Spole\u010dnost Cloudflare ozn\u00e1mila vytvo\u0159en\u00ed vlastn\u00edho certifika\u010dn\u00edho \u00fa\u0159adu, kter\u00fd se zam\u011b\u0159\u00ed na poskytov\u00e1n\u00ed bezplatn\u00fdch TLS certifik\u00e1t\u016f vyu\u017e\u00edvaj\u00edc\u00edch kryptografick\u00e9 algoritmy odoln\u00e9 v\u016f\u010di \u00fatok\u016fm na kvantov\u00fdch po\u010d\u00edta\u010d\u00edch. Z\u00e1rove\u0148 bylo ozn\u00e1meno o koupi certifika\u010dn\u00edho \u00fa\u0159adu GlobalSign, kter\u00fd se stane z\u00e1kladem pro realizaci pl\u00e1novan\u00e9ho projektu a umo\u017en\u00ed okam\u017eit\u00e9 vyd\u00e1v\u00e1n\u00ed certifik\u00e1t\u016f, pro kter\u00e9 je zaji\u0161t\u011bn maxim\u00e1ln\u00ed dosah za\u0159\u00edzen\u00ed d\u00edky p\u0159\u00edtomnosti GlobalSign v existuj\u00edc\u00edch seznamu ko\u0159enov\u00fdch certifik\u00e1t\u016f. Krom\u011b toho spole\u010dnost Cloudflare podala \u017e\u00e1dosti o zahrnut\u00ed vlastn\u00edho ko\u0159enov\u00e9ho certifik\u00e1tu do seznamu ko\u0159enov\u00fdch certifik\u00e1t\u016f podporovan\u00fdch spole\u010dnostmi Google, Apple, Microsoft a Mozilla. <\/p>\n
O\u010dek\u00e1v\u00e1 se, \u017ee nov\u00e1 ve\u0159ejn\u00e1 certifika\u010dn\u00ed autorita dopln\u00ed slu\u017ebu Let's Encrypt, jej\u00ed\u017e pod\u00edl mezi certifika\u010dn\u00edmi autoritami \u010din\u00ed 39,2 % na z\u00e1klad\u011b po\u010dtu vydan\u00fdch certifik\u00e1t\u016f. Z\u00e1vislost t\u00e9m\u011b\u0159 poloviny web\u016f na jedn\u00e9 certifika\u010dn\u00ed autorit\u011b vytv\u00e1\u0159\u00ed syst\u00e9mov\u00e1 rizika v p\u0159\u00edpad\u011b poruchy v provozu Let's Encrypt kv\u016fli absenci podobn\u00fdch bezplatn\u00fdch alternativ. Stejn\u011b jako Let's Encrypt bude slu\u017eba Cloudflare pln\u011b automatizovan\u00e1 a umo\u017en\u00ed spr\u00e1vu certifik\u00e1t\u016f pomoc\u00ed otev\u0159en\u00e9ho protokolu ACME. Pro z\u00edsk\u00e1n\u00ed certifik\u00e1tu ve slu\u017eb\u011b Cloudflare pot\u0159ebuj\u00ed u\u017eivatel\u00e9 Let's Encrypt pouze zm\u011bnit URL v nastaven\u00ed. <\/p>\n
Druh\u00fdm \u00fakolem nov\u00e9ho certifika\u010dn\u00edho \u00fa\u0159adu je p\u0159\u00edprava na p\u0159echod na postkvantovou kryptografii. V 1. \u010dtvrtlet\u00ed 2027 pl\u00e1nuje spole\u010dnost Cloudflare jako jedna z prvn\u00edch implementovat ve sv\u00e9m certifika\u010dn\u00edm \u00fa\u0159adu podporu zjednodu\u0161en\u00e9ho form\u00e1tu certifik\u00e1t\u016f MTC (Merkle Tree Certificates), ur\u010den\u00e9ho pro pou\u017eit\u00ed s postkvantov\u00fdmi kryptografick\u00fdmi algoritmy, jejich\u017e velikost digit\u00e1ln\u00edho podpisu je p\u0159ibli\u017en\u011b 40kr\u00e1t v\u011bt\u0161\u00ed ne\u017e velikost tradi\u010dn\u00edch podpis\u016f. <\/p>\n
Pro zmen\u0161en\u00ed velikosti dat p\u0159i ka\u017ed\u00e9m TLS p\u0159ipojen\u00ed je v MTC vyu\u017eita stromov\u00e1 struktura \u201eMerkelovo strom\u201c, ve kter\u00e9 ka\u017ed\u00e1 v\u011btev ov\u011b\u0159uje v\u0161echny pod\u0159\u00edzen\u00e9 v\u011btve a uzly d\u00edky spole\u010dn\u00e9mu (stromov\u00e9mu) hashov\u00e1n\u00ed. Pokud tradi\u010dn\u00ed p\u0159\u00edstup spo\u010d\u00edv\u00e1 v tom, \u017ee certifika\u010dn\u00ed autorita podepisuje ka\u017ed\u00fd certifik\u00e1t zvl\u00e1\u0161\u0165, p\u0159i pou\u017eit\u00ed MTC se certifik\u00e1ty slu\u010duj\u00ed a p\u0159id\u00e1vaj\u00ed do logu na z\u00e1klad\u011b Merkelova stromu, zat\u00edmco pouze ko\u0159enov\u00fd hash je podepisov\u00e1n. P\u0159i t\u00e9to sch\u00e9matu, pokud m\u00e1me kone\u010dn\u00fd hash, m\u016f\u017eeme potvrdit, \u017ee konkr\u00e9tn\u00ed certifik\u00e1t je zahrnut v aktu\u00e1ln\u00edm podepsan\u00e9m stromu. P\u0159i p\u0159ipojen\u00ed k webu prohl\u00ed\u017ee\u010d obdr\u017e\u00ed zkr\u00e1cen\u00fd MTC certifik\u00e1t a sadu hash\u016f pro matematick\u00fd d\u016fkaz jeho zahrnut\u00ed do stromu, co\u017e umo\u017e\u0148uje klientovi ov\u011b\u0159it pravost webu na z\u00e1klad\u011b potvrzen\u00ed, \u017ee certifik\u00e1t skute\u010dn\u011b existuje v podepsan\u00e9m strom\u011b. <\/p>\n
