SSL/TLS�Ƃ�

SSL/TLS

�@��@SSL�Ƃ�

�@SSL�iSecure Sockets Layer�j�́A�C��^�[�l�b�g��f�[�^��Í��đ��M�ł��v��g�R��ł��B
�@�Ⴆ�΃N��C�A��gPC�ƃT�[�o�Ԃ�HTTP��FTP�Ȃǂ̒ʐM�ɂ��āA�N��W�b�g�J�[�h��̋@��̍��
�@�f�[�^��ASSL�ɂ��Í��Ĉ��S�ɂ��Ƃ�ł��܂��B�Ȃ��ASSL�ł̈Í��͌��J��Í��A�閧��Í��A
�@�f�W�^��A�f�W�^��ؖ��̋Z�p��g�ݍ��킹��܂��BSSL��f�[�^��Ȃ肷�܂��h��܂��B

�@��@TLS�Ƃ�

�@TLS�iTransport Layer Security�j�́ASSL�̌�p�v��g�R��ł��ASSL��ƂɕW��Ă��܂��B
�@��݂ł�TLS��g�p��Ă��܂��ASSL�̖��̂��L��g�p��Ă��Ƃ��ATLS�̂��Ƃ�SSL��
�@�Ă񂾂�ATLS�̂��Ƃ�SSL/TLS�ƕ\�L��ꍇ��܂��B

�@��@SSL/TLS�o�[�W��

�@��݂̍ŐV�o�[�W��TLS1.3�ł��BSSL��TLS�̃o�[�W��A��[�X�N�A�Ǝ㐫�͈ȉ��̒ʂ�ł��B

SSL/TLS�o�[�W�� [�X�N �Ǝ㐫�̖��A��A�񐄏�

SSL 1.0 -
�@��[�X�O�ɐƎ㐫��ꂽ��ߌ��J��Ȃ��B

SSL 2.0 1994�N
�@��̐Ǝ㐫��ꂽ��߁AWeb�u��E�U�Ńf�t�H��g�Ŗ��ꂽ�B

SSL 3.0 1995�N
�@2014�N�ɏd��ȐƎ㐫�ł��POODLE��ꂽ��߁A�񐄏��o�[�W��ƂȂ�B

TLS 1.0 1999�N �@2021�N3��ARFC8996�ɂ��TLS 1.0��g�p��Ȃ��Ƃ��Ăт��B

TLS 1.1 2006�N �@2021�N3��ARFC8996�ɂ��TLS 1.1��g�p��Ȃ��Ƃ��Ăт��B

TLS 1.2 2008�N �@��B�n�b�V��A��S��Y��SHA-256�ǉ��BGCM�ACCM��cipher suite��p�B

TLS 1.3 2018�N �@�ł��Bforward secrecy�ł͂Ȃ��E�F�ؕt��Í��ł͂Ȃ� cipher suite �̔p�~�B

�@��@SSL/TLS�̓��삷�郌�C��

�@SSL�̓Z�b�V��w�ƃg��X�|�[�g�w�̋��E�œ��삵�܂��B�Ȃ��AIPsec�̓l�b�g��[�N�w�œ��삵�܂��B

�@�@�@�@�@�@�@

�@��@SSL/TLS�̎��

�@Web�u��E�U�ɂ��ʏ�̃C��^�[�l�b�g�ʐM�ihttp�F//�`�j�ł͈Í��ꂸ�Ƀf�[�^��M��܂��B
�@�Í��Ȃ��Ƃ��Ƃ͑��M��f�[�^��O�҂ɖT�󂳂��\��܂��A�Ⴆ�Έȉ��
�@�uYahoo!�V�C��v��Web�y�[�W��{��Ă��鑗��M�f�[�^��O�҂ɖT�󂳂�Ă��S��肠��܂��B

�@�@�@�@�@�@�@�@�@�@�@�@

�@��A�N��W�b�g�J�[�h�ԍ��p�X��[�h�ȂǑ�O�҂ɖT�󂳂�Ă͂��Ȃ��f�[�^��Ƃ肷��ꍇ��
�@�Z�L��A�ȃC��^�[�l�b�g�ʐM�ihttps�F//�`�j��s��K�v��܂��B��https�Ƃ�HTTP over SSL/TLS
�@�̂��Ƃł��B�Ⴆ�Έȉ�URL�̊y�V�،��Web�y�[�W�ł́A��M��Ȃ��悤�Ƀg�b�v�y�[�W�⃍�O�C��
�@�̃y�[�W�S�Ă� https://�` �ƂȂ��Ă��AWeb�T�[�o�Ƃ̊ԂŃZ�L��A�ȒʐM��Ă��邱�Ƃ��܂��B

�@�@�@�@�@�@�@�@�@�@�@�@

�@��@�Ⴆ�΁AIEEE802.1X��EAP-TLS�ł́uLAN�ɂ��Ă�TLS��v��Ă��邱�Ƃ��܂��ˁB

�@��@SSL��TLS�̌݊��

�@SSL�iSecure Socket Layer�j�́A�C��^�[�l�b�g��Ńf�[�^��Í��M��邱�Ƃ��ł��v��g�R��B
�@SSL��Netscape Communications��J��܂��ASSL3.0��ɂ��TLS1.0��RFC�ɒ�߂��Ă��܂��B
�@SSL��TLS�͑�g�̎d�g�݂͓��ƌ��܂��݊��܂��B��A��݂̎嗬��Web�u��E�U�ł�
�@SSL��TLS�̗��ɑΉ��Ă��藼��L��ɂȂ��Ă��܂��B

