¶è€…ãŒã€ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚„ä¸æ£ãªSSLè¨¼æ˜Žæ›¸ãªã©ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦å‘Šã«å¯¾ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®åå¿œã‚’èª¿ã¹ãŸã€‚ Webãƒ–ãƒ©ã‚¦ã‚¶ãŒè¡¨ç¤ºã™ã‚‹ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚„ä¸æ£ãªSSLè¨¼æ˜Žæ›¸ã«é–¢ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦å‘Šã¯ã©ã®ç¨‹åº¦åŠ¹æžœãŒã‚ã‚‹ã®ã‹â€•â€•ã€‚ç±³ã‚«ãƒªãƒ•ã‚©ãƒ«ãƒ‹ã‚¢å¤§å¦ãƒãƒ¼ã‚¯ãƒªãƒ¼æ ¡ã¨Googleã®ç ”ç©¶è€…ãŒã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®åå¿œã®å®Ÿæ…‹ã«ã¤ã„ã¦èª¿ã¹ãŸçµæžœã‚’ç™ºè¡¨ã—ãŸã€‚ ã“ã®èª¿æŸ»ã§ã¯ã€2013å¹´5æœˆã‹ã‚‰6æœˆã«ã‹ã‘ã¦Mozilla Firefoxã¨Google Chromeã§è¡¨ç¤ºã•ã‚ŒãŸç´„2500ä¸‡ä»¶ã®è¦å‘Šã«ã¤ã„ã¦åå¿œã‚’èª¿ã¹ãŸã€‚ ãã®çµæžœã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒãƒžãƒ«ã‚¦ã‚§ã‚¢è¦å‘Šã‚„ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºè¦å‘Šã‚’ç„¡è¦–ã—ã¦ãƒªãƒ³ã‚¯ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ã¦ã—ã¾ã†å‰²åˆã¯9ï½ž23ï¼…ã«ã¨ã©ã¾ã£ãŸã€‚ä¸æ£ãªSSLè¨¼æ˜Žæ›¸ã«ã¤ã„ã¦ã®è¦å‘ŠãŒç„¡è¦–ã•ã‚Œã‚‹å‰²åˆã¯ã€Firefoxã§ã¯33ï¼…ã ã£ãŸã€‚ ã“ã®çµæžœã‹ã‚‰ç ”ç©¶ãƒãƒ¼ãƒ ã¯ã€ã€ŒWebãƒ–ãƒ©ã‚¦ã‚¶ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦å‘ŠãŒå¤§åŠã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’å®ˆã‚‹å½¹å‰²ã‚’æžœãŸã—ã¦ã„ã‚‹
taninsw 2013/07/14
ssl

security
ãƒªãƒ³ã‚¯
'CRIME' Attack Abuses SSL/TLS Data Compression Feature to Hijack HTTPS Sessions | CIO
'CRIME' Attack Abuses SSL/TLS Data Compression Feature to Hijack HTTPS Sessions SSL/TLS data compression leaks information that can be used to decrypt HTTPS session cookies, researchers say The 'CRIME' attack announced last week exploits the data compression scheme used by the TLS (Transport Layer Security) and SPDY protocols to decrypt user authentication cookies from HTTPS (HTTP Secure) traffic,
taninsw 2012/09/19
security

