{"id":512,"date":"2016-07-06T20:13:32","date_gmt":"2016-07-06T11:13:32","guid":{"rendered":"https:\/\/dukehide.dip.jp\/wordpress\/com\/?p=512"},"modified":"2018-02-13T23:58:02","modified_gmt":"2018-02-13T14:58:02","slug":"http-strict-transport-security","status":"publish","type":"post","link":"https:\/\/dukehide.com\/pc\/http-strict-transport-security\/","title":{"rendered":"HSTS(HTTP Strict Transport Security)\u30ad\u30e3\u30c3\u30b7\u30e5\u306e\u524a\u9664\u65b9\u6cd5"},"content":{"rendered":"

Let's Encrypt\u306e\u304a\u304b\u3052\u3067HTTPS\u63a5\u7d9a\u3068\u306a\u3063\u305f\u306e\u306f\u826f\u3044\u306e\u3067\u3059\u304c\u3001\u5168\u3066\u306eWeb\u30b5\u30fc\u30d3\u30b9\u3092HTTPS\u5bfe\u5fdc\u306b\u306f\u3057\u3066\u3044\u306a\u304b\u3063\u305f\u306e\u3067\u3001\u3061\u3087\u3063\u3068HTTP\u63a5\u7d9a\u3067\u78ba\u8a8d\u2026\u3068\u3044\u3046\u3053\u3068\u304c\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n

\u4e00\u5ea6HTTPS\u3067\u63a5\u7d9a\u3059\u308b\u3068\u3001\u305d\u308c\u4ee5\u964d\u306fHTTP\u3067\u63a5\u7d9a\u3057\u3088\u3046\u3068\u3057\u3066\u3082\u30d6\u30e9\u30a6\u30b6\u5074\u3067\u5f37\u5236\u7684\u306bHTTPS\u3067\u63a5\u7d9a\u3059\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002\u3053\u308c\u306f\u3053\u308c\u3067\u826f\u3044\u306e\u3067\u3059\u304c\u3001\u3067\u306fHTTP\u3067\u63a5\u7d9a\u3059\u308b\u306b\u306f\u3069\u3046\u3057\u305f\u3089\u2026\uff1f<\/p>\n

\u2026\u3068\u3044\u3046\u308f\u3051\u3067\u5c11\u3057HSTS\u306e\u4ed5\u7d44\u307f\u306b\u306f\u307e\u3063\u3066\u3057\u307e\u3063\u305f\u306e\u304c\u4eca\u56de\u306e\u985b\u672b\u3002\u30d6\u30e9\u30a6\u30b6\u306e\u30ad\u30e3\u30c3\u30b7\u30e5\u3092\u524a\u9664\u3059\u308c\u3070<\/p>\n

Firefox\u306e\u5834\u5408\u306f\u3001\u30c4\u30fc\u30eb\u30d0\u30fc\u300c\u5c65\u6b74\u300d\u2192\u300c\u6700\u8fd1\u306e\u5c65\u6b74\u3092\u6d88\u53bb\u300d\u3092\u9078\u629e\u3057\u3001\u300c\u3059\u3079\u3066\u306e\u5c65\u6b74\u3092\u6d88\u53bb\u300d\u30c0\u30a4\u30a2\u30ed\u30b0\u306e\u4e00\u756a\u4e0b\u306b\u3042\u308b\u300c\u30b5\u30a4\u30c8\u306e\u8a2d\u5b9a\u300d\u306b\u30c1\u30a7\u30c3\u30af\u3092\u5165\u308c\u306a\u3044\u3068HSTS\u306e\u30ad\u30e3\u30c3\u30b7\u30e5\u304c\u524a\u9664\u3067\u304d\u307e\u305b\u3093\u3002
\n\u3053\u306e\u624b\u9806\u3067\u30ad\u30e3\u30c3\u30b7\u30e5\u3092\u524a\u9664\u3059\u308b\u3053\u3068\u306b\u3088\u308a\u3001HTTP\u3067\u63a5\u7d9a\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002Chrome\u3084Internet Explorer\u306f\u4f7f\u3063\u3066\u3044\u306a\u3044\u306e\u3067\u5206\u304b\u308a\u307e\u305b\u3093\u304c\u3001\u4f55\u304b\u3057\u3089\u306e\u65b9\u6cd5\u3067\u30ad\u30e3\u30c3\u30b7\u30e5\u3092\u524a\u9664\u3059\u308c\u3070\u5927\u4e08\u592b\u3067\u3057\u3087\u3046\u3002<\/p>\n

\u30b5\u30fc\u30d0\u30fc\u5074\u3067\u5bfe\u51e6\u3059\u308b\u306a\u3089\u3001ssl.conf\u306b\u8a18\u8ff0\u3055\u308c\u3066\u3044\u308b<\/p>\n

\u300eHeader always set Strict-Transport-Security \"max-age=15768000\"<\/strong>\u300f<\/p>\n

\u306e\u201cmax-age\u201d\u90e8\u5206\u3092\u201cmax-age=0\u201d\u306b\u3057\u3066Apache\u3092\u518d\u8d77\u52d5\u3059\u308b\u3068\u3044\u3046\u65b9\u6cd5\u3082\u3042\u308b\u3088\u3046\u3067\u3059\u3002<\/p>\n

\n# vi \/etc\/httpd\/conf.d\/ssl.conf
\n\u3000 \uff1a
\n\u3000(\u7565)
\n#HSTS=\u5e38\u6642HTTPS\u30a2\u30af\u30bb\u30b9\u306e\u6709\u52b9\u5316
\n#Header always set Strict-Transport-Security \"max-age=15768000\"
\nHeader set Strict-Transport-Security \"max-age=2592000\"
\n#Header set Strict-Transport-Security \"max-age=0\"\n<\/div>\n

<\/p>\n

\u4eca\u56de\u306f\u4e00\u65e6always\u306e\u6307\u5b9a\u3092OFF\u306b\u3057\u3066\u3001max-age\u306e\u5024\u30922592000(=86400sec * 30day)\u306b\u5909\u66f4\u3057\u307e\u3057\u305f\u3002\u3061\u306a\u307f\u306b30\u65e5\u9593\u306e\u610f\u5473\u306f\u7279\u306b\u3042\u308a\u307e\u305b\u3093 (^^;)<\/p>\n","protected":false},"excerpt":{"rendered":"

Let's Encrypt\u306e\u304a\u304b\u3052\u3067HTTPS\u63a5\u7d9a\u3068\u306a\u3063\u305f\u306e\u306f\u826f\u3044\u306e\u3067\u3059\u304c\u3001\u5168\u3066\u306eWeb\u30b5\u30fc\u30d3\u30b9\u3092HTTPS\u5bfe\u5fdc\u306b\u306f\u3057\u3066\u3044\u306a\u304b\u3063\u305f\u306e\u3067\u3001\u3061\u3087\u3063\u3068HTTP\u63a5\u7d9a\u3067\u78ba\u8a8d\u2026\u3068\u3044\u3046\u3053\u3068\u304c\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"footnotes":"","_jetpack_memberships_contains_paid_content":false,"vkexunit_cta_each_option":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[18,3],"tags":[107],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p9iVw6-8g","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/posts\/512"}],"collection":[{"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/comments?post=512"}],"version-history":[{"count":0,"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/posts\/512\/revisions"}],"wp:attachment":[{"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/media?parent=512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/categories?post=512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dukehide.com\/pc\/wp-json\/wp\/v2\/tags?post=512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}