Soumettre la recherche
Mettre en ligne
Nisra16 你的 https 真的安全嗎?
•
42 j'aime
•
5,313 vues
Huang-I Yang
Suivre
你知道你有多少的密碼在網路上裸奔嗎?看到網站有綠色鎖頭就真的一定安全嗎?今天不跟你說艱深的密碼學,直接手把手教你如何辨識網路服務的安全性並且快速讓你網站服務有最基本的安全
Lire moins
Lire la suite
Technologie
Signaler
Partager
Signaler
Partager
1 sur 65
Télécharger maintenant
Télécharger pour lire hors ligne
Recommandé
BigWP: Delivering the news over HTTPS
BigWP: Delivering the news over HTTPS
Paul Schreiber
What is Nginx and Why You Should to Use it with Wordpress Hosting
What is Nginx and Why You Should to Use it with Wordpress Hosting
WPSFO Meetup Group
2016-04-07-清大-國際化開源專案技術實務與經驗分享
2016-04-07-清大-國際化開源專案技術實務與經驗分享
Jen Yee Hong
FreeNAS 企業應用經驗分享 [2016/12/17] @台中資策會
FreeNAS 企業應用經驗分享 [2016/12/17] @台中資策會
Jason Cheng
TPET8演講: 非典型程式教育
TPET8演講: 非典型程式教育
Jen Yee Hong
Studies in Matthew
Studies in Matthew
House to House Heart to Heart
How One Small Lead Grew Into A Huge Sale
How One Small Lead Grew Into A Huge Sale
Cassandra Kozak
How to Make Money Selling Physical Products - Steve Chou
How to Make Money Selling Physical Products - Steve Chou
Leslie Samuel
Contenu connexe
En vedette
How to boost your sales with cold emailing
How to boost your sales with cold emailing
TheFamily
The Traffic Trifecta: Driving More Sales Through Paid Search + Organic Social...
The Traffic Trifecta: Driving More Sales Through Paid Search + Organic Social...
Internet Marketing Software - WordStream
The Top 10 Sales Conferences of 2016
The Top 10 Sales Conferences of 2016
Peak Sales Recruiting
10 Awesome Hypnotherapy Quotes
10 Awesome Hypnotherapy Quotes
Mindlife Hypnotherapy Singapore
Got Video?: Using Video to Speed up Sales
Got Video?: Using Video to Speed up Sales
PGi
Church Sermon: GW 1
Church Sermon: GW 1
marikina4square
Building the Workforce for the Future: 16 Smart Inside Sales Trends in 2016 [...
Building the Workforce for the Future: 16 Smart Inside Sales Trends in 2016 [...
OpenView
Religion and The Walking dead
Religion and The Walking dead
Mark Wheller
Technology in Ministry
Technology in Ministry
Ron Hudson
Deepak Chopra: A Path to Personal Forgiveness
Deepak Chopra: A Path to Personal Forgiveness
Deepak Chopra MD (official)
The Art Of War In Sales - Derek Grant
The Art Of War In Sales - Derek Grant
SalesLoft
[系列活動] 智慧製造與生產線上的資料科學 (製造資料科學:從預測性思維到處方性決策)
[系列活動] 智慧製造與生產線上的資料科學 (製造資料科學:從預測性思維到處方性決策)
台灣資料科學年會
Webinar how to scale a dream sales team
Webinar how to scale a dream sales team
MindTickle
What Am I Chopped Lizard?
What Am I Chopped Lizard?
Paul Bass
Migrating ODF and LibreOffice in Taiwan
Migrating ODF and LibreOffice in Taiwan
fweng322
She Did Not Consider Her Destiny
She Did Not Consider Her Destiny
Dave Stewart
En vedette
(16)
How to boost your sales with cold emailing
How to boost your sales with cold emailing
The Traffic Trifecta: Driving More Sales Through Paid Search + Organic Social...
The Traffic Trifecta: Driving More Sales Through Paid Search + Organic Social...
The Top 10 Sales Conferences of 2016
The Top 10 Sales Conferences of 2016
10 Awesome Hypnotherapy Quotes
10 Awesome Hypnotherapy Quotes
Got Video?: Using Video to Speed up Sales
Got Video?: Using Video to Speed up Sales
Church Sermon: GW 1
Church Sermon: GW 1
Building the Workforce for the Future: 16 Smart Inside Sales Trends in 2016 [...
Building the Workforce for the Future: 16 Smart Inside Sales Trends in 2016 [...
