/[suikacvs]/doc/rfc-ja/rfc2659-ja.rfcja
Suika

Contents of /doc/rfc-ja/rfc2659-ja.rfcja

Parent Directory Parent Directory | Revision Log Revision Log


Revision 1.3 - (show annotations) (download)
Sat Sep 13 08:57:55 2003 UTC (20 years, 7 months ago) by wakaba
Branch: MAIN
CVS Tags: HEAD
Changes since 1.2: +3 -3 lines
Some markup fixes to be valid

1 <?xml version="1.0" encoding="iso-2022-jp"?>
2 <!DOCTYPE rfc SYSTEM "rfc2629.dtd" [
3 <!ENTITY rfc.number "2659">
4 <!ENTITY ja.dereference "$B2r;2>H(B (dereference) ">
5 <!ENTITY ja.escape-quote " quote ">
6 <!ENTITY ja.protocol "$B%W%m%H%3%k(B">
7 <!ENTITY ja.security "$B0BA4@-(B">
8 <!ENTITY ja.crypt.advisory "$B8\Ld(B">
9 <!ENTITY ja.crypt.cryptopts " cryptopts ">
10 <!ENTITY ja.html.browser "$B%V%i%&%6!<(B">
11 <!ENTITY ja.html.form " form ">
12 <!ENTITY ja.html.hypertext "$BD6J8(B">
13 <!ENTITY ja.network.client "$B%/%i%$%"%s%H(B">
14 ]>
15 <?rfc symrefs="yes"?>
16 <rfc number="&rfc.number;" category="exp"
17 xmlns:myns="mailto:julian.reschke@greenbytes.de?subject=rcf2629.xslt"
18 xmlns:ja="http://suika.fam.cx/~wakaba/lang/rfc/translation/">
19 <front>
20 <title>Security Extensions For HTML</title>
21 <ja:title xml:lang="ja">HTML$B$N(B&ja.security;$B3HD%(B</ja:title>
22 <author initials="E." surname="Rescorla" fullname="Eric Rescorla">
23 <organization>RTFM, Inc.</organization>
24 <address>
25 <postal>
26 <street>30 Newell Road, #16</street>
27 <city>East Palo Alto</city> <region>CA</region>
28 <code>94303</code>
29 <country ja:show="no">US</country>
30 </postal>
31 <phone>(650) 328-8631</phone>
32 <email>ekr@rtfm.com</email>
33 </address>
34 </author>
35 <author initials="A." surname="Schiffman" fullname="Allan M. Schiffman">
36 <organization abbrev="Terisa Systems, Inc.">SPYRUS/Terisa</organization>
37 <address>
38 <postal>
39 <street>5303 Betsy Ross Drive</street>
40 <city>Santa Clara</city> <region>CA</region>
41 <code>95054</code>
42 <country ja:show="no">US</country>
43 </postal>
44 <phone>(408) 327-1901</phone>
45 <email>ams@terisa.com</email>
46 </address>
47 </author>
48 <date month="August" year="1999" />
49 <abstract>
50 <t>
51 <ja:pair>
52 <ja:l xml:lang="en">
53 This memo describes a syntax for embedding S-HTTP negotiation
54 parameters in HTML documents. S-HTTP, as described by
55 <ja:link type="rfc" number="2660" />, contains the concept of
56 negotiation headers which reflect the potential receiver of
57 a message's preferences as to which cryptographic enhancements
58 should be applied to the message. This document describes a
59 syntax for binding these negotiation parameters to HTML anchors.
