http httpsの違いについて

Slide 1

Slide 1 text

http httpsͷҧ͍ʹ͍ͭͯ גࣜձࣾωοτΞγετ  ҆ୡ ྋ

Slide 2

Slide 2 text

ΞδΣϯμ • SSLͱ͸ • SSLͷྺ࢙ • SSL҉߸Խ௨৴ͷྲྀΕ/ূ໌ॻͷ࡞Γํ • OSIࢀরϞσϧʹ͓͚ΔSSLϓϩτίϧ • OSIࢀরϞσϧͱ͸ • OpenSSL֓ཁ • httpɺhttps֓ཁɺ࢓૊Έ • ·ͱΊ

Slide 3

Slide 3 text

SSLͱ͸ • SSL/https (Secure Sockets Layer) • σʔλΛ҉߸Խ • ݸਓ৘ใ΍ΫϨδοτΧʔυ৘ใͳͲΛ҉ ߸Խɹ • σʔλվ͟Μ΍ͳΓ͢·͠Λ๷͛Δ • 2017೥͔ΒશͯͷαΠτඞਢ 3

Slide 4

Slide 4 text

SSLͷྺ࢙ • SSL 1.0→࠷ॳͷόʔδϣϯɺେ͖ͳ੬ऑੑ • SSL 2.0→1994೥ൃද • SSL 3.0→1995೥ൃදɺ2014೥10݄ʹେ͖ͳ੬ऑੑ • TLS 1.0→1996೥IETFͷTLSϫʔΩϯάάϧʔϓRFC 2246ͱ ͯ͠TLS1.0Λެද • TLS 1.1→2006೥ʹRFC 4346ͱͯ͠TLS 1.1੍͕ఆ • TLS 1.2→2008೥8݄ʹRFC 5246ͱͯ͠TLS 1.2੍͕ఆ • TLS 1.3→(૲ߘʣ2014೥10݄ʹ੍ఆ 4

Slide 5

Slide 5 text

SSL҉߸Խ௨৴ͷྲྀΕ 5

Slide 6

Slide 6 text

SSLαʔόূ໌ॻͷ࡞Γํ part1 6

Slide 7

Slide 7 text

SSLαʔόূ໌ॻͷ࡞Γํ part2 7

Slide 8

Slide 8 text

OSIࢀরϞσϧʹ͓͚ΔSSLϓϩτίϧ 8

Slide 9

Slide 9 text

OSIࢀরϞσϧͱ͸ 9

Slide 10

Slide 10 text

Open SSLͱ͸ • The Open Source toolkit for SSL/TLSͷུɻ • ιϑτ΢ΣΞ • 伴ͷੜ੒ɺূ໌ॻͷൃߦͱ؅ཧ • ੬ऑੑ͕ग़ͨ৔߹ɺΞοϓσʔτ 10

Slide 11

Slide 11 text

http httpsͱ͸ • ʮhttpʯ͸ʮHyperText Transfer Protocolʯͷུ  ΢Σϒαʔόʔͱωοτܦ༝ͰςΩετ΍ը૾ɺಈըͳͲ֤ छ৘ใΛަ׵͢ΔͨΊͷ௨৴ϧʔϧ • ʮhttpsʯ͸ʮHTTP over SSL/TLSʯͷུ  ΍ΓऔΓ్͕தͰ౪ௌ͞Εͳ͍Α͏ʹσʔλΛ҉߸Խͨ͠ Γɺ௨৴૬खΛূ໌ͯ҆͠શʹ௨৴͢ΔͨΊʹ࢖ΘΕΔ

Slide 12

Slide 12 text

httpͷྺ࢙ • ςΟϜɾόʔφʔζʹϦʔ • ϩόʔτɾΧΠϦϡʔ • 1990೥຤ • ॳͷWebϒϥ΢βͱWebαʔό 12

Slide 13

Slide 13 text

http/https࢓૊Έ 13

Slide 14

Slide 14 text

https࢖༻ྫ • 伴ΞΠίϯΛԡ͢ͱೝূͷ৘ใ͕ग़Δ 14

Slide 15

Slide 15 text

2016೥4݄ • Let's Encrypt • TLSͷX.509ূ໌ॻͷൃߦΛແྉͰൃߦ  →ެ։伴ূ໌ॻͷඪ४ܗࣜ΍ূ໌ॻύεݕ ূΞϧΰϦζϜͳͲ • ߴηΩϡΞͳূ໌ॻ • 2018೥͔ΒϫΠϧυΧʔυ΋ 15

Slide 16

Slide 16 text

·ͱΊ • ϝϦοτ  →҆શੑͷڧԽ • σϝϦοτ  →අ༻͕͔͔Δ→ࠓ͸ແྉ  →௨৴ྔ͕ଟ͘ͳΔ→஗͍ 16