Religion and The Walking dead
Religion and The Walking dead
Technology in Ministry
Technology in Ministry
Deepak Chopra: A Path to Personal Forgiveness
Deepak Chopra: A Path to Personal Forgiveness
The Art Of War In Sales - Derek Grant
The Art Of War In Sales - Derek Grant
[系列活動] 智慧製造與生產線上的資料科學 (製造資料科學:從預測性思維到處方性決策)
[系列活動] 智慧製造與生產線上的資料科學 (製造資料科學:從預測性思維到處方性決策)
Webinar how to scale a dream sales team
Webinar how to scale a dream sales team
What Am I Chopped Lizard?
What Am I Chopped Lizard?
Migrating ODF and LibreOffice in Taiwan
Migrating ODF and LibreOffice in Taiwan
She Did Not Consider Her Destiny
She Did Not Consider Her Destiny
Similaire à Nisra16 你的 https 真的安全嗎?
HTTPS The Road To A More Secure Web / SEOCamp Paris
HTTPS The Road To A More Secure Web / SEOCamp Paris
Aysun Akarsu
Everyone Screws Up HTTPS
Everyone Screws Up HTTPS
patrickstox
Decentralized storage IPFS & Ulord
Decentralized storage IPFS & Ulord
Steven Li
Creating Secure Web Apps: What Every Developer Needs to Know About HTTPS Today
Creating Secure Web Apps: What Every Developer Needs to Know About HTTPS Today
Heroku
goaを使った開発TIPS@六本木一丁目
goaを使った開発TIPS@六本木一丁目
jumpei chikamori
HTTP Security Headers
HTTP Security Headers
Ismael Goncalves
Internet of Things & E-commerce
Internet of Things & E-commerce
Aqeel Ahmad
セキュアアプリケーションのためのHTTP設定
セキュアアプリケーションのためのHTTP設定
ryusukekumita1
WebSocket - Nov 2011
WebSocket - Nov 2011
takanao ENODH
Cabeçalhos de Segurança HTTP
Cabeçalhos de Segurança HTTP
Ismael Goncalves
PWA Roadshow Seoul - HTTPS
PWA Roadshow Seoul - HTTPS
Chang W. Doh
DIY WordPress Site Management: Configure, Launch, and Maintain
DIY WordPress Site Management: Configure, Launch, and Maintain
Cliff Seal
Maximizing Performance with SPDY and SSL
Maximizing Performance with SPDY and SSL
Zoompf
Google's Search Signals For Page Experience - SMX Advanced 2021 Patrick Stox
Google's Search Signals For Page Experience - SMX Advanced 2021 Patrick Stox
Ahrefs
01_Migrate Web Sites to Azure Web Apps_GAB2019
01_Migrate Web Sites to Azure Web Apps_GAB2019
Kumton Suttiraksiri
Google drive on linux
Google drive on linux
維泰 蔡
The Future of https in Search
The Future of https in Search
semrush_webinars
OneDrive, TwoDrive, Whiterive, BlueDrive (hahaha)
OneDrive, TwoDrive, Whiterive, BlueDrive (hahaha)
SPC Adriatics
Premature optimisation: The Root of All Evil
Premature optimisation: The Root of All Evil
Fabio Akita
DevCommerce Conference 2016: Performance, anti-patterns e stacks pra desenvol...
DevCommerce Conference 2016: Performance, anti-patterns e stacks pra desenvol...
iMasters
Similaire à Nisra16 你的 https 真的安全嗎?