ssl
ãƒªãƒ³ã‚¯
Mike Belsheã€ŒSPDYã®åœ§ç¸®æ–¹å¼ã¨æ”»æ’ƒãƒ„ãƒ¼ãƒ«CRIMEã®ä»¶ã€ - ä»¥ä¸‹æ–œã‚èªã‚“ã å†…å®¹
2012.9.14 ietf-http-wgã¸ã®ãƒã‚¹ãƒˆ SPDY compression and CRIME attack from Mike Belshe on 2012-09-14 (ietf [email protected] from July to September 2012) 2011å¹´ã«SSL/TSLã®è„†å¼±æ€§ã‚’çªã„ãŸæ”»æ’ƒãƒ„ãƒ¼ãƒ«ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ãŸJuliano Rizzoã¨Thai Duongã®ã‚³ãƒ³ãƒ“ ã‚»ãƒƒã‚·ãƒ§ãƒ³ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ãƒ„ãƒ¼ãƒ«BEAST TLS1.0/SSL3.0ã§æŽ¡ç”¨ã•ã‚Œã¦ã‚‹AESã‚’ä½¿ã£ãŸcipher suiteã®è„†å¼±æ€§ã‚’çªã BEASTãƒªãƒªãƒ¼ã‚¹ã®åéŸ¿ã€‚TLS1.2ã¸ã®ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã€‚cipher suiteã¯RC4ã¸ç§»è¡Œã€ãªã©ãªã© Rizzoã¨Duongã®ã‚³ãƒ³ãƒ“ãŒæ–°ä½œãƒ„ãƒ¼ãƒ«CRIMEã‚’ãƒªãƒªãƒ¼ã‚¹ Buenos Airesé–‹å‚¬äºˆå®šã®Ekoparty security confere
taninsw 2012/09/19
spdy

ssl

security
ãƒªãƒ³ã‚¯
è¨¼æ˜Žæ›¸å½é€ äº‹ä»¶ã®åŽŸå› ã¯SSLã®ä»•çµ„ã¿ã«ã‚ã‚‹ã®ã§ã¯ãªã„â€•â€•æ—¥æœ¬ãƒ™ãƒªã‚µã‚¤ãƒ³ ï¼ ï¼ IT
2012/02/09 æ—¥æœ¬ãƒ™ãƒªã‚µã‚¤ãƒ³ã¯2æœˆ8æ—¥ã€ã€Œèªè¨¼å±€ã®å®‰å…¨æ€§ã¨SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®æš—å·å¼·åº¦ã€ã¨ã„ã†ãƒ†ãƒ¼ãƒžã§è¨˜è€…å‘ã‘èª¬æ˜Žä¼šã‚’é–‹å‚¬ã—ã€é›»åè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹èªè¨¼å±€ã‚’å–ã‚Šå·»ãæœ€è¿‘ã®å‹•å‘ã«ã¤ã„ã¦èª¬æ˜Žã—ãŸã€‚ 2011å¹´ã¯ã€é›»åè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’æ¥ã¨ã™ã‚‹Comodoã‚„DigiNotarã¨ã„ã£ãŸä¼æ¥ãŒä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’å—ã‘ã‚‹ã¨ã„ã†äº‹ä»¶ãŒç™ºç”Ÿã—ãŸã€‚èªè¨¼å±€ï¼ˆCAï¼‰ã¯ã€è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’å—ã‘ã‚‹ä¼æ¥ã®èº«å…ƒã‚’å¯©æŸ»ã™ã‚‹ç™»éŒ²å±€ï¼ˆRAï¼‰ã¨ã€å®Ÿéš›ã®ç™ºè¡Œæ¥å‹™ã‚’è¡Œã†ç™ºè¡Œå±€ï¼ˆIAï¼‰ã‹ã‚‰æ§‹æˆã•ã‚Œã‚‹ãŒã€Comodoã®å ´åˆã¯æ¥å‹™ã‚’å§”è¨—ã—ã¦ã„ãŸRAãŒã€DigiNotarã®ã‚±ãƒ¼ã‚¹ã§ã¯IAãŒãã‚Œãžã‚Œä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã‚’è¨±ã—ã€å½é€ è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã•ã‚Œã‚‹ã¨ã„ã†äº‹æ…‹ã«é™¥ã£ãŸã€‚ ã“ã®çµæžœã€ã€Œé›»åè¨¼æ˜Žæ›¸ã€ã‚„ã€ŒSSLã€ã¨ã„ã†ä»•çµ„ã¿ã«å¯¾ã™ã‚‹ä¸å¯©æ„Ÿã‚’æŠ±ã„ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚‚ã‚ã£ãŸã€‚ã—ã‹ã—ã€æ—¥æœ¬ãƒ™ãƒªã‚µã‚¤ãƒ³ SSLè£½å“æœ¬éƒ¨ ãƒ—ãƒãƒ€ã‚¯ãƒˆãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°ãƒãƒ¼ãƒ ã‚¢ã‚·ã‚¹ã‚¿ãƒ³ãƒˆãƒžãƒãƒ¼ã‚¸ãƒ£ã®ä¸Šæ‰è¬™
taninsw 2012/02/22
SSL

