May 2022
Beginner to intermediate
756 pages
21h 30m
Korean
book
HTTP 완벽 가이드
by David Gourlry, Brian Totty, Lee Eung Jun, Sang -Il Jeong, Anshu Agarwal, Seilu Reddy, Marjorie Sayre
Content preview from HTTP 완벽 가이드
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
328
HTTP
3
부 식별, 인가, 보안
인증한다. 프락시 서버에서 접근 정책을 중앙 관리 할 수 있기 때문에, 회사 리소스
전체에 대해 통합적인 접근 제어를 하기 위해서 프락시 서버를 사용하면 좋다. 이
절차의 첫 번째 단계는 프락시 인증으로 사용자를 식별하는 것이다.
프락시 인증은 웹 서버의 인증과 헤더와 상태 코드만 다르고 절차는 같다. 표
12-3은 웹 서버와 프락시 인증에서 쓰이는 상태 코드와 헤더들의 대조표다.
웹 서버 프락시 서버
비인증상태코드:
401
비인증상태코드:
407
WWW
-
Authenticate Proxy
-
Authenticate
Authorization
Proxy
-
Authorization
Authentication
-
Info Proxy
-
Authentication
-
Info
표
12
-
3
웹서버인증
vs
프락시인증
12.3
기본 인증의 보안 결함
기본 인증은 단순하고 편리하지만 안심할 수는 없다. 기본 인증은 악의적이지 않은
누군가가 의도치 않게 리소스에 접근하는 것을 막는데 사용하거나, SSL 같은 암호
기술과 혼용한다.
다음 보안 결함을 살펴보자.
1. 기본 인증은 사용자 이름과 비밀번호를 쉽게 디코딩할 수 있는 형식으로 네트워
크에 전송한다. 사실상, 인코딩한 비밀번호는 누구나 읽고 메모하기 어렵지 않은
일반 문자열로 보내진다
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.