| 1 |
<?xml version="1.0" encoding="iso-2022-jp"?>
|
| 2 |
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
|
| 3 |
<html xmlns:h="http://www.w3.org/1999/xhtml" xmlns="http://www.w3.org/1999/xhtml">
|
| 4 |
<head profile="http://suika.fam.cx/~wakaba/lang/rfc/translation/html-profile">
|
| 5 |
<meta http-equiv="Content-Style-Type" content="text/css"/>
|
| 6 |
<title>
|
| 7 |
RFC 2659:
|
| 8 |
HTML$B$N0BA4@-3HD%(B (Security Extensions For HTML)
|
| 9 |
</title>
|
| 10 |
<link rel="stylesheet" href="http://suika.fam.cx/~wakaba/lang/rfc/translation/rfc-ja-style.css" type="text/css"/>
|
| 11 |
<link rel="alternate" href="http://suika.fam.cx/uri-res/N2L?urn:ietf:rfc:2659" hreflang="en" title="RFC 2659"/>
|
| 12 |
<link rev="made" href="http://www.rfceditor.org/" title="RFC Editor"/>
|
| 13 |
<link rev="translate" href="#rfc-translators-note"/>
|
| 14 |
<meta name="author" content="Eric Rescorla, Allan M. Schiffman, "/>
|
| 15 |
</head>
|
| 16 |
<body>
|
| 17 |
<div id="rfc--table">
|
| 18 |
<ul id="rfc--table-left">
|
| 19 |
<li>Network Working Group</li>
|
| 20 |
<li>Request for Comments: 2659</li>
|
| 21 |
<li>
|
| 22 |
<span class="t-pair">
|
| 23 |
<span xml:lang="en" class="t-l-en">Category: Experimental</span>
|
| 24 |
</span>
|
| 25 |
</li>
|
| 26 |
<li>
|
| 27 |
<span class="t-pair">
|
| 28 |
<span xml:lang="ja" class="t-l-ja">$BJ,N`(B: $B<B83E*(B</span>
|
| 29 |
</span>
|
| 30 |
</li>
|
| 31 |
</ul>
|
| 32 |
<ul id="rfc--table-right">
|
| 33 |
<li title="Eric Rescorla">E. Rescorla</li>
|
| 34 |
<li>RTFM, Inc.</li>
|
| 35 |
<li title="Allan M. Schiffman">A. Schiffman</li>
|
| 36 |
<li title="SPYRUS/Terisa">Terisa Systems, Inc.</li>
|
| 37 |
<li>
|
| 38 |
<span class="t-pair">
|
| 39 |
<span xml:lang="en" class="t-l-en"> August 1999</span>
|
| 40 |
</span>
|
| 41 |
</li>
|
| 42 |
<li>
|
| 43 |
<span class="t-pair">
|
| 44 |
<span xml:lang="ja" class="t-l-ja">1999$BG/(B8$B7n(B</span>
|
| 45 |
</span>
|
| 46 |
</li>
|
| 47 |
</ul>
|
| 48 |
</div>
|
| 49 |
<div class="t-pair t-heading" id="rfc-title">
|
| 50 |
<h1 class="rfc-title t-l-en" xml:lang="en">Security Extensions For HTML</h1>
|
| 51 |
<h1 class="rfc-title t-l-ja" xml:lang="ja">HTML$B$N0BA4@-3HD%(B</h1>
|
| 52 |
</div>
|
| 53 |
<div id="rfc-status" class="rfc-section">
|
| 54 |
<div class="t-pair">
|
| 55 |
<h1 xml:lang="en" class="t-l-en">Status of this Memo</h1>
|
| 56 |
<h1 xml:lang="ja" class="t-l-ja">$B$3$N%a%b$N0LCVIU$1(B</h1>
|
| 57 |
</div>
|
| 58 |
<div class="rfc-t">
|
| 59 |
<div class="t-pair">
|
| 60 |
<p class="t-l-en" xml:lang="en">
|
| 61 |
This memo defines an Experimental Protocol for the Internet community.
|
| 62 |
It does not specify an Internet standard of any kind.
|
| 63 |
Discussion and suggestions for improvement are requested.
|
| 64 |
Distribution of this memo is unlimited.
|
| 65 |
</p>
|
| 66 |
<p class="t-l-ja" xml:lang="ja">
|
| 67 |
$B$3$N%a%b$O!"(B Internet $B<R2q8~$1$N<B83E*%W%m%H%3%k$rDj5A$9$k$b$N$G$9!#$$$+$J$k<oN`$N(B
|
| 68 |
Internet $BI8=`$r5,Dj$9$k$b$N$G$b$"$j$^$;$s!#2~NI$N0Y$N5DO@$dDs0F$r5a$a$^$9!#$3$N%a%b$NG[I[$O@)8B$7$^$;$s!#(B
|
| 69 |
</p>
|
| 70 |
</div>
|
| 71 |
</div>
|
| 72 |
</div>
|
| 73 |
<div id="rfc-copyright-notice" class="rfc-section">
|
| 74 |
<div class="t-pair">
|
| 75 |
<h1 xml:lang="en" class="t-l-en">Copyright Notice</h1>
|
| 76 |
<h1 xml:lang="ja" class="t-l-ja">$BCx:n8"I=<((B</h1>
|
| 77 |
</div>
|
| 78 |
<div class="t-pair t-hide-no">
|
| 79 |
<p class="t-l-en" xml:lang="en">Copyright ©
|
| 80 |
<a href="http://www.isoc.org/">The Internet Society</a>
|
| 81 |
(1999).