security
ãƒªãƒ³ã‚¯
SSLè¨¼æ˜Žæ›¸ã¯å®‰å…¨ãªã®ã‹ï¼Ÿï½žComodo/DigiNotaräº‹ä»¶ã‚’æŒ¯ã‚Šè¿”ã£ã¦ã€€ãƒ™ãƒªã‚µã‚¤ãƒ³ãŒæœ€æ–°å‹•å‘ãªã©è§£èª¬
taninsw 2012/02/19
security

SSL
ãƒªãƒ³ã‚¯
SSLè¨¼æ˜Žæ›¸ä¸æ£ç™ºè¡Œã®DigiNotarãŒç ´ç”£ - ã†ã•ãŽæ–‡å¦æ—¥è¨˜
"google.com"ãªã©ã®500ä»¥ä¸Šã®SSLè¨¼æ˜Žæ›¸ã‚’ä¸æ£ç™ºè¡Œã•ã‚ŒãŸã¨ã„ã†äº‹ä»¶ã‚’èµ·ã“ã—ãŸã‚ªãƒ©ãƒ³ãƒ€ã®èªè¨¼å±€DigiNotarãŒã€9æœˆ19æ—¥ã«è‡ªå·±ç ´ç”£ã‚’ç”³è«‹ã—ã¦ã€è£åˆ¤æ‰€ã«ã‚ˆã£ã¦ç ´ç”£å®£å‘Šã•ã‚ŒãŸã¨ã€è¦ªä¼šç¤¾ã®VASCO Data Security International, Incã‹ã‚‰ç™ºè¡¨ãŒã‚ã‚Šã¾ã—ãŸã€‚ èªè¨¼å±€ã¨ã—ã¦ã®ä¿¡é ¼ã‚’å¤±ã„ã€å„ç¨®ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰DgiNotarã®èªè¨¼å±€ã”ã¨å‰Šé™¤ã•ã‚ŒãŸã®ã§ã€å¾©æ´»ã™ã‚‹ã®ã¯é›£ã—ã‹ã£ãŸã®ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãã€‚ news_VASCO Announces Bankruptcy Filing by DigiNotar B.V. ä¼šç¤¾ãŒãªããªã£ãŸã¨ã—ã¦ã‚‚ã€ç™ºè¡Œã•ã‚ŒãŸä¸æ£ãªè¨¼æ˜Žæ›¸ã®å½±éŸ¿ã¯å½“åˆ†æ®‹ã‚Šãã†ã§ã™ãã€‚PCã®ãƒ–ãƒ©ã‚¦ã‚¶ã¯ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§å¯¾å¿œã—ã¦ã„ã¾ã™ãŒã€æºå¸¯ã‚„Androidç«¯æœ«ãªã©ã¯æ›´æ–°ã•ã‚Œãªã„ã‚‚ã®ã‚‚å¤šãã†ã§ã™ã€‚ ãã—ã¦åŒã˜ã‚ˆã†ãªäº‹ä»¶ãŒã‚ã£ãŸComodoã¯å¤§ä¸ˆå¤«ã‹ãªï¼ŸGlobalSi
taninsw 2011/09/23
security