�@�@�@�@�@�@�@�@

�@��݂�Web�u��E�U�ł́ASSL�̌�p�ł��TLS��g�p��悤�ɓ��삵�܂��A�T�[�o��SSL3.0�ɂ��
�@�Ή��Ă��Ȃ��ꍇ��SSL3.0�ŒʐM��邽�߁A��̐ݒ�̂悤�ɗ��Ƀ`�F�b�N��ėL��ɂ��Ă��܂��B

�@��@SSL3.0�̐Ǝ㐫�� - 2014�N10��

�@Google�̌��҂�SSL3.0�ɐ[��ȐƎ㐫�𔭌��܂��BSSL3.0�̌��ׂ�˂��U��@��uPOODLE�v��
�@��t��Ă��܂��BPOODLE�ł́A�Í��ʐM��SSL3.0�ւƋ��I�Ƀt�H�[��o�b�N��āASSL3.0�̌��
�@��˂��āACookie��𓐂ݏo��Ƃ��@�ł��BCookie��܂��ƁA�Ⴆ��Web��[��̃A�J�E��g��
�@�s��ɃA�N�Z�X��\��܂��B�m��ȉ��͈ȉ��̂Ƃ��A�u��E�U��SSL3.0�𖳌��
�@��Ƃł��A�ȉ��̐ݒ��SSL3.0�ł��삵�Ȃ��T�[�o�Ƃ͒ʐM�ł��Ȃ��悤�ɂȂ��Ă��܂��܂��B

�@�@�@�@�@�@�@�@

�@POODLE�̍U��邽�߂ɒ��ԎҍU��K�v�Ȃ̂ŁA�U��ΏۂƂȂ�PC�[��I�[�v��F�؂�
�@��OWi-Fi�Ȃǂ̌��l�b�g��[�N��o�R��ăC��^�[�l�b�g�ʐM��Ă��ۂɒ��ӂ��K�v�ƂȂ�܂��B

�@��@SSL�̎d�g��

�@�N��C�A��gPC��Web�u��E�U��Web�T�[�o�́A��̋Z�p��g�ݍ��킹�Ĉȉ��̃t��[��SSL�ʐM��܂��B
�@SSL�ł��u��J��Í� / ��ʌ��Í��v��u�f�W�^��v��u�f�W�^��ؖ��v�Z�p��S�Ďg�p��Ă��܂��B

��

�@ �@�N��C�A��gPC��AWeb�T�[�o��HTTPS�A�N�Z�X��B( = SSL�̐ڑ��v�� )

�A �@Web�T�[�o��A�N��C�A��gPC�ɃT�[�o�ؖ��񎦂��B

�B
�@�N��C�A��gPC�́A��̏ؖ��ɏ��CA�̃��[�g�ؖ��f�t�H��g��Web�u��E�U�ɃC��X�g�[��Ă��
�@�u�M��ł��郋�[�g�ؖ��v�̈ꗗ��猟��s��B�i��̃��[�g�ؖ��Ȃ��ꍇ�A�u��E�U�Ōx��\��B�j

�C
�@��̃��[�g�ؖ��ꍇ�A�T�[�o�ؖ��̃f�W�^��A��̃��[�g�ؖ��Ɋ܂܂�Ă��CA��
�@��J��ŕ��āA��̌��J��K�̃T�[�o�̂��̂ł��邩�ǂ��؂��B

�D �@�N��C�A��gPC�́A��ʌ��𐶐��܂��B�� m�ɂ́A��ʌ��̊�ƂȂ��i�v��}�X�^�[�V�[�N��b�g�j�𐶐��B

�E �@�N��C�A��gPC�́A�T�[�o�ؖ��Ɋ܂܂�Ă��J��g�p��āA��ʌ��Í��ŃT�[�o�ɑ��M��B

�F �@Web�T�[�o�́A�N��C�A��gPC��M��Í��ꂽ��ʌ��A��g�̔閧��ɂ�蕜��Ď��o��B

�G �@�N��C�A��gPC��Web�T�[�o�́A��̋��ʌ��ɂ��ăf�[�^��Í��Ĉ��S��SSL�ʐM��s��B

�@�ȉ��̇@�`�C�̏ڍא��i�F�؋ǂ��܂߂��ڍא��j��f�W�^��ؖ��̎d�g�݂ŉ��@�`�E�̒ʂ�B

�@�@

�@PC��Web�T�[�o�Ԃ�SSL�g��l��̓\�P�b�g�ŃZ�b�V��ʂ��Ă��̂ŁA��ɕ��SSL�g��l��
�@��m��ł��܂��B�\�P�b�g�Ƃ́u��M��/��IP�A�h��X�A��M��/��|�[�g�ԍ��̑g�ݍ��킹�v�̂��Ƃł��B

�@��T�C�g�ł̋Z�p��ł́ATLS�Ŏg�p��f�W�^��ؖ��PC�ɃC��X�g�[��邱�Ƃ�O��ɂ��
�@��ƂȂ��Ă��܂��A�Ⴆ�΁ATLS�Ŏg�p��l�F�ؗp�̃f�W�^��ؖ��́AIC�J�[�h�ɂ��i�[��邱�Ƃ�
�@�ł��A��p��PC��PC�Ɍ��肷��K�v�͂��܂��B