May 2022
Beginner to intermediate
756 pages
21h 30m
Korean
book
HTTP 완벽 가이드
by David Gourlry, Brian Totty, Lee Eung Jun, Sang -Il Jeong, Anshu Agarwal, Seilu Reddy, Marjorie Sayre
Content preview from HTTP 완벽 가이드
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
350
HTTP
3
부 식별, 인가, 보안
13.4.5
캐시
어떤 공유 캐시가 Authorization 헤더를 포함한 요청과 그에 대한 응답을 받은 경
우, 다음의 두 Cache-Control 지시자 중 하나가 응답에 존재하지 않는 한 다른 요청
에 대해 그 응답을 반환해서는 안 된다.
· 만약 원 서버의 응답이 “must-revalidate” Cache-Control 지시자를 포함한 경우,
캐시는 그 응답의 엔터티를 다음 요청에 대한 응답을 위해 활용할 것이다. 그러
나 원 서버가 새 요청을 인증할 수 있도록, 우선 그 요청의 헤더를 이용해서 재검
사를 수행해야 한다.
· 만약 원 서버의 응답이 “public” Cache-Control 지시자를 포함한 경우, 응답 엔
터티는 그다음에 오는 임의의 요청에 대한 응답으로 반환될 수 있다.
13.5
보안에 대한 고려사항
RFC 2617은 HTTP 인증 제도에 내재된 보안 위협의 일부를 정리하는 존경스러운
일을 해냈다. 이 절은 그중 몇 가지를 설명한다.
13.5.1
헤더 부당 변경
헤더 부당 변경에 대해 항상 안전한 시스템을 제공하기 위해서, 양 종단 암호화나
헤더에 대한 디지털 서명이 필요할 것이다. (양쪽의 조합이면 더 좋다!) 다이제스
트 인증은 쉽게 조작할 수 없는 인증 제도를 제공하는 것에 초점을 맞추고 있으나 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.