๊ด€๋ฆฌ ๋ฉ”๋‰ด

๋ชฉ๋กhttpOnly (1)

๋‚˜์˜ ๋ชจ์–‘

061 | ์ธ์ฆ๋ณด์•ˆ ๊ธฐ์ดˆ

๐ŸŽˆ HTTPS(Hyper Text Transfer Protocal Secure Socket layer) HTTPS๋Š” ๊ธฐ์กด HTTP์—์„œ ๋ณด์•ˆSecure์ด ๊ฐ•ํ™”๋œ ๊ฒƒ์œผ๋กœ, HTTPS๋Š” HTTP์š”์ฒญ์„ SSL ๋˜๋Š” TLS๋ผ๋Š” ์•Œ๊ณ ๋ฆฌ์ฆ˜์„ ํ†ตํ•ด ์•”ํ˜ธํ™” ํ•˜์—ฌ ์ „์†กํ•˜๋Š” ํ”„๋กœํ† ์ฝœ์ด๋‹ค. HTTPS๋Š” ๋น„๋Œ€์นญ ์•”ํ˜ธํ™” ํ‚ค๋ฅผ ์‚ฌ์šฉํ•œ๋‹ค. ์•”ํ˜ธํ™” ํ• ๋•Œ ์‚ฌ์šฉ๋œ ํ‚ค์™€ ๋ณตํ˜ธํ™” ํ• ๋•Œ ์‚ฌ์šฉ๋œ ํ‚ค๊ฐ€ ์„œ๋กœ ๋‹ฌ๋ผ ๋น„๋Œ€์นญ์ด๋ผ๊ณ  ํ•œ๋‹ค. HTTPS๋Š” 2๋‹จ๊ณ„๋ฅผ ๊ฑฐ์ณ ์•”ํ˜ธํ™”๋ฅผ ์ง„ํ–‰ํ•œ๋‹ค. ์•”ํ˜ธํ™” ์ธ์ฆ์„œ ๐Ÿงฉ ์•”ํ˜ธํ™” HTTPS๋Š” ๋Œ€์นญํ‚ค์™€ ๋น„๋Œ€์นญํ‚ค๋ฅผ ๋ชจ๋‘ ์‚ฌ์šฉํ•œ๋‹ค. ๋น„๋Œ€์นญํ‚ค๋ฅผ ์ด์šฉํ•˜์—ฌ ๋Œ€์นญํ‚ค๋ฅผ ์ฃผ๊ณ ๋ฐ›์€ ํ›„ ์ฃผ๊ณ ๋ฐ›์€ ๋Œ€์นญํ‚ค๋กœ ์•”ํ˜ธํ™”๋ฅผ ํ•œ๋‹ค. ๋น„๋Œ€์นญ ํ‚ค๋Š” 2๊ฐ€์ง€์˜ ํ‚ค๋ฅผ ๊ฐ–๊ณ  ์žˆ๋‹ค. ๋น„๋ฐ€ํ‚ค(private Key): ๋‚˜๋งŒ ๊ฐ–๊ณ  ์žˆ์Œ ๊ณต๊ฐœํ‚ค(public key): ๊ณต๊ฐœ์ ..

SEB/TIL 2022. 9. 20. 22:08