|
| 82 |
All Rights Reserved.</p>
|
| 83 |
<p class="t-l-ja" xml:lang="ja">$BCx:n8"(B ©
|
| 84 |
<a href="http://www.isoc.org/">The Internet Society</a>
|
| 85 |
(1999)$B!#A48"J]N1!#(B</p>
|
| 86 |
</div>
|
| 87 |
</div>
|
| 88 |
<div class="rfc-section" id="rfc.abstract">
|
| 89 |
<div class="t-pair t-heading">
|
| 90 |
<h1 xml:lang="en" class="t-l-en">Abstract</h1>
|
| 91 |
<h1 xml:lang="ja" class="t-l-ja">$B35MW(B</h1>
|
| 92 |
</div>
|
| 93 |
<div class="rfc-t">
|
| 94 |
<div class="t-pair">
|
| 95 |
<p xml:lang="en" class="t-l-en">
|
| 96 |
This memo describes a syntax for embedding S-HTTP negotiation
|
| 97 |
parameters in HTML documents. S-HTTP, as described by
|
| 98 |
<a href="http://suika.fam.cx/uri-res/N2L?urn:ietf:rfc:2660" title="RFC 2660">RFC 2660</a>, contains the concept of
|
| 99 |
negotiation headers which reflect the potential receiver of
|
| 100 |
a message's preferences as to which cryptographic enhancements
|
| 101 |
should be applied to the message. This document describes a
|
| 102 |
syntax for binding these negotiation parameters to HTML anchors.
|
| 103 |
</p>
|
| 104 |
<p xml:lang="ja" class="t-l-ja">
|
| 105 |
$B$3$N%a%b$O!"(B HTML $BJ8=qCf$K(B S-HTTP
|
| 106 |
$B@^>W%Q%i%a!<%?!<$rKd$a9~$`9=J8$r@bL@$7$^$9!#(B
|
| 107 |
<a href="http://suika.fam.cx/uri-res/N2L?urn:ietf:rfc:2660" title="RFC 2660">RFC 2660</a> $B$G@bL@$5$l$F$$$k(B
|
| 108 |
S-HTTP $B$O!"$I$N0E9f3HD%$r%a%C%;!<%8$KE,MQ$9$k$+$N!"%a%C%;!<%8$N@x:_<u?.<T$N9%$_$rH?1G$9$k@^>WF,$N35G0$r4^$s$G$$$^$9!#$3$NJ8=q$O$3$l$i$N@^>W%Q%i%a!<%?!<$r(B
|
| 109 |
HTML $BIE$KG{$jIU$1$k9=J8$r@bL@$7$^$9!#(B
|
| 110 |
</p>
|
| 111 |
</div>
|
| 112 |
</div>
|
| 113 |
</div>
|
| 114 |
|
| 115 |
<div class="rfc-section" id="rfc.section.1">
|
| 116 |
<div class="t-pair t-heading">
|
| 117 |
<h1 xml:lang="en" class="t-l-en">1. Introduction</h1>
|
| 118 |
<h1 xml:lang="ja" class="t-l-ja">1.
|
| 119 |
$B$O$8$a$K(B</h1>
|
| 120 |
</div>
|
| 121 |
<ins class="t-note t-l-ja" xml:lang="ja">
|
| 122 |
<span class="t-note-title">$BLuCm(B: </span>
|
| 123 |
<p class="rfc-t" id="rfc.section.1.p.1">$B86J8$G7gMn!#(B</p>
|
| 124 |
</ins>
|
| 125 |
</div>
|
| 126 |
|
| 127 |
<div class="rfc-section" id="rfc.section.2">
|
| 128 |
<div class="t-pair t-heading">
|
| 129 |
<h1 xml:lang="en" class="t-l-en">2. Anchor Attributes</h1>
|
| 130 |
<h1 xml:lang="ja" class="t-l-ja">2.
|
| 131 |
$BIEB0@-(B</h1>
|
| 132 |
</div>
|
| 133 |
<div class="rfc-t" id="rfc.section.2.p.1">
|
| 134 |
<div class="t-pair">
|
| 135 |
<p xml:lang="en" class="t-l-en">
|
| 136 |
We define the following new anchor (and form submission) attributes:
|
| 137 |
</p>
|
| 138 |
<p xml:lang="ja" class="t-l-ja">
|
| 139 |
$B<!$N?7$7$$IE(B ($B$H(B form $BAw?.(B) $BB0@-$rDj5A$7$^$9!#(B
|
| 140 |
</p>
|
| 141 |
</div>
|
| 142 |
|
| 143 |
<dl class="rfc-list-hanging">
|
| 144 |
<dt id="html-a-dn">
|
| 145 |
<a href="#html-a-dn" class="self">DN</a>
|
| 146 |
</dt>
|
| 147 |
<dd>
|
| 148 |
<div class="t-pair">
|
| 149 |
<p xml:lang="en" class="t-l-en">
|
| 150 |
The distinguished name of the principal for whom the
|
| 151 |
request should be encrypted when dereferencing the anchor's url.