(20)
HTTPS The Road To A More Secure Web / SEOCamp Paris
HTTPS The Road To A More Secure Web / SEOCamp Paris
Everyone Screws Up HTTPS
Everyone Screws Up HTTPS
Decentralized storage IPFS & Ulord
Decentralized storage IPFS & Ulord
Creating Secure Web Apps: What Every Developer Needs to Know About HTTPS Today
Creating Secure Web Apps: What Every Developer Needs to Know About HTTPS Today
goaを使った開発TIPS@六本木一丁目
goaを使った開発TIPS@六本木一丁目
HTTP Security Headers
HTTP Security Headers
Internet of Things & E-commerce
Internet of Things & E-commerce
セキュアアプリケーションのためのHTTP設定
セキュアアプリケーションのためのHTTP設定
WebSocket - Nov 2011
WebSocket - Nov 2011
Cabeçalhos de Segurança HTTP
Cabeçalhos de Segurança HTTP
PWA Roadshow Seoul - HTTPS
PWA Roadshow Seoul - HTTPS
DIY WordPress Site Management: Configure, Launch, and Maintain
DIY WordPress Site Management: Configure, Launch, and Maintain
Maximizing Performance with SPDY and SSL
Maximizing Performance with SPDY and SSL
Google's Search Signals For Page Experience - SMX Advanced 2021 Patrick Stox
Google's Search Signals For Page Experience - SMX Advanced 2021 Patrick Stox
01_Migrate Web Sites to Azure Web Apps_GAB2019
01_Migrate Web Sites to Azure Web Apps_GAB2019
Google drive on linux
Google drive on linux
The Future of https in Search
The Future of https in Search
OneDrive, TwoDrive, Whiterive, BlueDrive (hahaha)
OneDrive, TwoDrive, Whiterive, BlueDrive (hahaha)
Premature optimisation: The Root of All Evil
Premature optimisation: The Root of All Evil
DevCommerce Conference 2016: Performance, anti-patterns e stacks pra desenvol...
DevCommerce Conference 2016: Performance, anti-patterns e stacks pra desenvol...
Dernier
20140402 - Smart house demo kit
20140402 - Smart house demo kit
Jamie (Taka) Wang
Top 10 Squarespace Development Companies
Top 10 Squarespace Development Companies
TopCSSGallery
Trailblazer Community - Flows Workshop (Session 2)
Trailblazer Community - Flows Workshop (Session 2)
Muhammad Tiham Siddiqui
UiPath Studio Web workshop Series - Day 3
UiPath Studio Web workshop Series - Day 3
DianaGray10
Automation Ops Series: Session 2 - Governance for UiPath projects
Automation Ops Series: Session 2 - Governance for UiPath projects
DianaGray10
2024.03.12 Cost drivers of cultivated meat production.pdf
2024.03.12 Cost drivers of cultivated meat production.pdf
The Good Food Institute
LF Energy Webinar - Unveiling OpenEEMeter 4.0
LF Energy Webinar - Unveiling OpenEEMeter 4.0
DanBrown980551
UiPath Studio Web workshop series - Day 1
UiPath Studio Web workshop series - Day 1
DianaGray10
UiPath Studio Web workshop series - Day 4
UiPath Studio Web workshop series - Day 4
DianaGray10
UiPath Studio Web workshop series - Day 2
UiPath Studio Web workshop series - Day 2
DianaGray10
The Importance of Indoor Air Quality (English)
The Importance of Indoor Air Quality (English)
IES VE
Introduction to RAG (Retrieval Augmented Generation) and its application
Introduction to RAG (Retrieval Augmented Generation) and its application
Knoldus Inc.
Stobox 4: Revolutionizing Investment in Real-World Assets Through Tokenization
Stobox 4: Revolutionizing Investment in Real-World Assets Through Tokenization
Stobox
SIM INFORMATION SYSTEM: REVOLUTIONIZING DATA MANAGEMENT
SIM INFORMATION SYSTEM: REVOLUTIONIZING DATA MANAGEMENT
xtailishbaloch
AI Workshops at Computers In Libraries 2024
AI Workshops at Computers In Libraries 2024
Brian Pichman
Where developers are challenged, what developers want and where DevEx is going
Where developers are challenged, what developers want and where DevEx is going
Francesco Corti
Planetek Italia Srl - Corporate Profile Brochure
Planetek Italia Srl - Corporate Profile Brochure
Planetek Italia Srl
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
Cheryl Hung
SheDev 2024
SheDev 2024
GDSC PJATK
