source : 2015.12.14 Google Developers (ボタンクリックで引用記事が開閉)
The Chrome Security team has been hard at work to realize a future without HTTP, a future where you and your users can be reasonably sure that whatever data you’re sending to the web stays between you and the site you’re looking at. And to to make it even easier to jump ship and join the glorious HTTPS future, we’ve made Security a first-class citizen in DevTools.
The new Security panel introduced in Chrome 48 makes it a lot easier to see any issues you have with certificates and mixed content. You can head to it directly in DevTools or by clicking on the URL bar’s lock icon, then the “Details” link.
Addressing the problems with “Connection Info”
Our current solution for those of you who want data about page security is a click onto the little lock icon next to the URL, then parsing the info available on the “Connection” tab.
Unfortunately, this tab had several problems:
- It’s too complicated for most users
- …but too basic for most developers
- and makes it unclear what causes a lock icon “downgrade”
Overview: Explain lock icon and surface mixed content
The lock icon represents the security state of the page, so knowing when and why it appears is extremely important. The overview screen in the new security panel explains the important parts that contribute to a secure page:
You’ll now know at a glance why your site does or does not get the little green badge of awesomeness.
- Identity (certificate)
- Connection (protocol, cipher suite)
- Subresources
Have mixed content appear out of nowhere? No worries. We show it directly on the overview, and a click brings you to a filtered view of the Network Panel, so you can quickly look at the offending requests:
Origin View: Connection Type and Certificate Details
If you need information about a specific TLS connection, the Origin view will help. Reload the page and you’ll see every individual origin for all resources appear in the left hand navigation.
From here, you can find out everything about the certificate used and the connection type. In addition, it gives you the handy ability to drill down further to inspect all resources coming from that origin via the Network Panel.
0 件のコメント:
コメントを投稿