|
| 152 |
This need not be specified, but failure to do so runs the risk
|
| 153 |
that the client will be unable to determine the DN and therefore
|
| 154 |
will be unable to encrypt. This should be specified in the form
|
| 155 |
of <a href="http://suika.fam.cx/uri-res/N2L?urn:ietf:rfc:1485" title="RFC 1485">RFC1485</a>,
|
| 156 |
using SGML quoting conventions as needed.
|
| 157 |
</p>
|
| 158 |
<p xml:lang="ja" class="t-l-ja">
|
| 159 |
$BIE$N(B url
|
| 160 |
$B$r2r;2>H(B (dereference) $B$9$k;~$KMW5a$,0E9f2=$9$k$Y$-BP>]<T$N<1JL$5$l$?L>A0!#(B
|
| 161 |
$B$3$l$O;XDj$9$kI,MW$O$"$j$^$;$s$,!"%/%i%$%"%s%H$,(B DN
|
| 162 |
$B$r7hDj=PMh$:!"$R$$$F$O0E9f2=$b=PMh$J$/$J$k4m81$rKA$9$3$H$K$J$j$^$9!#(B
|
| 163 |
<a href="http://suika.fam.cx/uri-res/N2L?urn:ietf:rfc:1485" title="RFC 1485">RFC 1485</a>
|
| 164 |
$B$N7A<0$G!"I,MW$K1~$8$F(B SGML
|
| 165 |
quote $BK!$r;H$C$F!";XDj$9$k$Y$-$G$9!#(B
|
| 166 |
</p>
|
| 167 |
</div>
|
| 168 |
</dd>
|
| 169 |
<dt>NONCE</dt>
|
| 170 |
<dd>
|
| 171 |
<div class="t-pair">
|
| 172 |
<p xml:lang="en" class="t-l-en">
|
| 173 |
A free-format string (appropriately SGML quoted) which
|
| 174 |
is to be included in a SHTTP-Nonce: header (after SGML quoting
|
| 175 |
is removed) when the anchor is dereferenced.
|
| 176 |
</p>
|
| 177 |
<p xml:lang="ja" class="t-l-ja">
|
| 178 |
($BE,@Z$K(B SGML quote $B$7$?(B)
|
| 179 |
$B<+M37A<0J8;zNs$G!"IE$,2r;2>H(B (dereference) $B$5$l$k;~$K(B
|
| 180 |
(SGML $B0zMQId$r>C$7$?8e$G(B) SHTTP-Nonce: $BF,$K4^$a$i$l$k$b$N!#(B
|
| 181 |
</p>
|
| 182 |
</div>
|
| 183 |
</dd>
|
| 184 |
<dt>CRYPTOPTS</dt>
|
| 185 |
<dd>
|
| 186 |
<div class="t-pair">
|
| 187 |
<p xml:lang="en" class="t-l-en">
|
| 188 |
Cryptographic option information as described in
|
| 189 |
<span class="rfc-xref">
|
| 190 |
<a href="#SHTTP" title="The Secure HyperText Transfer Protocol">[SHTTP]</a>
|
| 191 |
</span>. Specifically, the
|
| 192 |
<cryptopt-list> production.
|
| 193 |
</p>
|
| 194 |
<p xml:lang="ja" class="t-l-ja">
|
| 195 |
<a href="#SHTTP" title="$B0BA4D6J8E>Aw%W%m%H%3%k(B">[SHTTP]</a> $B$G@bL@$5$l$?0E9f2=A*Br;h>pJs!#6qBNE*$K$O(B
|
| 196 |
<cryptopt-list>$B!#(B
|
| 197 |
</p>
|
| 198 |
</div>
|
| 199 |
</dd>
|
| 200 |
</dl>
|
| 201 |
</div>
|
| 202 |
|
| 203 |
<div class="rfc-section" id="rfc.section.2.1">
|
| 204 |
<div class="t-pair t-heading" id="html-certs">
|
| 205 |
<h2 xml:lang="en" class="t-l-en">2.1. CERTS Element</h2>
|
| 206 |
<h2 xml:lang="ja" class="t-l-ja">2.1.
|
| 207 |
CERTS $BMWAG(B</h2>
|
| 208 |
</div>
|
| 209 |
<div class="rfc-t" id="rfc.section.2.1.p.1">
|
| 210 |
<div class="t-pair">
|
| 211 |
<p xml:lang="en" class="t-l-en">
|
| 212 |
A new CERTS HTML element is defined, which carries a
|
| 213 |
(not necessarily related) group of certificates provided
|
| 214 |
as advisory data. The element contents are not intended to be
|
| 215 |
displayed to the user. Certificate groups may be provided
|
| 216 |
appropriate for either PEM or PKCS-7 implementations. Such
|
| 217 |
certificates are supplied in the HTML document for the
|
| 218 |
convenience of the recipient, who might otherwise be unable
|
| 219 |
to retrieve the certificate (chain) corresponding to a DN
|
| 220 |
specified in an anchor.