60 </ja:l>
61 <ja:l xml:lang="ja">
62 $B$3$N%a%b$O!"(B HTML $BJ8=qCf$K(B S-HTTP
63 $B@^>W%Q%i%a!<%?!<$rKd$a9~$`9=J8$r@bL@$7$^$9!#(B
64 <ja:link type="rfc" number="2660" /> $B$G@bL@$5$l$F$$$k(B
65 S-HTTP $B$O!"$I$N0E9f3HD%$r%a%C%;!<%8$KE,MQ$9$k$+$N!"%a%C%;!<%8$N@x:_<u?.<T$N9%$_$rH?1G$9$k@^>WF,$N35G0$r4^$s$G$$$^$9!#$3$NJ8=q$O$3$l$i$N@^>W%Q%i%a!<%?!<$r(B
66 HTML $BIE$KG{$jIU$1$k9=J8$r@bL@$7$^$9!#(B
67 </ja:l>
68 </ja:pair>
69 </t>
70 </abstract>
71 </front>
72 <ja:front>
73 <author fullname="$B$o$+$P(B" ja:id="wakaba">
74 <address>
75 <email>w@suika.fam.cx</email>
76 <uri>http://suika.fam.cx/~wakaba/</uri>
77 </address>
78 </author>
79 <ja:change>
80 <ja:item year="2002" month="05" day="12">
81 <author ja:ref="wakaba" />
82 <t>$BF|K\8l$KK]Lu!#(B</t>
83 </ja:item>
84 <ja:item year="2002" month="05" day="26">
85 <author ja:ref="wakaba" />
86 <t><ja:link type="rfc" number="2629" /> $B$G%^!<%/IU$1!#(B</t>
87 </ja:item>
88 </ja:change><!-- $Date: 2002/07/26 11:56:16 $ -->
89 </ja:front>
90 <middle>
91
92 <section title="Introduction">
93 <ja:note>
94 <t xml:lang="ja">$B86J8$G7gMn!#(B</t>
95 </ja:note>
96 </section>
97
98 <section title="Anchor Attributes" ja:title-ja="$BIEB0@-(B">
99 <t>
100 <ja:pair>
101 <ja:l xml:lang="en">
102 We define the following new anchor (and form submission) attributes:
103 </ja:l>
104 <ja:l xml:lang="ja">
105 $B<!$N?7$7$$IE(B ($B$H(B&ja.html.form;$BAw?.(B) $BB0@-$rDj5A$7$^$9!#(B
106 </ja:l>
107 </ja:pair>
108
109 <list style="hanging">
110 <t hangText="DN" ja:anchor="html-a-dn">
111 <ja:pair>
112 <ja:l xml:lang="en">
113 The distinguished name of the principal for whom the
114 request should be encrypted when dereferencing the anchor's url.
115 This need not be specified, but failure to do so runs the risk
116 that the client will be unable to determine the DN and therefore
117 will be unable to encrypt. This should be specified in the form
118 of <ja:link type="rfc" number="1485">RFC1485</ja:link>,
119 using SGML quoting conventions as needed.
120 </ja:l>
121 <ja:l xml:lang="ja">
122 $BIE$N(B url
123 $B$r(B&ja.dereference;$B$9$k;~$KMW5a$,0E9f2=$9$k$Y$-BP>]<T$N<1JL$5$l$?L>A0!#(B
124 $B$3$l$O;XDj$9$kI,MW$O$"$j$^$;$s$,!"(B&ja.network.client;$B$,(B DN
125 $B$r7hDj=PMh$:!"$R$$$F$O0E9f2=$b=PMh$J$/$J$k4m81$rKA$9$3$H$K$J$j$^$9!#(B
126 <ja:link type="rfc" number="1485" />
127 $B$N7A<0$G!"I,MW$K1~$8$F(B SGML
128 &ja.escape-quote;$BK!$r;H$C$F!";XDj$9$k$Y$-$G$9!#(B
129 </ja:l>
130 </ja:pair>
131 </t>
132 <t hangText="NONCE" ja:anchor="html-a-nonce">
133 <ja:pair>
134 <ja:l xml:lang="en">
135 A free-format string (appropriately SGML quoted) which
136 is to be included in a SHTTP-Nonce: header (after SGML quoting
137 is removed) when the anchor is dereferenced.
