Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
20190328_web_authn.pdf
Search
Sponsored
·
Ship Features Fearlessly
Turn features on and off without deploys. Used by thousands of Ruby developers.
→
ozaki25
March 28, 2019
Technology
67
0
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
20190328_web_authn.pdf
ozaki25
March 28, 2019
Transcript
56 slides
8FCͰύεϫʔυϨεೝূ
࣍ ֓ཁ ैདྷͷೝূ '*%0Λ༻͍ͨೝূ ࣄྫ
·ͱΊ
֓ཁ
ςʔϚ w ࠓճͷςʔϚ8FCʹ͓͚ΔೝূͷͰ͢ w ࣮ࢦͰೝূ͢Δͱ͍͏ͷҰ࿈ͷϑϩʔͷҰ෦ʹա͗ͳ͍ ͷͰࠓճશମ૾Λ͓͠·͢
ैདྷͷೝূ
8FCΞϓϦͷೝূͱݴΘΕͨΒ ͲΜͳ͜ͱΛࢥ͍ු͔·͔͢ʁ
ύεϫʔυೝূͷ՝ w ύεϫʔυΛ༻͍ͨೝূͷ՝ͲΜͳ͜ͱ͕͋Γ·͔͢
ύεϫʔυೝূͷ՝ ҆શੑͷ՝ w ύεϫʔυ͕͍͋ͬͯΕ୭Ͱೝূ Ͱ͖ͯ͠·͏ w ϑΟογϯάϦετܕ߈ܸ w ཧͷ͍ѱҙͷ͋ΔαΠτ͔Β ࿙Ӯ
w ύεϫʔυͷ͍ճ͠ʹΑΔةݥੑ རศੑͷ՝ w ֮͑Δͷ͕ΊΜͲ͍͘͞ w ه߸ඞਢʁେจࣈখจࣈඞਢʁ w ཧ͕ΊΜͲ͍͘͞ w Ͱมߋʁ w աڈճ/(ʁ w ೖྗ͢Δͷ͕ΊΜͲ͍͘͞ w εϚϗͩͱ
ύεϫʔυೝূ ҆શੑͱརศੑͷཱ͕͍྆͠
ύεϫʔυΛΘͳ͍ೝূ w ύεϫʔυΛΘͳ͍ೝূʹͲΜͳͷ͕͋Γ·͔͢
ύεϫʔυΛΘͳ͍ೝূ w ύεϫʔυΛΘͳ͍ೝূʹͲΜͳͷ͕͋Γ·͔͢ w ϫϯλΠϜύεϫʔυ w 4.4ೝূ w ιʔγϟϧϩάΠϯ
ύεϫʔυΛΘͳ͍ೝূ w ύεϫʔυΛΘͳ͍ೝূʹͲΜͳͷ͕͋Γ·͔͢ w ϫϯλΠϜύεϫʔυ w 4.4ೝূ w ιʔγϟϧϩάΠϯ
Ϣʔβ͕Կ͔Λೖྗͯ͠ૹ৴͢Δ߹ϑΟογϯά͛ͳ͍
ೝূͷछྨ ࣝ w ຊਓ͔͠Βͳ͍ه Ա͍ͯ͠Δใ w ύεϫʔυͷจࣈྻ ੜମ
w Ϣʔβࣗͷੜମ ใ w ࢦ࠼੩຺إ ॴ༗ w ຊਓ͔͍࣋ͬͯ͠ͳ ͍σόΠεػث w ηΩϡϦςΟΩʔ εϚϗ
ೝূͷछྨ ଟஈ֊ೝূ w ෳճೝূΛ࣮ࢪ ଟཁૉೝূ w ෳཁૉͰೝূΛ࣮ࢪ
'*%0Λ༻͍ͨೝূ
'*%0ͱ w ҆શੑͱརศੑΛ݉Ͷඋ͑ͨೝূํࣜ w 'BTU*%FOUJUZ0OMJOFͷུ w '*%0ΞϥΠΞϯε IUUQTpEPBMMJBODFPSH ͕ඪ४Խ w
ެ։ݤ҉߸ํࣜ w '*%0Λ8FCͰ͏ͨΊͷ༷͕'*%0
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ AͫΩ BͫΩ w ͜ͷ͋ͱͷ͕ΘΓ͍͢Α͏ʹ෮श
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ AͫΩ BͫΩ ެ։ݤ ൿີݤ ΩʔϖΞΛ࡞Δ
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ AͫΩ BͫΩ ެ։ݤ ൿີݤ ࢲ͕࣋ͬͯΔൿີ伴ͱϖΞ ͷެ։伴ΛͲ͏ͧ
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ AͫΩ BͫΩ ެ։ݤ ൿີݤ ެ։伴Λ͢ ൿີ伴େʹอ
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ XͫΩ BͫΩ ެ։ݤ ൿີݤ ࢲ"Ͱ͢
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ BͫΩ ެ։ݤ ൿີݤ ຊʹ"͞ΜͳΒ͜ΕΛ ॺ໊ͯ͠ૹΓฦͯ͠Έͯ XͫΩ
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ BͫΩ ެ։ݤ ൿີݤ ൿີ伴Ͱॺ໊ͯ͠ ૹΓฦ͢ XͫΩ
