OpenSSLã®è„†å¼±æ€§CVE-2016-800(DROWN)ã‚„CVE-2016-0702(CacheBleed)ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog2016å¹´3月1æ—¥(ç¾åœ°æ™‚é–“)ã€OpenSSL プãƒã‚¸ã‚§ã‚¯ãƒˆã¯è„†å¼±æ€§ã®æ„›ç§°ã€ŒDROWNã€ã‚„「CacheBleedã€ã‚’å«ã‚€8件ã®è„†å¼±æ€§æƒ…å ±ã‚’å…¬é–‹ã—ã€ã“れら影響をå—ã‘ã‚‹ã‚‚ã®ã®ä¿®æ£ã‚’è¡Œã£ãŸæœ€æ–°ç‰ˆã‚’リリースã—ã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ è„†å¼±æ€§æƒ…å ±æ¦‚è¦ æ³¨æ„å–šèµ· OpenSSL ã®è¤‡æ•°ã®è„†å¼±æ€§ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ· - JPCERT/CC SSLv2 DROWN Attack - US-CERT OpenSSL Projectã®å…¬é–‹æƒ…å ± Forthcoming OpenSSL releases OpenSSL Security Advisory ï¼»1st March 2016ï¼½ OpenSSL version 1.0.1s published OpenSSL version 1.0.2g published An OpenSSL User’s Guide to DROWN 2016å¹´3月1日公
ãƒãƒƒã‚·ãƒ¥è¡çªã§TLSã‚’ç ´ã‚‹SLOTH攻撃(CVE-2015-7575)ã¨ã¯ä½•ã‹ - ã¼ã¡ã¼ã¡æ—¥è¨˜
OpenSSLã®è„†å¼±æ€§(CVE-2015-1793)ã«ã‚ˆã‚‹Altãƒã‚§ãƒ¼ãƒ³è¨¼æ˜Žæ›¸å½é€ ã®ä»•çµ„ã¿ - ã¼ã¡ã¼ã¡æ—¥è¨˜
#mailerstudy 02 メールã¨æš—å· - SSL/TLS -
Tracking the FREAK Attack
è¯éº—ãªã‚‹å› 数分解:FREAK攻撃ã®ä»•çµ„ã¿ - ã¼ã¡ã¼ã¡æ—¥è¨˜
SSL/TLS通信時ã®è„†å¼±æ€§ã€ŒFREAKã€ã€ãã®å½±éŸ¿åº¦ã¯ï¼Ÿ |
ç„¡æ–™ã§SSL使ãˆã‚‹æ™‚代ãã¦ãŸï¼CloudFlare最高ï¼ï¼ï¼ï¼ˆï¼Ÿï¼‰ - uzullaãŒãƒ–ãƒã‚°
Superfish/eDellRootãŒå±é™ºãªç†ç”± - ã‚ã‚‚ãŠãã°
改ã‚ã¦çŸ¥ã‚ã†ã€SSLサーãƒãƒ¼è¨¼æ˜Žæ›¸ã¨ã¯ï¼Ÿ | ã•ãらã®ãƒŠãƒ¬ãƒƒã‚¸
複数ã®Webサーãƒã§SSLセッションã‚ャッシュを共有ã—ã¦SSL処ç†ã‚’高速化(Apache + mod_ssl + mod_socache_memcache) - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
SSL通信時発生ã™ã‚‹è¨¼æ˜Žæ›¸ã‚¨ãƒ©ãƒ¼ã¨ãã®ä»•çµ„ã¿ã‚’ç†è§£ã™ã‚‹ - Qiita
https://jp.techcrunch.com/2014/11/19/20141118mozilla-eff-and-others-band-together-to-provide-free-ssl-certificates/
Macã®Chromeã§POODLE脆弱性対ç–（Automatorを使ã†ï¼‰ - 別館 åååååå（ãã“ã®ã“ã“ãã“）ã¯ã¦ãƒ–ãƒéƒ¨
å„フューãƒãƒ£ãƒ¼ãƒ•ã‚©ãƒ³ã®çŠ¶æ³ (#2694440) | SSL 3.0ã«æ·±åˆ»ãªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚‹ | スラド
忘れãŒã¡ãªã‚¬ãƒ©ã‚±ãƒ¼ã®SSLã«ã¤ã„㦠| æ ªå¼ä¼šç¤¾ãƒ•ã‚©ãƒ¼ãƒŸãƒƒã‚¯ã‚¹
(PDF) ウェブサーãƒã®æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®é¸ã³æ–¹
httpsã ã‹ã‚‰ã¨ã„ã†ã ã‘ã§å®‰å…¨ï¼Ÿèª¿ã¹ãŸã‚‰æ€–ããªã£ã¦ããŸSSLã®è©±!？ - Qiita
{{#tags}}- {{label}}
{{/tags}}