138 </ja:l>
139 <ja:l xml:lang="ja">
140 ($BE,@Z$K(B SGML &ja.escape-quote;$B$7$?(B)
141 $B<+M37A<0J8;zNs$G!"IE$,(B&ja.dereference;$B$5$l$k;~$K(B
142 (SGML $B0zMQId$r>C$7$?8e$G(B) SHTTP-Nonce: $BF,$K4^$a$i$l$k$b$N!#(B
143 </ja:l>
144 </ja:pair>
145 </t>
146 <t hangText="CRYPTOPTS" ja:anchor="html-a-cryptopts">
147 <ja:pair>
148 <ja:l xml:lang="en">
149 Cryptographic option information as described in
150 <xref target="SHTTP" />. Specifically, the
151 &lt;cryptopt-list&gt; production.
152 </ja:l>
153 <ja:l xml:lang="ja">
154 <xref target="SHTTP" /> $B$G@bL@$5$l$?0E9f2=A*Br;h>pJs!#6qBNE*$K$O(B
155 &lt;cryptopt-list&gt;$B!#(B
156 </ja:l>
157 </ja:pair>
158 </t>
159 </list>
160 </t>
161
162 <section title="CERTS Element" ja:title-ja="CERTS $BMWAG(B"
163 anchor="html-certs">
164 <t>
165 <ja:pair>
166 <ja:l xml:lang="en">
167 A new CERTS HTML element is defined, which carries a
168 (not necessarily related) group of certificates provided
169 as advisory data. The element contents are not intended to be
170 displayed to the user. Certificate groups may be provided
171 appropriate for either PEM or PKCS-7 implementations. Such
172 certificates are supplied in the HTML document for the
173 convenience of the recipient, who might otherwise be unable
174 to retrieve the certificate (chain) corresponding to a DN
175 specified in an anchor.
176 </ja:l>
177 <ja:l xml:lang="ja">
178 $B?7$7$$(B CERTS $B$H$$$&(B HTML
179 $BMWAG$rDj5A$7$^$9!#$3$l$O(B&ja.crypt.advisory;$B%G!<%?$H$7$FDs6!$5$l$k>ZL@=q$N(B
180 ($B4XO"$7$F$$$kI,MW$OL5$$(B)
181 $B72$r1?HB$7$^$9!#MWAG$NFbMF$OMxMQ<T$KDs<($9$k$3$H$rL\E*$H$7$F$O$$$^$;$s!#>ZL@=q72$O(B
182 PEM $B$+(B PKCS-7
183 $B$N<BAu$N$I$A$i$+E,@Z$JJ}$rDs6!$7$F9=$$$^$;$s!#$3$N>ZL@=q$O<u?.<T$NJX59$N$?$a$K(B
184 HTML
185 $BJ8=qCf$KF~$l$k$b$N$G$9$,!"F~$l$F$J$1$l$P(B<xref target="html-a-dn">$BIECf$N(B
186 DN</xref>
187 $B$KBP1~$9$k>ZL@=q(B($B:?(B)$B$r<h$j=P$9$3$H$,=PMh$J$$$+$b$7$l$^$;$s!#(B
188 </ja:l>
189 </ja:pair>
190 </t>
191
192 <t>
193 <ja:pair>
194 <ja:l xml:lang="en">
195 The format should be the same as that of the 'Certificate-Info'
196 header line, of <xref target="SHTTP" /> except that the
197 &lt;Cert-Fmt&gt; specifier should be provided as the FMT attribute
198 in the tag.
199 </ja:l>
200 <ja:l xml:lang="ja">
201 $B=q<0$O(B <xref target="SHTTP" /> $B$N(B 'Certificate-Info' $BF,$N$b$N$H!"(B