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ BͫΩ ެ։ݤ ൿີݤ ެ։伴Ͱ෮߸͠ ͨ͠ͷͱಉ͜͡ͱΛ֬ೝ XͫΩ
ެ։ݤ҉߸ํࣜΛ༻͍ͨೝূ AͫΩ BͫΩ ެ։ݤ ൿີݤ ͋ͳͨ"͞ΜͰ͢Ͷʂ
͜ΕΛ8FCΞϓϦͰ࣮ݱ͢Δ
'*%0ͷΈ ొϑΣʔζ w ΩʔϖΞΛੜ͠ൿີݤΛΫϥΠΞϯτʹެ։ݤΛαʔόʹอଘ ೝূϑΣʔζ w લड़ͷϑϩʔͰೝূ
શମ૾ ొϑΣʔζ
શମ૾ ೝূϑΣʔζ
ࡉ͔ͯ͘͘͠ͳΔ͚ͩͳͷͰཁ͚ͩ ͠·͢ ͜ΕͰ؆ུԽͯ͠ΔΜͰ͢ɻɻ
ొਓͷհ
ᒒ๛΄ಅํᘏ
8FCΞϓϦ͔Βͷ ϦΫΤετΛड͚ औΓॲཧ͠·͢ ӬଓԽ͕ඞཁͳ ใΛอଘ͠·͢ 3%#͡Όͳ͍߹ ͋Γ·͢ ᒒ๛΄ಅํᘏ
8FCΞϓϦϒϥβ্Ͱಈ࡞͠·͢ ΞϓϦ͔ΒͷػೳʹΞΫηε͢Δ߹ ϒϥβʹ࣮͞Εͨ"1*Λ͍·͢ ࣮͞Εͯͳ͚Ε͑ͳ͍ ᒒ๛΄ಅํᘏ ೝূػೳʹ 8FC"VUIFOUJDBUJPO"1*
ͰΞΫηεͰ͖Δ
1*/ੜମೝূΛ༻͍ͯࣗ ͕͜ͷͷॴ༗ऀͰ͋Δ͜ ͱΛূ໌Ͱ͖·͢ ᒒ๛΄ಅํᘏ
ొϑΣʔζ
͍Ζ͍Ζ͋ͬͯʹൿີ伴͕ %#ʹެ։伴͕อଘ͞Εͨঢ়ଶ͕Ͱ͖͕͋Δ
ೝূϑΣʔζ
͜͜·ͩ ;Εͳ͍ ͖ͬ͞ݟͨެ։伴҉߸ํࣜΛ༻͍ͨೝূͱಉ͜͡ͱΛ͍ͯ͠Δ
͜͜·ͩ ;Εͳ͍ ͖ͬ͞ݟͨެ։伴҉߸ํࣜΛ༻͍ͨೝূͱಉ͜͡ͱΛ͍ͯ͠Δ εϚϗΛૢ࡞͍ͯ͠Δͷຊʹຊਓʁ ෆਖ਼ʹͷൿີ伴ΛΘΕ͍ͯͳ͍ʁ ൿີ伴Λ؆୯ʹΘ͍͚ͤͯͳ͍
ͷೝূΛ༻͍ͯॴ༗ऀͰ͋Δ͜ͱΛূ໌Ͱ͖ͨΒൿີ伴Λ͑Δ
ͷೝূΛ༻͍ͯॴ༗ऀͰ͋Δ͜ͱΛূ໌Ͱ͖ͨΒൿີ伴Λ͑Δ ͷॴ༗ ൿີ伴ͷॴ༗ ͱੜମೝূͷ ೋཁૉೝূͰΑΓ҆શʹʂ ͞Ε͕͚ͪͩͲ ҆શΛ୲อ͢Δ্ͰͷҰ෦ Ͱ͔͠ͳ͔ͬͨΜͩͶ
͜Ε͚ͩͰϑΟογϯάΛ͛ͳ͍ͷͰʁ
ِαΠτ ຊαΠτ 䘂͚Ո ϑΟογϯάαΠτʹͻ͔͔ͬΔͱ ࠷ऴతʹ߈ܸऀ͕ϩάΠϯͰ͖ͯ͠·͏
ϑΟογϯάͷରࡦ ࣮ɺॺ໊͢Δ࣌ʹ ೝূΛٻΊ͖ͯͨ8FCϖʔδͷ63-Λ ຒΊࠐΜͰ͘Ε͍ͯΔʂ
ϑΟογϯάͷରࡦ ຒΊࠐ·Εͨ63-ΛνΣοΫͯ͠ ఆ֎ͷͷͰ͋ΕϩάΠϯͤ͞ͳ͍
ϑΟογϯά͙͜ͱ͕Ͱ͖Δʂ
'*%0ͷϝϦοτଞʹ͋Δ ΫϥΠΞϯτ αʔό ΫϥΠΞϯτ αʔό ύεϫʔυೝূ '*%0 ύεϫʔυ
%# ύεϫʔυ ެ։ݤ ൿີݤ %# αʔόͰύεϫʔυΛর߹͢ΔͨΊ ύεϫʔυΛอ༗͢Δඞཁ͕͋Δ ެ։ݤ࿙Ӯͯ͠େৎͳͷͰ ॏཁͳใ͕࿙ΕΔ৺͕ͳ͍
'*%0ͷ՝ w ϦΧόϦͷ w Λฆࣦͯ͠͠·ͬͨ࣌ʹͲ͏͢Δ͔ w ผͷೝূखஈΛ༻ҙ͢Δ ͕ͦ݀͜ʹͳͬͯ͠·Θͳ͍
ࣄྫ
ࣄྫ w :BIPP+BQBO IUUQTBCPVUZBIPPDPKQQSSFMFBTFB
·ͱΊ
·ͱΊ w 8FCΞϓϦͰͷੜମೝূΛ׆༻Ͱ͖Δ w ੜମೝূ'*%0ͱ͍͏҆શੑͱརศੑΛ݉Ͷඋ༷͑ͨͷҰ෦
ࢀߟࢿྉ IUUQTCMPHBHFLUNSDPNpEPXFCBVUIOIUNM IUUQTUFDICMPHZBIPPDPKQBEWFOUDBMFOEBSXFCBVUIO IUUQTUFDICMPHZBIPPDPKQBEWFOUDBMFOEBSXFCBVUIOBUUFTUBUJPOQBDLFE IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPpEP IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPpEP IUUQTXXXTMJEFTIBSFOFUUFDICMPHZBIPPCJEZKUD IUUQTZPVUVCFJ.:V6,WKS IUUQTHJIZPKQEFWDPMVNOOFXZFBSXFCBVUIO IUUQTpEPBMMJBODFPSHpEP&"&&##&#&#'
MBOHKB
͋Γ͕ͱ͏͍͟͝·ͨ͠
More Decks by ozaki25
See All by ozaki25
20210526_a11y.pdf
ozaki25
0
210
20210525_react_next.pdf
ozaki25
0
170
Webフロントエンドはなぜ複雑なのか
ozaki25
1
160
utility first css
