Upgrade to Pro — share decks privately, control downloads, hide ads and more …

20190328_web_authn.pdf

26a00012c475c2380cd98cfe5e2e70ef?s=47 ozaki25
March 28, 2019

 20190328_web_authn.pdf

26a00012c475c2380cd98cfe5e2e70ef?s=128

ozaki25

March 28, 2019
Tweet

More Decks by ozaki25

Other Decks in Technology

Transcript

  1. 8FCͰύεϫʔυϨεೝূ 

  2. ໨࣍  ֓ཁ  ैདྷͷೝূ  '*%0Λ༻͍ͨೝূ  ࣄྫ 

    ·ͱΊ  
  3. ֓ཁ  

  4. ςʔϚ w ࠓճͷςʔϚ͸8FCʹ͓͚Δೝূͷ࿩Ͱ͢ w ࣮͸ࢦ໲Ͱೝূ͢Δͱ͍͏ͷ͸Ұ࿈ͷϑϩʔͷҰ෦෼ʹա͗ͳ͍ ͷͰࠓճ͸શମ૾Λ͓࿩͠·͢  

  5. ैདྷͷೝূ  

  6. 8FCΞϓϦͷೝূͱݴΘΕͨΒ ͲΜͳ͜ͱΛࢥ͍ු͔΂·͔͢ʁ  

  7.  

  8. ύεϫʔυೝূͷ՝୊ w ύεϫʔυΛ༻͍ͨೝূͷ՝୊͸ͲΜͳ͜ͱ͕͋Γ·͔͢  

  9. ύεϫʔυೝূͷ՝୊ ҆શੑͷ՝୊ w ύεϫʔυ͕͍͋ͬͯΕ͹୭Ͱ΋ೝূ Ͱ͖ͯ͠·͏ w ϑΟογϯάϦετܕ߈ܸ w ؅ཧͷ؁͍ѱҙͷ͋ΔαΠτ͔Β ࿙Ӯ

    w ύεϫʔυͷ࢖͍ճ͠ʹΑΔةݥੑ   རศੑͷ՝୊ w ֮͑Δͷ͕ΊΜͲ͍͘͞ w ه߸ඞਢʁେจࣈখจࣈඞਢʁ w ؅ཧ͕ΊΜͲ͍͘͞ w ೔Ͱมߋʁ w աڈճ෼͸/(ʁ w ೖྗ͢Δͷ͕ΊΜͲ͍͘͞ w εϚϗͩͱ
  10. ύεϫʔυೝূ͸ ҆શੑͱརศੑͷཱ͕྆೉͍͠  

  11. ύεϫʔυΛ࢖Θͳ͍ೝূ w ύεϫʔυΛ࢖Θͳ͍ೝূʹ͸ͲΜͳ΋ͷ͕͋Γ·͔͢  

  12. ύεϫʔυΛ࢖Θͳ͍ೝূ w ύεϫʔυΛ࢖Θͳ͍ೝূʹ͸ͲΜͳ΋ͷ͕͋Γ·͔͢  w ϫϯλΠϜύεϫʔυ w 4.4ೝূ w ιʔγϟϧϩάΠϯ

     
  13. ύεϫʔυΛ࢖Θͳ͍ೝূ w ύεϫʔυΛ࢖Θͳ͍ೝূʹ͸ͲΜͳ΋ͷ͕͋Γ·͔͢  w ϫϯλΠϜύεϫʔυ w 4.4ೝূ w ιʔγϟϧϩάΠϯ

      Ϣʔβ͕Կ͔Λೖྗͯ͠ૹ৴͢Δ৔߹ϑΟογϯά͸๷͛ͳ͍
  14. ೝূͷछྨ ஌ࣝ w ຊਓ͔͠஌Βͳ͍ه Ա͍ͯ͠Δ৘ใ w ύεϫʔυͷจࣈྻ   ੜମ

    w Ϣʔβࣗ਎ͷੜମ ৘ใ w ࢦ໲೒࠼੩຺إ ॴ༗ w ຊਓ͔͍࣋ͬͯ͠ͳ ͍σόΠε΍ػث w ηΩϡϦςΟΩʔ εϚϗ
  15. ೝূͷछྨ ଟஈ֊ೝূ w ෳ਺ճೝূΛ࣮ࢪ   ଟཁૉೝূ w ෳ਺ཁૉͰೝূΛ࣮ࢪ

  16. '*%0Λ༻͍ͨೝূ  

  17. '*%0ͱ͸ w ҆શੑͱརศੑΛ݉Ͷඋ͑ͨೝূํࣜ w 'BTU*%FOUJUZ0OMJOFͷུ w '*%0ΞϥΠΞϯε IUUQTpEPBMMJBODFPSH ͕ඪ४Խ w

