[B! http][security] yuyamaguã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yuyamagu id:yuyamagu

httpã¨securityã«é–¢ã™ã‚‹yuyamaguã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Node.jsã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ | POSTD
(è¨³æ³¨ï¼š2016/1/5ã€ã„ãŸã ã„ãŸç¿»è¨³ãƒ•ã‚£ãƒ¼ãƒ‰ãƒãƒƒã‚¯ã‚’å…ƒã«è¨˜äº‹ã‚’ä¿®æ£ã„ãŸã—ã¾ã—ãŸã€‚) ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ â€“ èª°ã‚‚ãŒè¦‹ã¦è¦‹ã¬ãµã‚Šã‚’ã™ã‚‹å•é¡Œ ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒé‡è¦ã ã¨ã„ã†ã“ã¨ã¯ã€èª°ã‚‚ãŒèªè˜ã—ã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ãŒã€çœŸå‰£ã«ã¨ã‚‰ãˆã¦ã„ã‚‹äººã¯å°‘æ•°ã ã¨æ€ã„ã¾ã™ã€‚æˆ‘ã€…ã€RisingStackã¯ã€çš†ã•ã‚“ã«æ£ã—ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’è¡Œã£ã¦ã„ãŸã ããŸã„ã¨è€ƒãˆã€ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆã‚’ç”¨æ„ã—ã¾ã—ãŸã€‚çš†ã•ã‚“ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒä½•åƒäººã¨ã„ã†ãƒ¦ãƒ¼ã‚¶ã‚„ãŠå®¢æ§˜ã«ä½¿ç”¨ã•ã‚Œã‚‹å‰ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã‚’è¡Œã£ã¦ãã ã•ã„ã€‚ ã“ã“ã«æŒ™ã’ãŸãƒªã‚¹ãƒˆã®ã»ã¨ã‚“ã©ã¯æ¦‚ç•¥çš„ãªã‚‚ã®ã§ã€Node.jsã«é™ã‚‰ãšã€å…¨ã¦ã®è¨€èªžã‚„ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã«é©ç”¨ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãŸã ã—ã€ã„ãã¤ã®ãƒ„ãƒ¼ãƒ«ã¯ã€Node.jså›ºæœ‰ã®ã‚‚ã®ã¨ãªã‚Šã¾ã™ã®ã§ã€ã”äº†æ‰¿ãã ã•ã„ã€‚ Node.jsã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã«é–¢ã™ã‚‹ãƒ–ãƒã‚°è¨˜äº‹ã‚‚æŠ•ç¨¿ã—ã¦ã‚ã‚Šã¾ã™ã®ã§ã€ã“ã¡ã‚‰ã‚‚æ˜¯éžèªã‚“ã§ã¿ã¦ãã ã•ã„ã€‚ æ§‹æˆç®¡ç† HT
yuyamagu 2015/11/18
node

node.js

ãƒã‚§ãƒƒã‚¯ãƒªã‚¹ãƒˆ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

http

security

JavaScript

webé–‹ç™º
ãƒªãƒ³ã‚¯
GPUã‚’ç”¨ã„ãŸSSLãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã®å®Ÿè£…ã«ã¤ã„ã¦ - ã‚†ã†ã†ããƒ–ãƒã‚°
è¿‘å¹´ï¼Œæ±Žç”¨è¨ˆç®—ã®é«˜é€ŸåŒ–ã®ãŸã‚ã®ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ã¨ã—ã¦æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹GPUã‚’ï¼Œãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å‡¦ç†ã«é©ç”¨ã™ã‚‹ä¸€ç’°ã¨ã—ã¦ï¼Œã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã®SSLå‡¦ç†ã«æ³¨ç›®ã—ãŸè«–æ–‡ã‚’èªã‚“ã ã®ã§ï¼Œå†…å®¹ã‚’è»½ãç´¹ä»‹ã—ã¾ã™ï¼Ž SSLShader - GPU-accelerated SSL Proxy SSLShader SSLShader: Cheap SSL acceleration with commodity processors Proceedings of the 8th USENIX conference on Networked systems design and implementation 2011 ãªãŠï¼Œè©•ä¾¡ã«ä½¿ã‚ã‚ŒãŸå®Ÿè£…ã®ä¸€éƒ¨ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ï¼Ž http://shader.kaist.edu/sslshader/libgpu crypto/ ç´¹ä»‹ èƒŒæ™¯ SSL(Secure Socket
yuyamagu 2013/04/18
ssl