|
| 221 |
</p>
|
| 222 |
<p xml:lang="ja" class="t-l-ja">
|
| 223 |
$B?7$7$$(B CERTS $B$H$$$&(B HTML
|
| 224 |
$BMWAG$rDj5A$7$^$9!#$3$l$O8\Ld%G!<%?$H$7$FDs6!$5$l$k>ZL@=q$N(B
|
| 225 |
($B4XO"$7$F$$$kI,MW$OL5$$(B)
|
| 226 |
$B72$r1?HB$7$^$9!#MWAG$NFbMF$OMxMQ<T$KDs<($9$k$3$H$rL\E*$H$7$F$O$$$^$;$s!#>ZL@=q72$O(B
|
| 227 |
PEM $B$+(B PKCS-7
|
| 228 |
$B$N<BAu$N$I$A$i$+E,@Z$JJ}$rDs6!$7$F9=$$$^$;$s!#$3$N>ZL@=q$O<u?.<T$NJX59$N$?$a$K(B
|
| 229 |
HTML
|
| 230 |
$BJ8=qCf$KF~$l$k$b$N$G$9$,!"F~$l$F$J$1$l$P(B<a href="#html-a-dn" title="">$BIECf$N(B
|
| 231 |
DN</a>
|
| 232 |
$B$KBP1~$9$k>ZL@=q(B($B:?(B)$B$r<h$j=P$9$3$H$,=PMh$J$$$+$b$7$l$^$;$s!#(B
|
| 233 |
</p>
|
| 234 |
</div>
|
| 235 |
</div>
|
| 236 |
|
| 237 |
<div class="rfc-t" id="rfc.section.2.1.p.2">
|
| 238 |
<div class="t-pair">
|
| 239 |
<p xml:lang="en" class="t-l-en">
|
| 240 |
The format should be the same as that of the 'Certificate-Info'
|
| 241 |
header line, of <span class="rfc-xref">
|
| 242 |
<a href="#SHTTP" title="The Secure HyperText Transfer Protocol">[SHTTP]</a>
|
| 243 |
</span> except that the
|
| 244 |
<Cert-Fmt> specifier should be provided as the FMT attribute
|
| 245 |
in the tag.
|
| 246 |
</p>
|
| 247 |
<p xml:lang="ja" class="t-l-ja">
|
| 248 |
$B=q<0$O(B <a href="#SHTTP" title="$B0BA4D6J8E>Aw%W%m%H%3%k(B">[SHTTP]</a> $B$N(B 'Certificate-Info' $BF,$N$b$N$H!"(B
|
| 249 |
<Cert-Fmt> $B;XDj;R$r%?%0$N(B FMT $BB0@-$H$9$k$3$H$r=|$$$FF10l$G$9!#(B
|
| 250 |
</p>
|
| 251 |
</div>
|
| 252 |
</div>
|
| 253 |
|
| 254 |
<div class="rfc-t" id="rfc.section.2.1.p.3">
|
| 255 |
<div class="t-pair">
|
| 256 |
<p xml:lang="en" class="t-l-en">
|
| 257 |
Multiple CERTS elements are permitted; it is suggested that CERTS
|
| 258 |
elements themselves be included in the HTML document's HEAD
|
| 259 |
element (in the hope that the data will not be displayed by
|
| 260 |
S-HTTP oblivious but HTML compliant browsers.)
|
| 261 |
</p>
|
| 262 |
<p xml:lang="ja" class="t-l-ja">
|
| 263 |
$BJ#?t$N(B CERTS $BMWAG$r;H$C$F$b9=$$$^$;$s!#(B CERTS $BMWAG<+BN$O(B HTML
|
| 264 |
$BJ8=q$N(B HEAD $BMWAGCf$K4^$a$k$3$H$r(B (S-HTTP $B$rCN$i$J$$$1$I(B HTML
|
| 265 |
$B$K$OE,9g$7$F$$$k%V%i%&%6!<$,%G!<%?$rI=<($7$J$$$3$H$r4j$C$F(B)
|
| 266 |
$BDs0F$7$^$9!#(B
|
| 267 |
</p>
|
| 268 |
</div>
|
| 269 |
</div>
|
| 270 |
</div>
|
| 271 |
|
| 272 |
<div class="rfc-section" id="rfc.section.2.2">
|
| 273 |
<div class="t-pair t-heading" id="html-cryptopts">
|
| 274 |
<h2 xml:lang="en" class="t-l-en">2.2. CRYPTOPTS Element</h2>
|
| 275 |
<h2 xml:lang="ja" class="t-l-ja">2.2.
|
| 276 |
CRYPTOPTS $BMWAG(B</h2>
|
| 277 |
</div>
|
| 278 |
<div class="rfc-t" id="rfc.section.2.2.p.1">
|
| 279 |
<div class="t-pair">
|
| 280 |
<p xml:lang="en" class="t-l-en">
|
| 281 |
Cryptopts may also be broken out into an element and referred
|
| 282 |
to in anchors by name. The NAME attribute specifies the name
|
| 283 |
by which this element may be referred to in a CRYPTOPTS
|
| 284 |
attribute in an anchor. Names must have a # as the leading
|
| 285 |
character.
|
| 286 |
</p>
|
| 287 |
<p xml:lang="ja" class="t-l-ja">
|
| 288 |
cryptopts $B$bMWAGCf$K8=$l$F(B,
|
| 289 |
$BIECf$GL>A0$r;H$C$F;2>H$5$l$k$3$H$,=PMh$^$9!#(B NAME
|
| 290 |
$BB0@-$O$3$NMWAG$,(B<a href="#html-a-cryptopts" title="">$BIECf$N(B
|
| 291 |
CRYPTOPTS
|
| 292 |
$BB0@-(B</a>$BCf$G;2>H$9$k$?$a$NL>A0$r;XDj$7$^$9!#L>A0$O@hF3J8;z$H$7$F(B
|
| 293 |
# $B$r;}$?$J$1$l$P$J$j$^$;$s!#(B
|
| 294 |
</p>
|
| 295 |
</div>
|
| 296 |
</div>
|
| 297 |
</div>
|
| 298 |
|
| 299 |
<div class="rfc-section" id="rfc.section.2.3">
|
| 300 |
<div class="t-pair t-heading">
|
| 301 |
<h2 xml:lang="en" class="t-l-en">2.3. HTML Example</h2>
|
| 302 |
<h2 xml:lang="ja" class="t-l-ja">2.3.