ssl
ãƒªãƒ³ã‚¯
http://japan.internet.com/webtech/20110810/1.html
taninsw 2011/09/01
ssl
ãƒªãƒ³ã‚¯
å¢—åŠ ã™ã‚‹ã‚¿ãƒ¼ã‚²ãƒƒãƒˆåž‹æ”»æ’ƒ
ä»Šå›žã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£ãƒ–ãƒã‚°ã§ç´¹ä»‹ãƒ»è§£èª¬ã•ã‚ŒãŸã€æœ€è¿‘ç›®ç«‹ã¤æ”»æ’ƒã«é–¢ã™ã‚‹è©±é¡Œã‚’ã„ãã¤ã‹ç´¹ä»‹ã™ã‚‹ã€‚ ã¾ãšãƒã‚·ã‚¢ã®ã‚«ã‚¹ãƒšãƒ«ã‚¹ã‚ãƒ¼ãƒ©ãƒœãŒã€è‡ªç¤¾ã§é‹å–¶ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£æƒ…å ±ã‚µã‚¤ãƒˆã€ŒSecurelistã€ã§å…¬é–‹ã—ãŸå†…å®¹ã«ã¤ã„ã¦ã€‚ä¸€é€£ã®ã‚¿ãƒ¼ã‚²ãƒƒãƒˆåž‹æ”»æ’ƒã«ã¤ã„ã¦è§¦ã‚Œã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ„è˜ã®å‘ä¸Šã‚’å‘¼ã³ã‹ã‘ãŸã€‚ ã‚½ãƒ‹ãƒ¼ã®ã‚²ãƒ¼ãƒ æ©Ÿã€ŒPlayStationã€å‘ã‘ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚„ç±³ã‚·ãƒ†ã‚£ãƒãƒ³ã‚¯ã®ã‚µã‚¤ãƒˆãŒä¸æ£ä¾µå…¥ã‚’å—ã‘ã¦é¡§å®¢æƒ…å ±ãŒæµå‡ºã—ã€ç±³ã‚°ãƒ¼ã‚°ãƒ«ã®Webãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã€ŒGmailã€ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒä¸æ£ã«ã‚¢ã‚¯ã‚»ã‚¹ã•ã‚Œã€ã•ã‚‰ã«ã¯ç±³ä¸Šé™¢ã€ãã—ã¦å›½éš›é€šè²¨åŸºé‡‘ï¼ˆIMFï¼‰ãŒã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã®æ¨™çš„ã«ã•ã‚ŒãŸã€‚ 10å¹´ä»¥ä¸Šå‰ã«ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’è³‘ã‚ã›ãŸã€ŒI love youã€ã€ŒNetskyã€ã€ŒBagelã€ãªã©ã®ãƒžãƒ«ã‚¦ã‚¨ã‚¢ã¯ã€ç¾åœ¨ã¨ã¯å…¨ãå‹•æ©ŸãŒç•°ãªã‚Šã€ã§ãã‚‹ã ã‘å¤šãã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«æ„ŸæŸ“ã—ã€æ‚ªåã‚’ã¨ã©ã‚ã‹ã›ã‚‹ã“ã¨ãŒç›®çš„ã ã£ãŸã€‚ è¿‘é ƒã®æ”»æ’ƒã‚’è¦‹ã‚‹ã¨ã€çŠ¯äººã¯
taninsw 2011/06/30
chrome