Certifika\u010dn\u00ed autorita Cloudflare bude podporovat jak tradi\u010dn\u00ed, tak MTC certifik\u00e1ty, co\u017e u\u017eivatel\u016fm umo\u017en\u00ed plynule p\u0159ej\u00edt na nov\u00fd form\u00e1t. Ve\u0159ejn\u00e9 spu\u0161t\u011bn\u00ed projektu se o\u010dek\u00e1v\u00e1 po dokon\u010den\u00ed testov\u00e1n\u00ed nov\u00e9 infrastruktury na intern\u00edch slu\u017eb\u00e1ch Cloudflare. Cloudflare se zavazuje zajistit plnou otev\u0159enost proces\u016f v nov\u00e9 certifika\u010dn\u00ed autorit\u011b, publikovat reprodukovateln\u00e9 verze softwaru pou\u017e\u00edvan\u00e9ho k vytv\u00e1\u0159en\u00ed digit\u00e1ln\u00edch podpis\u016f, prov\u00e1d\u011bt certifikaci bezpe\u010dnostn\u00edch hardwarov\u00fdch modul\u016f (HSM), v nich\u017e jsou ukl\u00e1d\u00e1ny soukrom\u00e9 kl\u00ed\u010de, a okam\u017eit\u011b zve\u0159ej\u0148ovat informace o probl\u00e9mech a incidentech. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u044b, \u0441\u0442\u043e\u0439\u043a\u0438\u0435 \u043a \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043d\u0430 \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u043e \u043e \u043f\u043e\u043a\u0443\u043f\u043a\u0435 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 GlobalSign, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0442\u0430\u043d\u0435\u0442 \u0431\u0430\u0437\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0443\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0441\u0440\u0430\u0437\u0443 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0445\u0432\u0430\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044e GlobalSign \u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0430\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183554","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cloudflare vytv\u00e1\u0159\u00ed certifika\u010dn\u00ed autoritu pro bezplatnou distribuci TLS certifik\u00e1t\u016f | ProHoster","description":"Spole\u010dnost Cloudflare ozn\u00e1mila vytvo\u0159en\u00ed vlastn\u00ed certifika\u010dn\u00ed autority zam\u011b\u0159en\u00e9 na poskytov\u00e1n\u00ed bezplatn\u00fdch TLS certifik\u00e1t\u016f, kter\u00e9 pou\u017e\u00edvaj\u00ed kryptografick\u00e9 algoritmy odoln\u00e9 v\u016f\u010di prolomen\u00ed na kvantov\u00fdch po\u010d\u00edta\u010d\u00edch.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cloudflare \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u0434\u043b\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0434\u0430\u0447\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u044b, \u0441\u0442\u043e\u0439\u043a\u0438\u0435 \u043a \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043d\u0430 \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-02T20:54:31+00:00","article:modified_time":"2026-10-02T20:54:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=183554"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183554\/revisions"}],"predecessor-version":[{"id":183555,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/183554\/revisions\/183555"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=183554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=183554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=183554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"