|
| 303 |
HTML $B$NNc(B</h2>
|
| 304 |
</div>
|
| 305 |
<div class="rfc-figure">
|
| 306 |
<span class="rfc-figure-id" id="rfc.figure.u.1"> </span>
|
| 307 |
<div class="rfc-preamble">
|
| 308 |
<div class="t-pair">
|
| 309 |
<p xml:lang="en" class="t-l-en">
|
| 310 |
An example of cryptographic data embedded in an anchor,
|
| 311 |
proceeded by a certificate group is provided below. Note the
|
| 312 |
SGML quoting syntax used to supply embedded quotation marks.
|
| 313 |
</p>
|
| 314 |
<p xml:lang="ja" class="t-l-ja">
|
| 315 |
$BIE$KKd$a9~$^$l$?0E9f2=%G!<%?$K>ZL@=q72$,B3$/Nc$r<!$K5s$2$^$9!#$J$*!"(B
|
| 316 |
SGML quote $B9=J8$rKd$a9~$_0zMQId$K;H$C$F$$$^$9!#(B
|
| 317 |
</p>
|
| 318 |
</div>
|
| 319 |
</div>
|
| 320 |
|
| 321 |
|
| 322 |
<pre class="rfc-artwork" xml:space="preserve"><CERTS FMT=PKCS-7>
|
| 323 |
MIAGCSqGSIb3DQEHAqCAMIACAQExADCABgkqhkiG9w0BBwEAAKCAM
|
| 324 |
IIBrTCCAUkCAgC2MA0GCSqGSIb3DQEBAgUAME0xCzAJBgNVBAYTAlVTMSAwH
|
| 325 |
gYDVQQKExdSU0EgRGF0YSBTZWN1cml0eSwgSW5jLjEcMBoGA1UECxMTUGVyc
|
| 326 |
29uYSBDZXJ0aWZpY2F0ZTAeFw05NDA0MDkwMDUwMzdaFw05NDA4MDIxODM4N
|
| 327 |
TdaMGcxCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdSU0EgRGF0YSBTZWN1cml0e
|
| 328 |
SwgSW5jLjEcMBoGA1UECxMTUGVyc29uYSBDZXJ0aWZpY2F0ZTEYMBYGA1UEA
|
| 329 |
xMPU2V0ZWMgQXN0cm9ub215MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAMy8Q
|
| 330 |
cW7RMrB4sTdQ8Nmb2DFmJmkWn+el+NdeamIDElX/qw9mIQu4xNj1FfepfJNx
|
| 331 |
zPvA0OtMKhy6+bkrlyMEU8CAwEAATANBgkqhkiG9w0BAQIFAANPAAYn7jDgi
|
| 332 |
rhiIL4wnP8nGzUisGSpsFsF4/7z2P2wqne6Qk8Cg/Dstu3RyaN78vAMGP8d8
|
| 333 |
2H5+Ndfhi2mRp4YHiGHz0HlK6VbPfnyvS2wdjCCAccwggFRAgUCQAAAFDANB
|
| 334 |
gkqhkiG9w0BAQIFADBfMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIERhd
|
| 335 |
GEgU2VjdXJpdHksIEluYy4xLjAsBgNVBAsTJUxvdyBBc3N1cmFuY2UgQ2Vyd
|
| 336 |
GlmaWNhdGlvbiBBdXRob3JpdHkwHhcNOTQwMTA3MDAwMDAwWhcNOTYwMTA3M
|
| 337 |
jM1OTU5WjBNMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIERhdGEgU2Vjd
|
| 338 |
XJpdHksIEluYy4xHDAaBgNVBAsTE1BlcnNvbmEgQ2VydGlmaWNhdGUwaTANB
|
| 339 |
gkqhkiG9w0BAQEFAANYADBVAk4GqghQDa9Xi/2zAdYEqJVIcYhlLN1FpI9tX
|
| 340 |
Q1m6zZ39PYXK8Uhoj0Es7kWRv8hC04vqkOKwndWbzVtvoHQOmP8nOkkuBi+A
|
| 341 |
QvgFoRcgOUCAwEAATANBgkqhkiG9w0BAQIFAANhAD/5Uo7xDdp49oZm9GoNc
|
| 342 |
PhZcW1e+nojLvHXWAU/CBkwfcR+FSf4hQ5eFu1AjYv6Wqf430Xe9Et5+jgnM
|
| 343 |
Tiq4LnwgTdA8xQX4elJz9QzQobkE3XVOjVAtCFcmiin80RB8AAAMYAAAAAAA
|
| 344 |
AAAAA==
|
| 345 |
</CERTS>
|
| 346 |
<A name=foobar
|
| 347 |
DN="CN=Setec Astronomy, OU=Persona Certificate,
|
| 348 |
O=&quot;RSA Data Security, Inc.&quot;, C=US"
|
| 349 |
CRYPTOPTS="SHTTP-Privacy-Enhancements: recv-refused=encrypt;
|
| 350 |
SHTTP-Signature-Algorithms: recv-required=NIST-DSS"
|
| 351 |
HREF="shttp://research.nsa.gov/skipjack-holes.html">
|
| 352 |
Don't read this. </A>
|
| 353 |
</pre>
|
| 354 |
|
| 355 |
</div>
|
| 356 |
</div>
|
| 357 |
</div>
|
| 358 |
|
| 359 |
<div class="rfc-section" id="rfc.section.3">
|
| 360 |
<div class="t-pair t-heading">
|
| 361 |
<h1 xml:lang="en" class="t-l-en">3. Security Considerations</h1>
|
| 362 |
<h1 xml:lang="ja" class="t-l-ja">3.