202 &lt;Cert-Fmt&gt; $B;XDj;R$r%?%0$N(B FMT $BB0@-$H$9$k$3$H$r=|$$$FF10l$G$9!#(B
203 </ja:l>
204 </ja:pair>
205 </t>
206
207 <t>
208 <ja:pair>
209 <ja:l xml:lang="en">
210 Multiple CERTS elements are permitted; it is suggested that CERTS
211 elements themselves be included in the HTML document's HEAD
212 element (in the hope that the data will not be displayed by
213 S-HTTP oblivious but HTML compliant browsers.)
214 </ja:l>
215 <ja:l xml:lang="ja">
216 $BJ#?t$N(B CERTS $BMWAG$r;H$C$F$b9=$$$^$;$s!#(B CERTS $BMWAG<+BN$O(B HTML
217 $BJ8=q$N(B HEAD $BMWAGCf$K4^$a$k$3$H$r(B (S-HTTP $B$rCN$i$J$$$1$I(B HTML
218 $B$K$OE,9g$7$F$$$k(B&ja.html.browser;$B$,%G!<%?$rI=<($7$J$$$3$H$r4j$C$F(B)
219 $BDs0F$7$^$9!#(B
220 </ja:l>
221 </ja:pair>
222 </t>
223 </section>
224
225 <section title="CRYPTOPTS Element" ja:title-ja="CRYPTOPTS $BMWAG(B"
226 anchor="html-cryptopts">
227 <t>
228 <ja:pair>
229 <ja:l xml:lang="en">
230 Cryptopts may also be broken out into an element and referred
231 to in anchors by name. The NAME attribute specifies the name
232 by which this element may be referred to in a CRYPTOPTS
233 attribute in an anchor. Names must have a # as the leading
234 character.
235 </ja:l>
236 <ja:l xml:lang="ja">
237 &ja.crypt.cryptopts;$B$bMWAGCf$K8=$l$F(B,
238 $BIECf$GL>A0$r;H$C$F;2>H$5$l$k$3$H$,=PMh$^$9!#(B NAME
239 $BB0@-$O$3$NMWAG$,(B<xref target="html-a-cryptopts">$BIECf$N(B
240 CRYPTOPTS
241 $BB0@-(B</xref>$BCf$G;2>H$9$k$?$a$NL>A0$r;XDj$7$^$9!#L>A0$O@hF3J8;z$H$7$F(B
242 # $B$r;}$?$J$1$l$P$J$j$^$;$s!#(B
243 </ja:l>
244 </ja:pair>
245 </t>
246 </section>
247
248 <section title="HTML Example" ja:title-ja="HTML $B$NNc(B">
249 <figure>
250 <preamble>
251 <ja:pair>
252 <ja:l xml:lang="en">
253 An example of cryptographic data embedded in an anchor,
254 proceeded by a certificate group is provided below. Note the
255 SGML quoting syntax used to supply embedded quotation marks.
256 </ja:l>
257 <ja:l xml:lang="ja">
258 $BIE$KKd$a9~$^$l$?0E9f2=%G!<%?$K>ZL@=q72$,B3$/Nc$r<!$K5s$2$^$9!#$J$*!"(B
259 SGML &ja.escape-quote;$B9=J8$rKd$a9~$_0zMQId$K;H$C$F$$$^$9!#(B
260 </ja:l>
261 </ja:pair>
262 </preamble>
263
264 <!--
265 <ja:pair><ja:l xml:lang="en">
266 -->
267 <artwork xml:space="preserve"><![CDATA[<CERTS FMT=PKCS-7>
268 MIAGCSqGSIb3DQEHAqCAMIACAQExADCABgkqhkiG9w0BBwEAAKCAM
269 IIBrTCCAUkCAgC2MA0GCSqGSIb3DQEBAgUAME0xCzAJBgNVBAYTAlVTMSAwH