security

ui

ssl
ãƒªãƒ³ã‚¯
yebo blog: SSLã«DNSSECã‚’å°Žå…¥ã™ã‚‹ã“ã¨ã®æ‰¹åˆ¤
2011/04/12 SSLã«DNSSECã‚’å°Žå…¥ã™ã‚‹ã“ã¨ã®æ‰¹åˆ¤ ã‚³ãƒ¢ãƒ‰äº‹ä»¶ãªã©ã‹ã‚‰SSLã®ä¿¡é ¼ãŒæºã‚‰ã„ã§ã„ã‚‹ã€‚ãã“ã§ã€IETFã§ã¯DNSSECã‚’å°Žå…¥ã—ã¦ã€SSLè¨¼æ˜Žæ›¸ã®ä¿¡é ¼ã‚’ç¢ºèªã—ã‚ˆã†ã¨ã™ã‚‹å‹•ããŒã‚ã‚‹(DANE WG)ã€‚ãã‚“ãªä¸ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã®Moxie Marlinspikeæ°ãŒãƒ–ãƒã‚°ã«ã€ŒSSL And The Future Of Authenticityã€ã¨é¡Œã™ã‚‹ã‚¨ãƒƒã‚»ã‚¤ã§ã€ç¾åœ¨ã®CAã‚·ã‚¹ãƒ†ãƒ ã«ã¯å•é¡ŒãŒã‚ã‚‹ã“ã¨ã‚’èªã‚ã¤ã¤ã€DNSSECã‚’ä½¿ã†ã“ã¨ã‚’å¼·ãè¦å‘Šã—ã¦ã„ã‚‹[slashdot]ã€‚DNSã‚‚CAã‚‚åŒã˜ã‚ˆã†ãªéšŽå±¤çš„ãªä¿¡ç”¨ã‚·ã‚¹ãƒ†ãƒ ã‚’ä½¿ã£ã¦ã„ã‚‹ä»¥ä¸Šã€CAã‚·ã‚¹ãƒ†ãƒ ã¨ä½•ã‚‰å¤‰ã‚ã‚Šãªã„ã€‚DNSSECã®å ´åˆã¯3ã¤ã®éšŽå±¤ã‚¯ãƒ©ã‚¹ã‚’ç„¡æ¡ä»¶ã«ä¿¡ç”¨ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„ã€‚ãƒ¬ã‚¸ã‚¹ãƒˆãƒ©: GoDaddyã®ã‚ˆã†ãªãƒ¬ã‚¸ã‚¹ãƒˆãƒ©ã¯æžœãŸã—ã¦ä¿¡ç”¨ã§ãã‚‹ã‹? TLD: .comã®å ´åˆã¯CAã‚·ã‚¹ãƒ†ãƒ ã§ã‚‚ç™»å ´ã™ã‚‹VeriSignã§
taninsw 2011/04/12
DNSSEC

SSL

security
ãƒªãƒ³ã‚¯
InfoQ: HTTPSã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã®æœ€åˆã®æ•°ãƒŸãƒªç§’
ã»ã¨ã‚“ã©ã®äººãŒHTTPSã¨SSL (Secure Sockets Layer) ã‚’çµã³ã¤ã‘ã¦è€ƒãˆã¾ã™ã€‚SSLã¯1990å¹´ä»£åŠã°ã«Netscapeç¤¾ãŒé–‹ç™ºã—ãŸä»•çµ„ã¿ã§ã™ãŒã€ä»Šã§ã¯ã“ã®äº‹å®Ÿã¯ã‚ã¾ã‚Šæ£ç¢ºã§ãªã„ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚Netscapeç¤¾ãŒå¸‚å ´ã®ã‚·ã‚§ã‚¢ã‚’å¤±ã†ã«ã—ãŸãŒã£ã¦ã€SSLã®ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆæŠ€è¡“ã‚¿ã‚¹ã‚¯ãƒ•ã‚©ãƒ¼ã‚¹(IETF)ã¸ç§»ç®¡ã•ã‚Œã¾ã—ãŸã€‚Netscapeç¤¾ã‹ã‚‰ç§»ç®¡ã•ã‚Œã¦ä»¥é™ã®åˆã‚ã¦ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯Transport Layer Security (TLS)1.0ã¨åä»˜ã‘ã‚‰ã‚Œã€1999å¹´1æœˆã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚TLSãŒä½¿ã‚ã‚Œã ã—ã¦10å¹´ã‚‚çµŒã£ã¦ã„ã‚‹ã®ã§ã€ç´”ç²‹ãª"SSL"ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚’è¦‹ã‚‹ã“ã¨ã¯ã»ã¨ã‚“ã©ã‚ã‚Šã¾ã›ã‚“ã€‚ Client Hello TLSã¯ã™ã¹ã¦ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚’ç•°ãªã‚‹ã‚¿ã‚¤ãƒ—ã®"ãƒ¬ã‚³ãƒ¼ãƒ‰"ã§åŒ…ã¿ã¾ã™ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ãŒå‡ºã™å…ˆé ã®ãƒã‚¤ãƒˆå€¤ã¯16é€²æ•°è¡¨è¨˜ã§0x16 = 22ã€‚ ã“ã‚Œã¯
taninsw 2011/02/21
SSL