    ެ։ݤ҉߸ํࣜ w '*%0Λ8FCͰ࢖͏ͨΊͷ࢓༷͕'*%0  
  18. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   AͫΩ BͫΩ w ͜ͷ͋ͱͷ࿩͕఻ΘΓ΍͍͢Α͏ʹ෮श

  19. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   AͫΩ BͫΩ ެ։ݤ ൿີݤ ΩʔϖΞΛ࡞Δ

  20. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   AͫΩ BͫΩ ެ։ݤ ൿີݤ ࢲ͕࣋ͬͯΔൿີ伴ͱϖΞ ͷެ։伴ΛͲ͏ͧ

  21. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   AͫΩ BͫΩ ެ։ݤ ൿີݤ ެ։伴Λ౉͢ ൿີ伴͸େ੾ʹอ؅

  22. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   XͫΩ BͫΩ ެ։ݤ ൿີݤ ࢲ͸"Ͱ͢

  23. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   BͫΩ ެ։ݤ ൿີݤ ຊ౰ʹ"͞ΜͳΒ͜ΕΛ ॺ໊ͯ͠ૹΓฦͯ͠Έͯ XͫΩ

  24. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   BͫΩ ެ։ݤ ൿີݤ ൿີ伴Ͱॺ໊ͯ͠ ૹΓฦ͢ XͫΩ

  25. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   BͫΩ ެ։ݤ ൿີݤ ެ։伴Ͱ෮߸͠ ౉ͨ͠΋ͷͱಉ͜͡ͱΛ֬ೝ XͫΩ

  26. ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ   AͫΩ BͫΩ ެ։ݤ ൿີݤ ͋ͳͨ͸"͞ΜͰ͢Ͷʂ

  27. ͜ΕΛ8FCΞϓϦͰ࣮ݱ͢Δ  

  28. '*%0ͷ࢓૊Έ ొ࿥ϑΣʔζ w ΩʔϖΞΛੜ੒͠ൿີݤΛΫϥΠΞϯτʹެ։ݤΛαʔόʹอଘ ೝূϑΣʔζ w લड़ͷϑϩʔͰೝূ  

  29. શମ૾ ొ࿥ϑΣʔζ  

  30. શମ૾ ೝূϑΣʔζ  

  31. ࡉ͔͘࿩ͯ͠΋຾͘ͳΔ͚ͩͳͷͰཁ఺͚ͩ ࿩͠·͢ ͜ΕͰ΋؆ུԽͯ͠ΔΜͰ͢ɻɻ  

  32. ొ৔ਓ෺ͷ঺հ  

  33.   ᒒ๛΄ಅํᘏ

  34.   8FCΞϓϦ͔Βͷ ϦΫΤετΛड͚ औΓॲཧ͠·͢ ӬଓԽ͕ඞཁͳ৘ ใΛอଘ͠·͢ 3%#͡Όͳ͍৔߹ ΋͋Γ·͢ ᒒ๛΄ಅํᘏ

  35.   8FCΞϓϦ͸ϒϥ΢β্Ͱಈ࡞͠·͢ ΞϓϦ͔Β୺຤ͷػೳʹΞΫηε͢Δ৔߹͸ ϒϥ΢βʹ࣮૷͞Εͨ"1*Λ࢖͍·͢ ࣮૷͞Εͯͳ͚Ε͹࢖͑ͳ͍  ᒒ๛΄ಅํᘏ ೝূػೳʹ͸ 8FC"VUIFOUJDBUJPO"1*

    ͰΞΫηεͰ͖Δ
  36.   1*/΍ੜମೝূΛ༻͍ͯࣗ෼ ͕͜ͷ୺຤ͷॴ༗ऀͰ͋Δ͜ ͱΛূ໌Ͱ͖·͢ ᒒ๛΄ಅํᘏ

  37. ొ࿥ϑΣʔζ  

  38.   ͍Ζ͍Ζ͋ͬͯ୺຤ʹൿີ伴͕ %#ʹެ։伴͕อଘ͞Εͨঢ়ଶ͕Ͱ͖͕͋Δ

  39. ೝূϑΣʔζ  

  40.   ͜͜͸·ͩ ;Εͳ͍ ͖ͬ͞ݟͨެ։伴҉߸ํࣜΛ༻͍ͨೝূͱಉ͜͡ͱΛ͍ͯ͠Δ

  41.   ͜͜͸·ͩ ;Εͳ͍ ͖ͬ͞ݟͨެ։伴҉߸ํࣜΛ༻͍ͨೝূͱಉ͜͡ͱΛ͍ͯ͠Δ εϚϗΛૢ࡞͍ͯ͠Δͷ͸ຊ౰ʹຊਓʁ ෆਖ਼ʹ୺຤ͷൿີ伴Λ࢖ΘΕ͍ͯͳ͍ʁ ൿີ伴Λ؆୯ʹ࢖Θͤͯ͸͍͚ͳ͍