|
| 363 |
$B0BA4@-$K4X$7$F(B</h1>
|
| 364 |
</div>
|
| 365 |
<div class="rfc-t" id="rfc.section.3.p.1">
|
| 366 |
<div class="t-pair">
|
| 367 |
<p xml:lang="en" class="t-l-en">
|
| 368 |
This entire document is about security.
|
| 369 |
</p>
|
| 370 |
<p xml:lang="ja" class="t-l-ja">
|
| 371 |
$B$3$NJ8=qA4BN$,0BA4@-$K4X$7$F$NOC$G$9!#(B
|
| 372 |
</p>
|
| 373 |
</div>
|
| 374 |
</div>
|
| 375 |
</div>
|
| 376 |
|
| 377 |
<div id="rfc-authors" class="rfc-section">
|
| 378 |
<div id="rfc.authors" class="t-pair t-heading">
|
| 379 |
<h1 xml:lang="en" class="t-l-en">4. Author's Addresses</h1>
|
| 380 |
<h1 xml:lang="ja" class="t-l-ja">4. $BCx<T$NO"Mm@h(B</h1>
|
| 381 |
</div>
|
| 382 |
<ul class="rfc-author">
|
| 383 |
<li class="rfc-author-fullname">Eric Rescorla</li>
|
| 384 |
<li class="rfc-organization">RTFM, Inc.</li>
|
| 385 |
<li class="rfc-street">30 Newell Road, #16</li>
|
| 386 |
<li class="rfc-city">East Palo Alto</li>
|
| 387 |
<li class="rfc-region">CA</li>
|
| 388 |
<li class="rfc-code">94303</li>
|
| 389 |
<li class="rfc-phone">$BEEOC(B: (650) 328-8631</li>
|
| 390 |
<li class="rfc-email">$BEE;R%a%$%k(B: <<a href="mailto:ekr@rtfm.com">ekr@rtfm.com</a>></li>
|
| 391 |
</ul>
|
| 392 |
<ul class="rfc-author">
|
| 393 |
<li class="rfc-author-fullname">Allan M. Schiffman</li>
|
| 394 |
<li class="rfc-organization">SPYRUS/Terisa</li>
|
| 395 |
<li class="rfc-street">5303 Betsy Ross Drive</li>
|
| 396 |
<li class="rfc-city">Santa Clara</li>
|
| 397 |
<li class="rfc-region">CA</li>
|
| 398 |
<li class="rfc-code">95054</li>
|
| 399 |
<li class="rfc-phone">$BEEOC(B: (408) 327-1901</li>
|
| 400 |
<li class="rfc-email">$BEE;R%a%$%k(B: <<a href="mailto:ams@terisa.com">ams@terisa.com</a>></li>
|
| 401 |
</ul>
|
| 402 |
</div>
|
| 403 |
<div class="rfc-section" id="rfc.references">
|
| 404 |
<div class="t-pair t-heading">
|
| 405 |
<h1 xml:lang="en" class="t-l-en">5. References</h1>
|
| 406 |
<h1 xml:lang="ja" class="t-l-ja">5. $B;29MJ88%(B</h1>
|
| 407 |
</div>
|
| 408 |
<dl>
|
| 409 |
<dt id="SHTTP">[SHTTP]</dt>
|
| 410 |
<dd>$B!X(B<cite>The Secure HyperText Transfer Protocol</cite>$B!Y(B<span class="t-pair">
|
| 411 |
<span xml:lang="ja" class="t-l-ja">, $B!X(B<cite>$B0BA4D6J8E>Aw%W%m%H%3%k(B</cite>$B!Y(B</span>
|
| 412 |
</span>, Rescorla, E., Schiffman, A., <a href="http://suika.fam.cx/uri-res/N2L?urn:ietf:rfc:2660" title="URI: <http://suika.fam.cx/uri-res/N2L?urn:ietf:rfc:2660>">RFC 2660</a>$B!#(B</dd>
|
| 413 |
</dl>
|
| 414 |
</div>
|
| 415 |
<div id="rfc-copyright" class="rfc-section">
|
| 416 |
<div class="t-pair" id="rfc.copyright">
|
| 417 |
<h1 xml:lang="en" class="t-l-en">6. Full Copyright Statement</h1>
|
| 418 |
<h1 xml:lang="ja" class="t-l-ja">6. $B40A4$JCx:n8"@<L@(B</h1>
|
| 419 |
</div>
|
| 420 |
<div class="t-pair t-hide-no">
|
| 421 |
<p class="t-l-en" xml:lang="en">
|
| 422 |
Copyright ©
|
| 423 |
<a href="http://www.isoc.org/">The Internet Society</a>
|
| 424 |
(1999).