security

http

spdy

gpu

CPU

ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯
ãƒªãƒ³ã‚¯
1åˆ†ã§ã‚ã‹ã‚‹ã€ŒX-ãƒŠãƒ³ãƒˆã‚«ã€HTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ - è‘‰ã£ã±æ—¥è¨˜
æœ€è¿‘ã®ãƒ¢ãƒ€ãƒ³ãªWebãƒ–ãƒ©ã‚¦ã‚¶ãŒã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢é€£ã—ãã†ãª X- ãªHTTPãƒ¬ã‚¹ãƒãƒ³ã‚¹ãƒ˜ãƒƒãƒ€ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ãã‚Œä»¥å¤–ã«ã‚‚ã‚ã£ãŸã‚‰æ•™ãˆã¦ãã ã•ã„ã€‚ X-XSS-Protection 0:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’ç„¡åŠ¹ã«ã™ã‚‹ã€‚ 1:XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã€‚ XSSãƒ•ã‚£ãƒ«ã‚¿ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã“ã¨ã§ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãŒXSSã®è¢«å®³ã«ã‚ã†å¯èƒ½æ€§ãŒä½Žæ¸›ã™ã‚‹ãŒã€ã¾ã‚Œã«èª¤æ¤œçŸ¥ã™ã‚‹ã“ã¨ã§ç”»é¢ã®è¡¨ç¤ºãŒä¹±ã‚Œã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã€‚IE8+ã€Safariã€Chrome(å¤šåˆ†) ã§æœ‰åŠ¹ã€‚IEã§ã¯ã€ŒX-XSS-Protection: 1; mode=blockã€ã¨ã„ã†æŒ‡å®šã‚‚å¯èƒ½ã€‚ 2008/7/2 - IE8 Security Part IV: The XSS FilterBug 27312 â€“ [XSSAuditor] Add support for header X-XSS-Protection X-Content-Ty
yuyamagu 2011/01/07
xss

IE

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

web

browser

header

http
ãƒªãƒ³ã‚¯
2008-08-06 - T.Teradaã®æ—¥è¨˜ - HTTPç”¨ã®ãƒšãƒ¼ã‚¸ã«HTTPSã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹
åŒä¸€ãƒ›ã‚¹ãƒˆä¸Šã«HTTPã¨HTTPSã®ãƒšãƒ¼ã‚¸ãŒåŒå±…ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã‚’ã—ã°ã—ã°ã¿ã¾ã™ã€‚ ãã‚“ãªã‚µã‚¤ãƒˆã§ã¯ã€æœ¬æ¥ã¯HTTPã®ãƒšãƒ¼ã‚¸ã«ã€HTTPSã§ã‚‚ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ãã†ã„ã†å ´åˆã€HTMLã®ä¸èº«ã«ã‚ˆã£ã¦ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡ŒãŒå‡ºã¾ã™ã‚ˆã¨ã„ã†è©±ã§ã™ã€‚ å•é¡ŒãŒã‚ã‚‹ãƒšãƒ¼ã‚¸ http://www.example.jp/index.html ã¨ã„ã†URLã®ãƒšãƒ¼ã‚¸ãŒã‚ã‚‹ã¨ã—ã¾ã™ã€‚ å•é¡Œã¨ãªã‚‹ã®ã¯ã€ãã®ãƒšãƒ¼ã‚¸ã®ä¸èº«ã«ä»¥ä¸‹ã®ã‚ˆã†ãªHTMLãŒãƒ™ã‚¿æ›¸ãã•ã‚Œã¦ã„ã‚‹å ´åˆã§ã™ã€‚ <script src="http://www2.example.jp/foo.js"></script> ã“ã®ãƒšãƒ¼ã‚¸ï¼ˆindex.htmlï¼‰ã¯HTTPã§ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’æƒ³å®šã—ã¦ä½œã‚‰ã‚Œã¦ã„ã‚‹ãŸã‚ã€JSãƒ•ã‚¡ã‚¤ãƒ«ã‚’HTTPã§èªã¿è¾¼ã‚“ã§ã„ã¾ã™ã€‚ ã“ã“ã§ã€ã“ã®ãƒšãƒ¼ã‚¸ãŒå®Ÿã¯HTTPSã§ã‚‚ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ã ã¨ã—ã¾ã™ã€‚ã‚‚ã—HTTPSã§ã‚¢ã‚¯ã‚»ã‚¹
yuyamagu 2008/09/10
http

https

security

web

ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
1