あたらしいHTTPの話をしよう

あたらしいHTTP/1.1、RFC7230-7239のざっくりしたまとめ

http://blog.hmm.jp/entry/new-http1.1-rfcs

Transcript

1. ৽͍͠)551ͷ࿩Λ͠Α͏ 3 Jul, 2014 @iogi
2. )551
   )ZQFSUFYU
   5SBOTGFS
   1SPUPDPM
   WFSTJPO
   
 ESBGUJFUGIUUQCJTIUUQ
3. ͡Όͳͯ͘
4. ৽͍͠)551
5. IUUQTXXXNOPUOFUCMPHSGD@JT@EFBE
6. 3'$ w 3'$
   )ZQFSUFYU
   5SBOTGFS
   1SPUPDPM
   
   )551
   w ೥݄ʹϦϦʔε͞Εͨɻ೥લ
7. *&5'
   )551CJT
   8( w )551
   ͷඪ४ԽΛߦ͍ͬͯΔϫʔΩϯάάϧʔϓ
   w ฒߦͯ͠)551
   ͷվగ΋ߦ͍ͬͯΔ
8. 3'$
   JT
   EFBE w 3'$͸PCTPMFUF
   ഇࢭ ʹϚʔΫ͞Εɺஔ͖׵ΘΔ 3'$ͷͭͷ3'$͕ެ։
9. 3'$ w 3'$
   
   .FTTBHF
   4ZOUBY
   BOE
   3PVUJOH
   
   MPXMFWFM
   NFTTBHF
   QBSTJOH
   BOE
   DPOOFDUJPO
   NBOBHFNFOU
   w 3'$
   
   4FNBOUJDT
   BOE
   $POUFOU
   
   NFUIPET
   TUBUVT
   DPEFT
   BOE
   IFBEFST
   w 3'$
   
   $POEJUJPOBM
   3FRVFTUT
   
   FH
   *G.PEJpFE4JODF
   w 3'$
   
   3BOHF
   3FRVFTUT
   
   HFUUJOH
   QBSUJBM
   DPOUFOU
   w 3'$
   
   $BDIJOH
   
   CSPXTFS
   BOE
   JOUFSNFEJBSZ
   DBDIFT
   w 3'$
   
   "VUIFOUJDBUJPO
   
   B
   GSBNFXPSL
   GPS
   )551
   BVUIFOUJDBUJPO
10. 3'$ w 3'$
    
    "VUIFOUJDBUJPO
    4DIFNF
    3FHJTUSBUJPOT
    w 3'$
    
    .FUIPE
    3FHJTUSBUJPOT
    w 3'$
    
    UIF
    
    TUBUVT
    DPEF
    w 3'$
    
    'PSXBSEFE
    )551
    FYUFOTJPO
11. Կ͕มΘͬͨͷ w ηΩϡϦςΟ্໰୊ͱͳ͍ͬͯͨ෦෼ͷमਖ਼
    w 3'$Ͱ͸ແ͍΋ͷͷσϑΝΫτελϯμʔυͱͳ͍ͬͯͨ΋ ͷΛఆٛ
    w ֤3'$
    
    ͷ෇࿥ʹ͸ɺ3'$͔Βͷมߋ఺͕ॻ ͔Ε͍ͯΔͷͰ֬ೝ
12. 3'$
    .FTTBHF
    4ZOUBY
    
    SPVUJOH ओʹSFpOFNFOU
    w )551
    ͷ)551͕େจࣈʹݶఆɺόʔδϣϯ਺ࣈ͕ͦΕͧ Εܻʹݶఆ
    ࣮૷͕ଟܻΛαϙʔτͰ͖ͯͳ͍͔Β
    w ϔομͷෆਖ਼ͳXIJUFTQBDF΍ෳ਺ߦϔομΛഇࢭ
    w CPEZͷMFOHUIͷܭࢉํ๏Λಛघέʔε΋ؚΊ໌֬Խ
    w $IVOL
    -FOHUI͸DIVODL
    IFBEFSͱUSBJMFSΛؚΊͳ͍Α͏ʹ
    w $POOFDUJPO
    DMPTFͷૹ৴࣌ͷಈ࡞Λ໌֬Խ
13. 3'$
    4FNBOUJDT
    BOE
    $POUFOU w EFGBVMU
    DIBSTFU
    *40 ͷഇࢭ
    w 3FGFSFS
    w 4BNF
    0SJHJOͰ͸ϦϑΝϥΛૹΔ΂͖
    w BCPVUCMBOL͕௥ՃɻϦϑΝϥΛམͱ͍ͯ͠ΔͷͰ͸ແ͘ɺ ໌ࣔతʹଘࡏ͠ͳ͍͜ͱΛએݴ͢Δ
    w Ұ؏ੑͷͨΊ(&5ϦΫΤετ͕CPEZΛ࣋ͭ͜ͱΛڐՄ
    w 
    