270 gYDVQQKExdSU0EgRGF0YSBTZWN1cml0eSwgSW5jLjEcMBoGA1UECxMTUGVyc
271 29uYSBDZXJ0aWZpY2F0ZTAeFw05NDA0MDkwMDUwMzdaFw05NDA4MDIxODM4N
272 TdaMGcxCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdSU0EgRGF0YSBTZWN1cml0e
273 SwgSW5jLjEcMBoGA1UECxMTUGVyc29uYSBDZXJ0aWZpY2F0ZTEYMBYGA1UEA
274 xMPU2V0ZWMgQXN0cm9ub215MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAMy8Q
275 cW7RMrB4sTdQ8Nmb2DFmJmkWn+el+NdeamIDElX/qw9mIQu4xNj1FfepfJNx
276 zPvA0OtMKhy6+bkrlyMEU8CAwEAATANBgkqhkiG9w0BAQIFAANPAAYn7jDgi
277 rhiIL4wnP8nGzUisGSpsFsF4/7z2P2wqne6Qk8Cg/Dstu3RyaN78vAMGP8d8
278 2H5+Ndfhi2mRp4YHiGHz0HlK6VbPfnyvS2wdjCCAccwggFRAgUCQAAAFDANB
279 gkqhkiG9w0BAQIFADBfMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIERhd
280 GEgU2VjdXJpdHksIEluYy4xLjAsBgNVBAsTJUxvdyBBc3N1cmFuY2UgQ2Vyd
281 GlmaWNhdGlvbiBBdXRob3JpdHkwHhcNOTQwMTA3MDAwMDAwWhcNOTYwMTA3M
282 jM1OTU5WjBNMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIERhdGEgU2Vjd
283 XJpdHksIEluYy4xHDAaBgNVBAsTE1BlcnNvbmEgQ2VydGlmaWNhdGUwaTANB
284 gkqhkiG9w0BAQEFAANYADBVAk4GqghQDa9Xi/2zAdYEqJVIcYhlLN1FpI9tX
285 Q1m6zZ39PYXK8Uhoj0Es7kWRv8hC04vqkOKwndWbzVtvoHQOmP8nOkkuBi+A
286 QvgFoRcgOUCAwEAATANBgkqhkiG9w0BAQIFAANhAD/5Uo7xDdp49oZm9GoNc
287 PhZcW1e+nojLvHXWAU/CBkwfcR+FSf4hQ5eFu1AjYv6Wqf430Xe9Et5+jgnM
288 Tiq4LnwgTdA8xQX4elJz9QzQobkE3XVOjVAtCFcmiin80RB8AAAMYAAAAAAA
289 AAAAA==
290 </CERTS>
291 <A name=foobar
292 DN="CN=Setec Astronomy, OU=Persona Certificate,
293 O=&quot;RSA Data Security, Inc.&quot;, C=US"
294 CRYPTOPTS="SHTTP-Privacy-Enhancements: recv-refused=encrypt;
295 SHTTP-Signature-Algorithms: recv-required=NIST-DSS"
296 HREF="shttp://research.nsa.gov/skipjack-holes.html">
297 Don't read this. </A>
298 ]]></artwork>
299 <!--
300 </ja:l><ja:l xml:lang="ja">
301 <artwork xml:space="preserve"><![CDATA[<CERTS FMT=PKCS-7>
302 MIAGCSqGSIb3DQEHAqCAMIACAQExADCABgkqhkiG9w0BBwEAAKCAM
303 IIBrTCCAUkCAgC2MA0GCSqGSIb3DQEBAgUAME0xCzAJBgNVBAYTAlVTMSAwH
304 gYDVQQKExdSU0EgRGF0YSBTZWN1cml0eSwgSW5jLjEcMBoGA1UECxMTUGVyc
305 29uYSBDZXJ0aWZpY2F0ZTAeFw05NDA0MDkwMDUwMzdaFw05NDA4MDIxODM4N
306 TdaMGcxCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdSU0EgRGF0YSBTZWN1cml0e
307 SwgSW5jLjEcMBoGA1UECxMTUGVyc29uYSBDZXJ0aWZpY2F0ZTEYMBYGA1UEA
308 xMPU2V0ZWMgQXN0cm9ub215MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAMy8Q
309 cW7RMrB4sTdQ8Nmb2DFmJmkWn+el+NdeamIDElX/qw9mIQu4xNj1FfepfJNx
310 zPvA0OtMKhy6+bkrlyMEU8CAwEAATANBgkqhkiG9w0BAQIFAANPAAYn7jDgi