|
| 425 |
All Rights Reserved.
|
| 426 |
</p>
|
| 427 |
<p class="t-l-ja" xml:lang="ja">
|
| 428 |
$BCx:n8"(B ©
|
| 429 |
<a href="http://www.isoc.org/">The Internet Society</a>
|
| 430 |
(1999)$B!#A48"N1J]!#(B
|
| 431 |
</p>
|
| 432 |
</div>
|
| 433 |
<div class="rfc-t">
|
| 434 |
<div class="t-pair t-hide-no">
|
| 435 |
<p class="t-l-en" xml:lang="en">
|
| 436 |
This document and translations of it may be copied
|
| 437 |
and furnished
|
| 438 |
to others, and derivative works that comment on or otherwise
|
| 439 |
explain it or assist in its implementation may be prepared,
|
| 440 |
copied, published and distributed, in whole or in part,
|
| 441 |
without restriction of any kind, provided that the
|
| 442 |
above copyright notice
|
| 443 |
and this paragraph are included on all such copies and
|
| 444 |
derivative works. However, this document itself may
|
| 445 |
not be modified in any way, such as by removing the
|
| 446 |
copyright notice or references to the Internet Society
|
| 447 |
or other Internet organizations, except as
|
| 448 |
needed for the purpose of developing Internet standards
|
| 449 |
in which case the procedures for copyrights defined in
|
| 450 |
the Internet Standards process must be followed, or as
|
| 451 |
required to translate it into languages other than English.
|
| 452 |
</p>
|
| 453 |
<p class="t-l-ja" xml:lang="ja">
|
| 454 |
$B$3$NJ8=q$H$=$NK]Lu$OJ#<L$7B><T$KDs6!$7$F$bNI$/!"$^$?$3$l$K$D$$$FCm<a$r2C$($k$+$b$7$/$O@bL@$9$k!"$"$k$$$O$=$N<BAu$r=u$1$kGI@8E*:n6H$O!"$=$NA4It$^$?$O0lIt$r!">e5-$NCx:n8"I=<(5Z$S$3$N@a$rA4$F$NJ#<LJ*5Z$SGI@8E*:n6H$K4^$`8B$j$K$*$$$F!"0l@Z$N@)8BL5$7$K!"MQ0U!&J#<L!&=PHG!&G[I[$7$FNI$$!#$7$+$7!"$3$NJ8=q<+BN$O!"Cx:n8"I=<($"$k$$$O(B
|
| 455 |
Internet Society $BKt$OB>$N(B Internet
|
| 456 |
$BAH?%$X$N8@5Z$r<h$j=|$/$J$I!"$$$+$J$kJ}K!$K$;$hJQ99$7$F$O$J$i$J$$!#C"$7!"(B
|
| 457 |
Internet $BI8=`2=2aDx$GDj5A$5$l$?Cx:n8"$N$?$a$N<jB3$-$K=>$$(B
|
| 458 |
Internet $BI8=`$r3+H/$9$kL\E*$KI,MW$J>l9g!"$"$k$$$O1Q8l0J30$N8@8l$KK]Lu$9$k$N$KI,MW$J>l9g$r=|$/!#(B
|
| 459 |
</p>
|
| 460 |
</div>
|
| 461 |
</div>
|
| 462 |
<div class="rfc-t">
|
| 463 |
<div class="t-pair t-hide-no">
|
| 464 |
<p class="t-l-en" xml:lang="en">
|
| 465 |
The limited permissions granted above are perpetual and will
|
| 466 |
not be revoked by the Internet Society or its successors or
|
| 467 |
assigns.
|
| 468 |
</p>
|
| 469 |
<p class="t-l-ja" xml:lang="ja">
|
| 470 |
$B>e5-$GG'$a$?$3$N@)8BIU$-5vBz$O915WE*$J$b$N$G$"$j!"(B
|
| 471 |
Internet Society $B$b$7$/$O$=$N8e7Q<T$b$7$/$O$=$N>yEO<T$K$h$jGK4~$5$l$k$3$H$O$J$$!#(B
|
| 472 |
</p>
|
| 473 |
</div>
|
| 474 |
</div>
|
| 475 |
<div class="rfc-t">
|
| 476 |
<div class="t-pair t-hide-no">
|
| 477 |
<p class="t-l-en" xml:lang="en">
|
| 478 |
This document and the information contained herein is provided
|
| 479 |
on an $B!H(B<strong>AS IS</strong>$B!I(B basis and
|
| 480 |
<strong>THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
|
| 481 |
TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED,
|
| 482 |
INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF
|
| 483 |
THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY
|
| 484 |
IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR
|
| 485 |
A PARTICULAR PURPOSE</strong>.