Security

https

http

firefox

amazon

network
ãƒªãƒ³ã‚¯
SSLã¯è‡ªé‡ã«ã‚ˆã£ã¦ã¤ã¶ã‚Œã¦ã—ã¾ã†ã®ã ã‚ã†ã‹ï¼Ÿ
Spring Bootã«ã‚ˆã‚‹APIãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰æ§‹ç¯‰å®Ÿè·µã‚¬ã‚¤ãƒ‰ ç¬¬2ç‰ˆ ä½•åƒäººã‚‚ã®é–‹ç™ºè€…ãŒã€InfoQã®ãƒŸãƒ‹ãƒ–ãƒƒã‚¯ã€ŒPractical Guide to Building an API Back End with Spring Bootã€ã‹ã‚‰ã€Spring Bootã‚’ä½¿ã£ãŸREST APIæ§‹ç¯‰ã®åŸºç¤Žã‚’å¦ã‚“ã ã€‚ã“ã®æœ¬ã§ã¯ã€å‡ºç‰ˆæ™‚ã«æ–°ã—ããƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã‚ã‚‹ Spring Boot 2 ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ã€‚ã—ã‹ã—ã€Spring Boot3ãŒæœ€è¿‘ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã€é‡è¦ãªå¤‰...
taninsw 2011/02/16
Security

SSL
ãƒªãƒ³ã‚¯
Dynatrace Blog
Modern cloud done right. Innovate faster and compete more effectively in the digital age. How executives reveal breakthrough insights into customer experiences with Dynatrace to accelerate business growth
taninsw 2011/01/30
https

ssl

performance
ãƒªãƒ³ã‚¯
ã€æ›´æ–°ãƒ»å¾©æ—§æ¸ˆã€‘12æœˆ11æ—¥ã«ç™ºç”Ÿã—ãŸä¸€éƒ¨ã‚µã‚¤ãƒˆã¸ã‚¢ã‚¯ã‚»ã‚¹ã—ã¥ã‚‰ã„çŠ¶æ³ã«ã¤ã„ã¦Â |Â SoftBank
ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã®å…¬å¼ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã§ã™ã€‚ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ãƒ»æºå¸¯é›»è©±ã®ã€ŒãŠçŸ¥ã‚‰ã›ã€ã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚
taninsw 2010/10/15
security

