{"id":67,"date":"2016-10-27T22:24:17","date_gmt":"2016-10-27T13:24:17","guid":{"rendered":"https:\/\/pg-mana.net\/blog\/?p=67"},"modified":"2024-09-09T16:20:32","modified_gmt":"2024-09-09T07:20:32","slug":"http-strict-transport-security","status":"publish","type":"post","link":"https:\/\/pg-mana.net\/blog\/http-strict-transport-security\/","title":{"rendered":"HTTP Strict Transport Security\u306b\u3064\u3044\u3066"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">SSL Server Test\u3067A+\u3092\u53d6\u308b\u305f\u3081\u306b\u5fc5\u8981\u306aHTTP Strict Transport Security\u30d8\u30c3\u30c0\u3092\u8a2d\u5b9a\u3057\u3066\u307f\u305f\u304c\u3001\u30b5\u30d6\u30c9\u30e1\u30a4\u30f3\u307e\u3067\u98db\u3070\u3055\u308c\u3066\u3061\u3087\u3044\u3068\u4e0d\u90fd\u5408\u304c\u8d77\u3053\u3063\u305f\u306e\u3067\u5916\u3057\u3066\u3044\u305f\u3002\u3088\u304f\u610f\u5473\u304c\u5206\u304b\u3063\u3066\u306a\u304b\u3063\u305f\u3093\u3060\u304c\u3001MDN\u306e\u8cc7\u6599\u3092\u898b\u3064\u3051\u305f\u306e\u3067\u3053\u306e\u969b\u306b\u771f\u9762\u76ee\u306b\u8a2d\u5b9a\u3057\u3066\u307f\u308b\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/developer.mozilla.org\/ja\/docs\/Web\/Security\/HTTP_Strict_Transport_Security\">HTTP Strict Transport Security -MDN<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u306e\u30d8\u30c3\u30c0\u306e\u5f79\u5272\u306f\u30d6\u30e9\u30a6\u30b6\u304c\u30b5\u30a4\u30c8\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3057\u305f\u6642\u306b\u3001<strong>\u30b5\u30fc\u30d0\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u524d\u306b<\/strong>\u3001\u5f37\u5236\u7684\u306bHTTPS\u306b\u98db\u3070\u3059\u3053\u3068\u3067\u4e2d\u9593\u653b\u6483\u3092\u9632\u3054\u3046\u3068\u8a00\u3046\u3082\u306e\u3067\u3059\u3002<br>\u4eca\u307e\u3067\u306f\u3001HTTP\u3067\u6697\u53f7\u5316\u305b\u305a\u306b\u30b5\u30fc\u30d0\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3001\u30b5\u30fc\u30d0\u304b\u3089HTTPS\u306b\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u8981\u6c42\u304c\u6765\u307e\u3059\u3002\u3053\u3053\u3067\u7b2c\u4e09\u8005\u306b\u901a\u4fe1\u3092\u6539\u3056\u3093\u3055\u308c\u3066\u3057\u307e\u3046\u3068\u6298\u89d2HTTPS\u901a\u4fe1\u3092\u3057\u3088\u3046\u3068\u3057\u305f\u306e\u306b\u3001\u60aa\u610f\u306e\u3042\u308b\u30b5\u30a4\u30c8\u306b\u98db\u3070\u3055\u308c\u305f\u308a\u60c5\u5831\u304c\u76d7\u307e\u308c\u305f\u308a\u3067\u53f0\u7121\u3057\u3067\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u308c\u3092\u9632\u3050\u305f\u3081\u306b\u30d6\u30e9\u30a6\u30b6\u3067HTTP\u3092HTTPS\u306b\u7f6e\u304d\u63db\u3048\u308b\u3088\u3046\u306b\u6307\u793a\u3059\u308b\u306e\u304cHSTS\u30d8\u30c3\u30c0\u3067\u3059\u3002\u3057\u304b\u3057\u3053\u308c\u306fHTTPS\u3067\u4e00\u56de\u30b5\u30fc\u30d0\u30fc\u306b\u30a2\u30af\u30bb\u30b9\u3057\u305f\u5f8c\u306b\u6b21\u56de\u304b\u3089\u6709\u52b9\u306b\u306a\u308a\u307e\u3059\u3002\u3064\u307e\u308a\u521d\u56deHTTP\u3067\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3055\u3066Strict-Transport-Security\u30d8\u30c3\u30c0\u306e\u8a2d\u5b9a\u3067\u3059\u304c<br><code>Strict-Transport-Security: max-age=(\u6709\u52b9\u671f\u9593[\u79d2]) (; includeSubDomains )(; preload)<\/code><br>\u3068\u3044\u3046\u611f\u3058\u3067\u3059\u3002<br>max-age\u306f\u6709\u52b9\u671f\u9593\u3067\u3059\u3002\u3053\u308c\u3092\u904e\u304e\u308b\u3068\u30d6\u30e9\u30a6\u30b6\u3067HTTPS\u306b\u306a\u3089\u306a\u304f\u306a\u308a\u307e\u3059\u3002\u8a3c\u660e\u66f8\u306e\u5931\u52b9\u6642\u306e\u5bfe\u7b56&#8230;\u3068\u8a00\u3044\u305f\u3044\u3067\u3059\u304c\u3001\u3053\u308c\u306f\u30a2\u30af\u30bb\u30b9\u3059\u308b\u305f\u3073\u306b\u30ab\u30a6\u30f3\u30bf\u304cmax-age\u306b\u30ea\u30bb\u30c3\u30c8\u3055\u308c\u307e\u3059\u3002\u4e00\u30f6\u6708\u5f8c\u306b\u8a2d\u5b9a\u3057\u3066\u3082\uff12\u9031\u9593\u5f8c\u306b\u307e\u305f\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u305d\u3053\u304b\u3089\u4e00\u30f6\u6708\u5f8c\u306b\u306a\u308a\u307e\u3059\u3002<br>HTTP\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3059\u308b\u306b\u306fmax-age\u30920\u306b\u3057\u307e\u3059\u3002<br>includeSubDomains\u306f\u30b5\u30d6\u30c9\u30e1\u30a4\u30f3\u3082\u9069\u7528\u3059\u308b\u3068\u3044\u3046\u3053\u3068\u3067\u3059\u3002<br>preload\u306fHSTS Preload list \u3068\u3044\u3046HTTPS\u3067\u30a2\u30af\u30bb\u30b9\u3059\u3079\u304d\u30b5\u30a4\u30c8\u30ea\u30b9\u30c8\u306b\u767b\u9332\u3059\u308b\u3068\u304d\u306b\u4f7f\u3044\u307e\u3059\u3002<a href=\"https:\/\/hstspreload.appspot.com\/\" target=\"_blank\" rel=\"noopener\">HSTS Preloaded List<\/a>\u306b\u8aac\u660e\u304c\u3042\u308a\u307e\u3059\u304c\u3001\u3053\u3053\u306e\u624b\u9806\u306b\u6cbf\u3063\u3066\u8a2d\u5b9a\u3059\u308b\u3068\u521d\u56de\u30a2\u30af\u30bb\u30b9\u6642\u304b\u3089HTTPS\u901a\u4fe1\u306b\u306a\u308b\u3088\u3046\u3067\u3059\u3002\u3069\u3046\u3084\u3089\u3053\u308c\u30d6\u30e9\u30a6\u30b6\u306b\u7d44\u307f\u8fbc\u307e\u308c\u3066\u3044\u308b\u3088\u3046\u3067\u3059\u306d&#8230;\u3002Chrome\u3067\u306f\u300cchrome:\/\/net-internals\/\u300d\u306eHSTS\u304b\u3089\u3044\u308d\u3044\u308d\u3067\u304d\u308b\u306e\u3067\u8997\u3044\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SSL Server Test\u3067A+\u3092\u53d6\u308b\u305f\u3081\u306b\u5fc5\u8981\u306aHTTP Strict Transport Security\u30d8\u30c3\u30c0\u3092\u8a2d\u5b9a\u3057\u3066\u307f\u305f\u304c\u3001\u30b5\u30d6\u30c9\u30e1\u30a4\u30f3\u307e\u3067\u98db\u3070\u3055\u308c\u3066\u3061\u3087\u3044\u3068\u4e0d\u90fd\u5408\u304c\u8d77\u3053\u3063\u305f\u306e\u3067\u5916\u3057\u3066\u3044\u305f\u3002\u3088\u304f\u610f\u5473\u304c\u5206\u304b\u3063 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-67","post","type-post","status-publish","format-standard","hentry","category-server"],"_links":{"self":[{"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/posts\/67","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/comments?post=67"}],"version-history":[{"count":0,"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/posts\/67\/revisions"}],"wp:attachment":[{"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/media?parent=67"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/categories?post=67"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pg-mana.net\/blog\/wp-json\/wp\/v2\/tags?post=67"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}