ozaki25
0
130
20201225_how_to_learn_technology.pdf
ozaki25
0
190
20201124_blitz.pdf
ozaki25
0
120
20200727_liff_app.pdf
ozaki25
1
690
20200721_web_vitals.pdf
ozaki25
0
130
20200624_web_otp_api.pdf
ozaki25
1
160
Other Decks in Technology
See All in Technology
内製アプリとClaudeスキルのセキュリティチェック、 Backlogの課題で回しています。
ayaka_egaaa
0
180
JAWS_FESTA2026_オンプレ-AWS間プロキシサーバの移行_性能_障害対応で得た実践ノウハウ_高島一晃.pdf
tkazuaki0820
1
110
契約書SaaSにAIエージェントを組み込む
sansantech
PRO
0
100
サボる子はいねぇがー!AgentCoreハーネスの脆弱性に学ぶ、エージェントの入力バリデーション
iwamot
PRO
5
330
An Introduction to Context Ontology Accelerator (teaching AI agents what your data means)
inariku
PRO
1
240
AI時代における医療情報システムのセキュリティ / Security of Healthcare IT Systems in the AI Era
henryofficial
0
160
Agent Harnessはどう作る?事例から学ぶAI Agentの設計思想
sergicalsix
0
290
業務でAWSをあまり使っていない私が、AWSへのモチベを保つ方法
smt7174
0
190
あの日、見つかっていなかったらどうなっていたか
kazzpapa3
2
170
セキュリティ専任チームなしで攻撃を先回りするSREが実践したSIEM on Amazon OpenSearch Service
cscengineer
PRO
1
860
[JAWS Festa 2026]一番いい仕事は、請求書に現れない / jawsfesta2026
sh_fk2
2
510
Gifu WordPress Meetup #200 に向けて、私たちには何ができるだろうか?/ 2026-11-07 Gifu WordPress Meetup
torounit
0
290
Featured
See All Featured
Abbi's Birthday
coloredviolet
5
11k
Leading Effective Engineering Teams in the AI Era
addyosmani
9
2.9k
How to train your dragon (web standard)
notwaldorf
96
6.9k
Into the Great Unknown - MozCon
thekraken
41
2.8k
How to Get Subject Matter Experts Bought In and Actively Contributing to SEO & PR Initiatives.
livdayseo
1
240
AI: The stuff that nobody shows you
jnunemaker
PRO
12
1.3k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
47
8.4k
Documentation Writing (for coders)
carmenintech
77
5.6k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
31
3.4k
Crafting Experiences
bethany
1
440
Prompt Engineering for Job Search
mfonobong
0
580
Deep Space Network (abreviated)
tonyrice
0
410