311 rhiIL4wnP8nGzUisGSpsFsF4/7z2P2wqne6Qk8Cg/Dstu3RyaN78vAMGP8d8
312 2H5+Ndfhi2mRp4YHiGHz0HlK6VbPfnyvS2wdjCCAccwggFRAgUCQAAAFDANB
313 gkqhkiG9w0BAQIFADBfMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIERhd
314 GEgU2VjdXJpdHksIEluYy4xLjAsBgNVBAsTJUxvdyBBc3N1cmFuY2UgQ2Vyd
315 GlmaWNhdGlvbiBBdXRob3JpdHkwHhcNOTQwMTA3MDAwMDAwWhcNOTYwMTA3M
316 jM1OTU5WjBNMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIERhdGEgU2Vjd
317 XJpdHksIEluYy4xHDAaBgNVBAsTE1BlcnNvbmEgQ2VydGlmaWNhdGUwaTANB
318 gkqhkiG9w0BAQEFAANYADBVAk4GqghQDa9Xi/2zAdYEqJVIcYhlLN1FpI9tX
319 Q1m6zZ39PYXK8Uhoj0Es7kWRv8hC04vqkOKwndWbzVtvoHQOmP8nOkkuBi+A
320 QvgFoRcgOUCAwEAATANBgkqhkiG9w0BAQIFAANhAD/5Uo7xDdp49oZm9GoNc
321 PhZcW1e+nojLvHXWAU/CBkwfcR+FSf4hQ5eFu1AjYv6Wqf430Xe9Et5+jgnM
322 Tiq4LnwgTdA8xQX4elJz9QzQobkE3XVOjVAtCFcmiin80RB8AAAMYAAAAAAA
323 AAAAA==
324 </CERTS>
325 <A name=foobar
326 DN="CN=Setec $BE7J83X(B, OU=$B%Z%k%=%J>ZL@=q(B,
327 O=&quot;RSA Data Security, Inc.&quot;, C=US"
328 CRYPTOPTS="SHTTP-Privacy-Enhancements: recv-refused=encrypt;
329 SHTTP-Signature-Algorithms: recv-required=NIST-DSS"
330 HREF="shttp://research.nsa.gov/skipjack-holes.html">
331 $B$3$lFI$`$J!#(B</A>]]></artwork>
332 <ja:note>
333 $B$3$NNc(B($B$NLu(B)$B$O!"(B DN $BB0@-Cf$rLu$7$F$$$k$?$a!"(B RFC 1485
334 $B$KE,9g$7$^$;$s(B:-)
335 </ja:note>
336 </ja:l></ja:pair>
337 -->
338 </figure>
339 </section>
340 </section>
341
342 <section title="Security Considerations">
343 <t>
344 <ja:pair>
345 <ja:l xml:lang="en">
346 This entire document is about security.
347 </ja:l>
348 <ja:l xml:lang="ja">
349 $B$3$NJ8=qA4BN$,(B&ja.security;$B$K4X$7$F$NOC$G$9!#(B
350 </ja:l>
351 </ja:pair>
352 </t>
353 </section>
354
355 <ja:insert section="author-address" title-prefix="4. " />
356 <ja:insert section="references" title-prefix="5. " />
357 <ja:insert section="full-copyright" title-prefix="6. " />
358
359 </middle>
360 <back>
361
362 <references>
363 <reference anchor="SHTTP">
364 <front>
365 <title>The Secure HyperText Transfer Protocol</title>
366 <ja:title xml:lang="ja">$B0BA4(B&ja.html.hypertext;$BE>Aw(B&ja.protocol;</ja:title>
367 <author surname="Rescorla" initials="E." />
368 <author initials="A." surname="Schiffman" />
369 <date month="August" year="1999" />
370 </front>
371 <seriesInfo name="RFC" value="2660" />
372 </reference>
373 </references>
374
375 </back>
376 </rfc>

admin@suikawiki.org
ViewVC Help
Powered by ViewVC 1.1.24