SSL

mobile
ãƒªãƒ³ã‚¯
é›»åè¨¼æ˜Žæ›¸ã«è¿‘ã¥ã ã€Œæš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ 2010å¹´å•é¡Œã€
æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®2010å¹´å•é¡Œã¨ã¯ã€NISTï¼ˆç±³å›½å•†å‹™çœå›½ç«‹æ¨™æº–ç ”ç©¶æ‰€ï¼‰ãŒç±³å›½æ”¿åºœã®æ¨™æº–æš—å·æŠ€è¡“ã‚’ã‚ˆã‚Šå®‰å…¨ãªã‚‚ã®ã¸ã¨ç§»è¡Œã•ã›ã¦ã„ ãæ–¹é‡ã‚’æç¤ºã—ã¦ã„ãã“ã¨ã‹ã‚‰ç”Ÿã˜ã‚‹å•é¡Œã‚’æŒ‡ã™ã€‚ã“ã®å•é¡Œã§ã‚‚ã£ã¨ã‚‚å½±éŸ¿ãŒå¤§ãã„ã®ã¯ã€é›»åè¨¼æ˜Žæ›¸ã ã€‚ SHA-1ã€1024 ãƒ“ãƒƒãƒˆéµé•·ã®RSA å…¬é–‹éµæš—å·ã¯å±ãªã„ æ—¥é€²æœˆæ©ã§æŠ€è¡“ãŒé€²æ©ã—ã¦ã„ã‚‹ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã®ä¸–ç•Œã§ã¯ã€æœ€æ–°æŠ€è¡“ãŒã„ã¡æ—©ãé™³è…åŒ–ã—ã¦ã—ã¾ã†ã“ã¨ã‚‚å¤šã„ã€‚ãã®ä»£è¡¨ãŒã€ãƒ‡ãƒ¼ã‚¿ã®ç§˜åŒ¿æ€§ã‚’ç¢ºä¿ã™ã‚‹æš—å·ã®æŠ€è¡“ã ã€‚ 1980å¹´ä»£ã€æ¦å™¨ã¨ã—ã¦æ‰±ã‚ã‚Œã¦ã„ãŸæš—å·ã¯ã€ã„ã¾ã§ã¯ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®å®‰å…¨æ€§ã‚’æ”¯ãˆã‚‹åŸºç›¤æŠ€è¡“ã¨ã—ã¦ã•ã¾ã–ã¾ãªè£½å“ã‚„ã‚µãƒ¼ãƒ“ã‚¹ã«çµ„ã¿è¾¼ã¾ã‚Œã‚‹ã¾ã§ã«ãªã£ãŸã€‚ã“ã†ã—ãŸæš—å·ã¯ã€ISOï¼ˆå›½éš›æ¨™æº–åŒ–æ©Ÿæ§‹ï¼‰ã‚„IETFï¼ˆInternet Engineering Task Forceï¼‰ãªã©ã§ã®æ¨™æº–åŒ–ã‚‚è¡Œãªã‚ã‚Œã¦ã„ã‚‹ã€‚ã—ã‹ã—ã€ç¾å®Ÿé¢ã§å¤§ããªå½±éŸ¿åŠ›ã‚’æŒã¤ã®ãŒã€ç±³å›½æ”¿åºœã®æƒ…å ±ã‚·ã‚¹ãƒ†
taninsw 2010/08/27
security

ssl
ãƒªãƒ³ã‚¯
ã€ãƒ¬ãƒãƒ¼ãƒˆã€‘Firefox4ã§HTTPSé€šä¿¡ã‚’å¼·åˆ¶ã™ã‚‹æ–¹æ³• | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
Firefox web browser - Faster, more secure & customizable Firefox 4é–‹ç™ºç‰ˆã«HTTP Strict Transport Security (HSTS)ã®æ©Ÿèƒ½ãŒå®Ÿè£…ã•ã‚ŒãŸã€‚HSTSã¯ã™ã§ã«Chromeã§ã¯å®Ÿè£…ã•ã‚Œã¦ã„ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿèƒ½ã€‚Firefox 4ã§ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®æ©Ÿèƒ½ã¨ã—ã¦å‹•ä½œã™ã‚‹ã‚ˆã†ã«ãªã‚‹è¦‹é€šã—ã€‚ ChromeãŒå®Ÿç¾ã™ã‚‹5ã¤ã®æ–°ã—ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿèƒ½ HSTSãŒå®Ÿéš›ã«ã©ã†ã„ã£ãŸã‚ˆã†ã«æ©Ÿèƒ½ã™ã‚‹ã®ã‹ãŒFirefox 4: HTTP Strict Transport Security (force HTTPS) ? Mozilla Hacksã§ã‚ã‹ã‚Šã‚„ã™ãç´¹ä»‹ã•ã‚Œã¦ã„ã‚‹ã€‚http://ã¨https://ã®åŒæ–¹ã®é€šä¿¡ã‚’æä¾›ã—ã¦ã„ã‚‹å ´åˆã€ã‚µã‚¤ãƒˆé‹ç”¨è€…ã¯ã‚ˆã‚Šå®‰å…¨ãªé€šä¿¡ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã«ã€http://ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã¯https://ã¸è»¢é€ã—
taninsw 2010/08/27
ssl

security

firefox
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