|
| 486 |
</p>
|
| 487 |
<p class="t-l-ja" xml:lang="ja">
|
| 488 |
$B$3$NJ8=q5Z$S$3$3$K4^$^$l$k>pJs$O!V(B<strong>$B8=>uM-;Q(B</strong>$B!W$GDs6!$5$l!"(B
|
| 489 |
<strong>Internet Society $B$*$h$S(B
|
| 490 |
<a href="http://www.ietf.org/">Internet Engineering Task Force
|
| 491 |
(Internet $B5;=QFCJLD4::0Q0w2q(B)</a>
|
| 492 |
$B$O$3$3$K4^$^$l$k>pJs$N;HMQ$,$$$+$J$k8"Mx$r$b?/32$7$J$$$H$$$&J]>Z$^$?$O;T>l@-$"$k$$$OFCDjL\E*$X$NE,Ev@-$K$D$$$F$N0EL[E*J]>Z$r4^$a$F$3$l$K8BDj$5$l$J$$!"L@<($"$k$$$O0E<($K$h$k!"0l@Z$NJ]>Z$rH]G'$9$k(B</strong>$B!#(B
|
| 493 |
</p>
|
| 494 |
</div>
|
| 495 |
</div>
|
| 496 |
<ins class="t-note t-l-ja" xml:lang="ja">
|
| 497 |
<p class="rfc-t">
|
| 498 |
(<span class="t-note-title">$BLuCm(B:</span>
|
| 499 |
$B@5<0$JCx:n8"@<L@$O1Q8l$N86J8$N$_$G$"$j!"Lu<T$O0l@Z$NJ]>Z(B
|
| 500 |
($BK]LuJ8$,86J8$H87L)$K0lCW$7$F$$$k$+$r4^$`$,!"$3$l$K8BDj$5$l$J$$!#(B)
|
| 501 |
$B$r(B<strong title="NOT">$B$7$J$$(B</strong>$B!#(B<a href="#rfc-t-copyright">$BLuJ8$K$D$$$F$NCx:n8"@<L@(B</a>$B$b;2>H$;$h!#(B)
|
| 502 |
</p>
|
| 503 |
</ins>
|
| 504 |
</div>
|
| 505 |
|
| 506 |
<div id="rfc-acknowledgement-editor" class="rfc-section">
|
| 507 |
<div class="t-heading t-pair">
|
| 508 |
<h1 xml:lang="en" class="t-l-en">Acknowledgement</h1>
|
| 509 |
<h1 xml:lang="ja" class="t-l-ja">$B<U<-(B</h1>
|
| 510 |
</div>
|
| 511 |
<div class="rfc-t">
|
| 512 |
<div class="t-pair">
|
| 513 |
<p class="t-l-en" xml:lang="en">
|
| 514 |
Funding for the
|
| 515 |
<a href="http://www.rfceditor.org/">RFC editor</a>
|
| 516 |
function is currently provided by the
|
| 517 |
<a href="http://www.isoc.org/">Internet Society</a>.
|
| 518 |
</p>
|
| 519 |
<p class="t-l-ja" xml:lang="ja">
|
| 520 |
<a href="http://www.rfceditor.org/" xml:lang="en">RFC
|
| 521 |
$BJT=8<T(B</a>$B6HL3$N;q6b1g=u$O8=:_(B
|
| 522 |
<a href="http://www.isoc.org/">Internet Society</a>
|
| 523 |
$B$K$h$j9T$o$l$F$$$^$9!#(B
|
| 524 |
</p>
|
| 525 |
</div>
|
| 526 |
</div>
|
| 527 |
</div>
|
| 528 |
<ins id="rfc-translators-note" class="t-note t-l-ja" xml:lang="ja">
|
| 529 |
<div class="rfc-section" id="t-change">
|
| 530 |
<h1>$BK]Lu$NJQ99MzNr(B</h1>
|
| 531 |
<dl>
|
| 532 |
<dt>2002-05-12 <a href="mailto:w@suika.fam.cx" title="$BEE;R%a%$%k(B: <w@suika.fam.cx>">$B$o$+$P(B</a>
|
| 533 |
</dt>
|
| 534 |
<dd>
|
| 535 |
<ul>
|
| 536 |
<li>$BF|K\8l$KK]Lu!#(B</li>
|
| 537 |
</ul>
|
| 538 |
</dd>
|
| 539 |
<dt>2002-05-26 <a href="mailto:w@suika.fam.cx" title="$BEE;R%a%$%k(B: <w@suika.fam.cx>">$B$o$+$P(B</a>
|
| 540 |
</dt>
|
| 541 |
<dd>
|
| 542 |
<ul>
|
| 543 |
<li>
|
| 544 |
<a href="http://suika.fam.cx/uri-res/N2L?urn:ietf:rfc:2629" title="RFC 2629">RFC 2629</a> $B$G%^!<%/IU$1!#(B</li>
|
| 545 |
</ul>
|
| 546 |
</dd>
|
| 547 |
</dl>
|
| 548 |
</div>
|
| 549 |
<div class="rfc-section" id="rfc-t-copyright">
|
| 550 |
<h1>$BLuJ8$K$D$$$F$NCx:n8"@<L@(B</h1>
|
| 551 |
<p>
|
| 552 |
<a href="#rfc-copyright">$B86J8$NCx:n8"@<L@(B</a>$B$,!"LuJ8$K$D$$$F$bF1MM$KE,MQ$5$l$^$9!#(B</p>
|
| 553 |
<p>$B$^$?!"2~Lu$=$NB>$N86J8$NCx:n8"@<L@$KH?$7$J$$HO0O$K$*$1$k2~JQ$O!"0l@Z$N5v2DL5$/9T$C$F9=$$$^$;$s!#(B</p>
|
| 554 |
</div>
|
| 555 |
</ins>
|
| 556 |
</body>
|
| 557 |
</html>
|
Parent Directory
| 
Revision Log