    
    
    εςʔλεͷΩϟογϡΛڐՄ
    w $POUFOU.%ϔομͷ࡟আ
14. $POUFOU.%ͷഇࢭ w 5IF
    $POUFOU.%
    IFBEFS
    pFME
    IBT
    CFFO
    SFNPWFE
    CFDBVTF
    JU
    XBT
    JODPOTJTUFOUMZ
    JNQMFNFOUFE
    XJUI
    SFTQFDU
    UP
    QBSUJBM
    SFTQPOTFT
    w 4
    1VU0CKFDU࣌ʹɺQBZMPBEͷݕূʹ࢖͏͜ͱ͕Ͱ͖Δ
    0QUJPOBM
    w IUUQEPDTBXTBNB[PODPN"NB[PO4MBUFTU"1* 3&450CKFDU165IUNM
15. 3'$
    <>
    ओʹSFpOFNFOU w 3'$
    
    $POEJUJPOBM
    3FRVFTUT
    w *G.PEJpFE4JODF౳ͷ৚݅෇͖ϦΫΤετͷఆٛ
    w 3'$
    
    3BOHF
    3FRVFTUT
    w 3BOHF
    3FRVFTUͷఆٛ
    w 3'$
    
    $BDIJOH
    w $POUFOU
    $BDIFͷఆٛ
    w 3'$
    "VUIFOUJDBUJPO
    w ΈΜͳେ޷͖#BTJD%JHFTUೝূͳͲͷτϐοΫ
16. 3'$
    
    "VUIFOUJDBUJPO
    4DIFNF
    3FHJTUSBUJPOT w ೝূͷछྨΛఆ͍ٛͯ͠Δ͚ͩ ! +----------------+------------+-------------------------------------+! | Authentication | Reference | Notes |! | Scheme Name | | |! +----------------+------------+-------------------------------------+! | Basic | [RFC2617], | |! | | Section 2 | |! | Bearer | [RFC6750] | |! | Digest | [RFC2617], | |! | | Section 3 | |! | Negotiate | [RFC4559], | This authentication scheme violates |! | | Section 3 | both HTTP semantics (being |! | | | connection-oriented) and syntax |! | | | (use of syntax incompatible with |! | | | the WWW-Authenticate and |! | | | Authorization header field syntax). |! | OAuth | [RFC5849], | |! | | Section | |! | | 3.5.1 | |! +----------------+------------+-------------------------------------+!
17. 3'$
    
    *OJUJBM
    )551
    .FUIPE
    3FHJTUSBUJPOT w ͪ͜Β͸)551ͷϝιουͷ௥Ճఆٛͱ͍͏໊͔લͷ༧໿
    w ओʹ8FC%BWͷϝιου
18. 3'$
    
    4UBUVT
    $PEF
    
    1FSNBOFOU
    3FEJSFDU
    w ৽͍͠ϦμΠϨΫτεςʔλε
    w ӬଓతͳϦμΠϨΫτ࣌ʹ1045ͷ಺༰ΛϦμΠϨΫτઌʹ ૹ৴
    ! ! ! ! w ඇରԠͷϒϥ΢β͕Ͳ͏ղऍ͢Δ͔ɺ·ͨඇରԠͷϒϥ΢β ΛαʔόଆͰ൑அͰ͖Δͷ͔ɺΉ͍ͣͱ͜Ζ Ӭଓత Ұ࣌త POST͔ΒGET΁ͷϝιουมߋΛڐՄ 301 302 POST͔ΒGET΁ͷมߋΛڐՄ͠ͳ͍ 308 307
19. Y
    SFEJSFDU
    SFTQPOTFT w 
    .PWFE
    1FSNBOFOUMZ
    ߃ٱతͳϦμΠϨΫτ
    w 
    'PVOE
    ݩʑ͸.PWFE
    5FNQPSBSJMZ͕ͩͬͨɺܝࣔ൘΍8JLJͳͲ Ͱ౤ߘޙʹϒϥ΢βΛଞͷ63-ʹసૹ͍ͨ͠ͱ͖ʹ΋͜ͷίʔυ͕ ࢖༻͞ΕΔΑ͏ʹͳͬͨͨΊɺ͸'PVOEʹͳΓɺ৽ͨʹ  ͕࡞੒͞Εͨɻ
    w 
    4FF
    0UIFS
    ଞΛࢀরͤΑɻϦΫΤετͨ͠Ϧιʔε͸͔֬ʹͦ ͷ63-ʹ͋Δ͕ɺଞͷϦιʔεΛ΋ͬͯϨεϙϯεͱ͢ΔΑ͏ͳ৔ ߹ʹ࢖༻͢Δɻ ܝࣔ൘ͷ౤ߘޙʹଞͷ63-ʹసૹ͍ͨ͠ͱ͖ʹ࢖Θ ΕΔ΂͖ίʔυͱͯ͠ಋೖ͞Εͨɻ
    w 
    5FNQPSBSZ
    3FEJSFDU
    Ұ࣌తͳϦμΠϨΫτɻͷຊདྷͷ࢖༻ ๏ΛվΊͯఆٛͨ͠΋ͷɻ
20. 3'$
    
