June 2023
Beginner to intermediate
588 pages
8h 49m
Japanese
book
セキュアで信頼性のあるシステム構築 ―Google SREが考える安全なシステムの設計、実装、保守
by Heather Adkins, Betsy Beyer, Paul Blankinship, Piotr Lewandowski, Ana Oprea, Adam Stubblefield, Kuma Arakawa, 渡邉 了介
Content preview from セキュアで信頼性のあるシステム構築 ―Google SREが考える安全なシステムの設計、実装、保守
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
11章ケーススタディ：パブリックに信頼できるCAの設計・実装・維持
執筆：Andy Warner、James Kasten、Rob Smits、Piotr Kucharski、Sergey Simakov
SRE、開発者、管理者は、暗号化や認証に用いる証明書を取得したり、VPNやコード署名などの機能を処理したりするために、認証局（certificate authority = CA）とのやり取りが必要になることがあります。このケーススタディでは、本書で取り上げられているベストプラクティスを用いてパブリックに信頼できるCAの設計、実装、維持に活用しているGoogleの取り組みに注目します。この取り組みの判断基準となったのは、スケーラビリティに関する社内のニーズ、コンプライアンスの要件、セキュリティと信頼性の要件でした。
11.1 パブリックに信頼できるCAに関する予備知識
パブリックに信頼できる認証局は、TLS†1、S/MIME†2、その他の一般的な分散トラストのシナリオに対して証明書を発行することにより、インターネットのトランスポート層に関するトラストアンカー（trust anchor）として機能します。これは、ブラウザ、オペレーティングシステム、デバイスがデフォルトで信頼するCAのセットです。そのため、パブリックに信頼できるCAを記述および維持するにあたっては、セキュリティと信頼性に関して多くの考慮事項が発生します。
†1 TLS（Transport Layer Security）の最新バージョンは、RFC 8446（https://oreil.ly/dB0au）に記述されています。
†2 S/MIME（Secure/Multipurpose Internet ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.