May 2022
Beginner to intermediate
756 pages
21h 30m
Korean
book
HTTP 완벽 가이드
by David Gourlry, Brian Totty, Lee Eung Jun, Sang -Il Jeong, Anshu Agarwal, Seilu Reddy, Marjorie Sayre
Content preview from HTTP 완벽 가이드
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
355
14
장 보안 HTTP
The Definitive Guide
14
장
HTTP: The Definitive Guide
보안 HTTP
이전 3개 장에서 사용자를 식별하고 인증하는 것을 도와주는 HTTP의 기능들에 대
해 살펴보았다. 이 기법들은 우호적인 관계가 형성되어 있는 커뮤니티에서는 잘 동
작하지만 적대행위가 일어날 가능성이 있는 커뮤니티에서 중요한 트랜잭션을 보호
하기에는 부족하다.
이 장에서는 디지털 암호화를 이용해 도청이나 위조로부터 HTTP 트랜잭션을 안
전하게 보호하는 더 복잡하고 적극적인 기술을 제시한다.
14.1
HTTP
를 안전하게 만들기
사람들은 웹 트랜잭션을 중요한 일에 사용한다. 강력한 보안이 없다면, 사람들은
온라인 쇼핑이나 인터넷뱅킹을 할 때 안심할 수 없을 것이다. 제한된 접근이 가능
하지 않다면, 회사들은 중요한 문서를 웹 서버에 올려놓을 수 없을 것이다. 웹은 안
전한 방식의 HTTP를 필요로 한다.
이전 장에서 인증(기본 그리고 다이제스트 인증)과 메시지 무결성(요약 qop=
“auth-int”)을 제공하는 가벼운 방법에 대해 이야기했다. 이들은 대체로 쓸만하지만,
대량 구매, 은행 업무, 혹은 보안 자료 접근을 위해서는 충분히 강력하지 않다. 보다
중요한 트랜잭션을 위해서는, HTTP와 디지털 암호화 기술을 결합해야 한다.
HTTP의 보안 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.