  42.   ୺຤ͷೝূΛ༻͍ͯॴ༗ऀͰ͋Δ͜ͱΛূ໌Ͱ͖ͨΒൿີ伴Λ࢖͑Δ

  43.   ୺຤ͷೝূΛ༻͍ͯॴ༗ऀͰ͋Δ͜ͱΛূ໌Ͱ͖ͨΒൿີ伴Λ࢖͑Δ ୺຤ͷॴ༗ ൿີ伴ͷॴ༗ ͱੜମೝূͷ ೋཁૉೝূͰΑΓ҆શʹʂ ஫໨͞Ε͕͚ͪͩͲ ҆શΛ୲อ͢Δ্ͰͷҰ෦෼ Ͱ͔͠ͳ͔ͬͨΜͩͶ

  44.   ͜Ε͚ͩͰ͸ϑΟογϯάΛ๷͛ͳ͍ͷͰ͸ʁ

  45.   ِαΠτ ຊ෺αΠτ 䘂͚Ո ϑΟογϯάαΠτʹͻ͔͔ͬΔͱ ࠷ऴతʹ߈ܸऀ͕ϩάΠϯͰ͖ͯ͠·͏

  46.   ϑΟογϯάͷରࡦ ࣮͸ɺॺ໊͢Δ࣌ʹ ೝূΛٻΊ͖ͯͨ8FCϖʔδͷ63-Λ ຒΊࠐΜͰ͘Ε͍ͯΔʂ

  47.   ϑΟογϯάͷରࡦ ຒΊࠐ·Εͨ63-ΛνΣοΫͯ͠ ૝ఆ֎ͷ΋ͷͰ͋Ε͹ϩάΠϯͤ͞ͳ͍

  48.   ϑΟογϯά΋๷͙͜ͱ͕Ͱ͖Δʂ

  49. '*%0ͷϝϦοτ͸ଞʹ΋͋Δ   ΫϥΠΞϯτ αʔό ΫϥΠΞϯτ αʔό ύεϫʔυೝূ '*%0 ύεϫʔυ

    %# ύεϫʔυ ެ։ݤ ൿີݤ %# αʔόͰύεϫʔυΛর߹͢ΔͨΊ
 ύεϫʔυΛอ༗͢Δඞཁ͕͋Δ ެ։ݤ͸࿙Ӯͯ͠΋େৎ෉ͳͷͰ ॏཁͳ৘ใ͕࿙ΕΔ৺഑͕ͳ͍
  50. '*%0ͷ՝୊ w ϦΧόϦͷ໰୊ w ୺຤Λฆࣦͯ͠͠·ͬͨ࣌ʹͲ͏͢Δ͔ w ผͷೝূखஈΛ༻ҙ͢Δ ͕ͦ݀͜ʹͳͬͯ͠·Θͳ͍  

  51. ࣄྫ  

  52. ࣄྫ w :BIPP+BQBO   IUUQTBCPVUZBIPPDPKQQSSFMFBTFB

  53. ·ͱΊ  

  54. ·ͱΊ w 8FCΞϓϦͰ΋୺຤ͷੜମೝূΛ׆༻Ͱ͖Δ w ੜମೝূ͸'*%0ͱ͍͏҆શੑͱརศੑΛ݉Ͷඋ͑ͨ࢓༷ͷҰ෦  

  55. ࢀߟࢿྉ IUUQTCMPHBHFLUNSDPNpEPXFCBVUIOIUNM IUUQTUFDICMPHZBIPPDPKQBEWFOUDBMFOEBSXFCBVUIO IUUQTUFDICMPHZBIPPDPKQBEWFOUDBMFOEBSXFCBVUIOBUUFTUBUJPOQBDLFE IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPpEP IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPpEP IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPCJEZKUD IUUQTZPVUVCFJ.:V6,WKS IUUQTHJIZPKQEFWDPMVNOOFXZFBSXFCBVUIO IUUQTpEPBMMJBODFPSHpEP&"&&##&#&#'

    MBOHKB  
  56. ͋Γ͕ͱ͏͍͟͝·ͨ͠