Technical SEO for Improved Accessibility WTS FEST
Technical SEO for Improved Accessibility WTS FEST
BillieHyde
Dernier
(20)
20140402 - Smart house demo kit
20140402 - Smart house demo kit
Top 10 Squarespace Development Companies
Top 10 Squarespace Development Companies
Trailblazer Community - Flows Workshop (Session 2)
Trailblazer Community - Flows Workshop (Session 2)
UiPath Studio Web workshop Series - Day 3
UiPath Studio Web workshop Series - Day 3
Automation Ops Series: Session 2 - Governance for UiPath projects
Automation Ops Series: Session 2 - Governance for UiPath projects
2024.03.12 Cost drivers of cultivated meat production.pdf
2024.03.12 Cost drivers of cultivated meat production.pdf
LF Energy Webinar - Unveiling OpenEEMeter 4.0
LF Energy Webinar - Unveiling OpenEEMeter 4.0
UiPath Studio Web workshop series - Day 1
UiPath Studio Web workshop series - Day 1
UiPath Studio Web workshop series - Day 4
UiPath Studio Web workshop series - Day 4
UiPath Studio Web workshop series - Day 2
UiPath Studio Web workshop series - Day 2
The Importance of Indoor Air Quality (English)
The Importance of Indoor Air Quality (English)
Introduction to RAG (Retrieval Augmented Generation) and its application
Introduction to RAG (Retrieval Augmented Generation) and its application
Stobox 4: Revolutionizing Investment in Real-World Assets Through Tokenization
Stobox 4: Revolutionizing Investment in Real-World Assets Through Tokenization
SIM INFORMATION SYSTEM: REVOLUTIONIZING DATA MANAGEMENT
SIM INFORMATION SYSTEM: REVOLUTIONIZING DATA MANAGEMENT
AI Workshops at Computers In Libraries 2024
AI Workshops at Computers In Libraries 2024
Where developers are challenged, what developers want and where DevEx is going
Where developers are challenged, what developers want and where DevEx is going
Planetek Italia Srl - Corporate Profile Brochure
Planetek Italia Srl - Corporate Profile Brochure
Key Trends Shaping the Future of Infrastructure.pdf
Key Trends Shaping the Future of Infrastructure.pdf
SheDev 2024
SheDev 2024
Technical SEO for Improved Accessibility WTS FEST
Technical SEO for Improved Accessibility WTS FEST
Nisra16 你的 https 真的安全嗎?
1.
HTTPS Henry@NISRA 2016/12/19
2.
• HTTP HTTPS ◦
HTTPS ◦ • ◦ ◦ ◦ EV HTTPS • HTTPS ◦ ◦ ◦ ◦ Let’s Encrypt • HTTPS ◦ SSLLAB ◦ HTTPS ◦ HTTPS • DEMO QA
3.
HTTPS
4.
HTTP
5.
HTTPS TCP HTTP TLS
8.
HTTPS
10.
HTTPS • - • - •
- Google HTTPS SEO • - Chrome Geolocation HTTPS • - Apple iOS App 2017 HTTPS
11.
HTTPS V.S. HTTP HTTP
= HTTP
12.
• HTTPS -
14.
HTTPS HTTPS -
16.
• • DNS • ...
18.
SHA1
24.
SINGLE DOMAIN WILD
CARD
25.
SINGLE DOMAIN WILD
CARD
27.
/
31.
... ...
32.
VERISIGN ...
33.
• Privacy Key • • •
34.
...
35.
• HTTPS • IE
Firefox Chrome 360 QQ ....... •
36.
LET'S ENCRYPT • • 90
37.
GEA-SUAN LIN HTTPS://LETSENCRYPT.TW/
39.
HTTPS SSLAB • • • F
40.
HTTPS A+ F
43.
TESTSSL.SH https://testssl.sh/
44.
HTTPS
45.
HTTPS • • • •
46.
HTTPS HTTP TCP
RTT HTTPS TCP + SSL RTT
47.
HTTPS $ curl
-w "TCP handshake: %{time_connect}, SSL handshake: % {time_appconnect}n" -so /dev/null https://www.alipay.com
48.
HTTPS • • HTTPS • HTTPS
49.
HTTPS • HTTPS • •
50.
HTTPS • IE6
51.
HTTPS
52.
HTTPS
53.
HTTPS • SSLv2 SSLv3 •
Cipher Strength MD5 1024 bit • HSTS HTTP StrictTransport Security • Perfect Forward Secrecy • Weak Diffie-Hellman(DH)
55.
CIPHERLI.ST https://cipherli.st/
57.
MOZILLA SSL CONFIGURATION
GENERATOR https://mozilla.github.io/server-side-tls/ssl-config-generator/
58.
HTTPS
59.
HTTPS • TLS False
Start • Certificate-Chain • Session Resumption • OCSP Stapling
60.
HTTPS • TLS False
Start Client Change Cipher Spec Finished Application Data TLS Application Data
61.
HTTPS • Certificate-Chain -> -> ECC
62.
HTTPS • Session Resumption RTT
63.
HTTPS • OCSP Stapling OCSP OCSP
Stapling OCSP OCSP Responder
64.
HTTPS HTTPS
65.
DEMOTIME
Télécharger maintenant