    'PSXBSEFE
    )551
    &YUFOTJPO w 'PSXBSEFEϔομͷඪ४Խ
    w 9'PXBSEFE'PS
    9'PSXBSEFE1SPUP౳ͷϔομ͸ɺ9͕෇͍ ͍ͯΔͱ͓Γɺ3'$ඪ४ϔομͰ͸ͳ͍͕ɺσϑΝΫτελ ϯμʔυͱͳ͍ͬͯΔ
    w ݩʑ͸4RVJE͕ಋೖͨ͠
    8JLJQFEJB
    w ඇඪ४Ώ͑ʹɺରԠঢ়گ͕·ͪ·ͪɺ'PSʹෳ਺ྻڍ͞Εͯ ͍Δͱࣦഊ͢ΔɺηΩϡϦςΟ্ͷݒ೦ͳͲ͍Ζ͍Ζ͋ͬͨ
21. 'PSXBSEFEϔομ w lCZ
    ͸ϦΫΤετΛड͚ͨϓϩΩγͷ$VTUPNFS
    'BDJOHଆͷ ࣝผࢠ
    w GPS
    ͸ϦΫΤετݩ
    9''ͱಉ͡
    w lIPTUz
    ͸ϓϩΩγ͕ड͚ͨ)PTUϔομ
    w lQSPUP
    ͸ϓϩΩγ͕ड͚ͨϓϩτίϧ
    ! ! ! Forwarded: for="_gazonk"! Forwarded: For="[2001:db8:cafe::17]:4711"! Forwarded: for=192.0.2.60;proto=http;by=203.0.113.43! Forwarded: for=192.0.2.43, for=198.51.100.17
22. BEEJUJPOBM
    JEFOUJpFST w zVOLOPXOz
    ࣝผࢠ
    w ୭͔Β͔͸஌Βͳ͍͚Ͳసૹͨ͠ͱ͍͏͜ͱΛ໌͍ࣔͨ͠ ͱ͖ʹ*1ɺϗετ໊ͷ୅ΘΓʹ࢖͏
    w 0CGVTDBUFE
    *EFOUJpFS
    ΅͔ͨࣝ͠ผࢠ
    w ಺෦*1ΞυϨεΛൿີʹ͍͚ͨ͠Ͳɺσόοά༻్ʹ 'PSXBSEFEϔομΛग़ྗ͍ͨ͠ͱ͖ʹ
    @
    VOEFSTDPSF
    ͔Β ࢝·ΔJEFOUJpFSΛ࢖͑Δ
 
 Forwarded: for=_hidden, for=_SEVKISEK
23. 9'PSXBSEFE͔ΒͷҠߦ w "QBDIF౳αʔόଆ͕ରԠ͞ΕͨΒฒߦͯ͠1SPYZଆͰ΋ରԠ ͞Ε͍ͯ͘ͷͰ͸
    w 9'PXBSEFEͷϔομͱڞଘͰ͖ΔͷͰɺ྆ํग़ྗͯ͠͠ ·͏ͷ΋͋Γ
    w બ୒Ͱ͖ΔΑ͏ʹ͢Δ
24. ·ͱΊ w ࠓ·Ͱࣄ࣮ඪ४ͱͳ͍ͬͯͨ΋ͷ͕ɺඪ४Խ͞ΕΔ
    w ͚Ͳɺόʔδϣϯ͸ಉ͡)551
    ۠ผͰ͖ͳ͍
    w ΫϥΠΞϯτଆɺαʔόଆͰରԠ༗ແ΍ɺϑΥʔϧόοΫ౳ ͰҰ෦ࠞཚ͢Δ͜ͱ͕͋Δ͔΋͠Εͳ͍
    w ਖ਼͍͠ಓΛఆ͍ٛͯ͠Δͷ͸Α͍