{"id":38655,"date":"2019-10-31T22:25:05","date_gmt":"2019-10-31T19:25:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej\/"},"modified":"2019-10-31T22:25:05","modified_gmt":"2019-10-31T19:25:05","slug":"chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","title":{"rendered":"Chrome za\u010dne blokovat HTTP zdroje na HTTPS str\u00e1nk\u00e1ch a kontrolovat bezpe\u010dnost hesel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Google varovala<\/a><\/noindex> o zm\u011bn\u011b p\u0159\u00edstupu k zpracov\u00e1n\u00ed sm\u00ed\u0161en\u00e9ho obsahu na str\u00e1nk\u00e1ch otev\u0159en\u00fdch pomoc\u00ed HTTPS. D\u0159\u00edve, kdy\u017e na str\u00e1nk\u00e1ch otev\u0159en\u00fdch pomoc\u00ed HTTPS existovaly komponenty na\u010d\u00edtan\u00e9 bez \u0161ifrov\u00e1n\u00ed (protokolem http:\/\/), byla zobrazena speci\u00e1ln\u00ed indik\u00e1tor. V budoucnu bylo rozhodnuto blokovat na\u010d\u00edt\u00e1n\u00ed takov\u00fdch zdroj\u016f ve v\u00fdchoz\u00edm nastaven\u00ed. T\u00edmto zp\u016fsobem budou str\u00e1nky otev\u0159en\u00e9 p\u0159es \u201ehttps:\/\/\u201c zaru\u010den\u011b obsahovat pouze zdroje na\u010d\u00edtan\u00e9 p\u0159es zabezpe\u010den\u00fd komunika\u010dn\u00ed kan\u00e1l.<\/p>\n

Je t\u0159eba poznamenat, \u017ee v sou\u010dasnosti v\u00edce ne\u017e 90 % str\u00e1nek je otev\u0159eno u\u017eivateli prohl\u00ed\u017ee\u010de Chrome s pou\u017eit\u00edm HTTPS. P\u0159\u00edtomnost vlo\u017een\u00fdch komponent\u016f na\u010d\u00edtan\u00fdch bez \u0161ifrov\u00e1n\u00ed vytv\u00e1\u0159\u00ed rizika bezpe\u010dnostn\u00edch poru\u0161en\u00ed prost\u0159ednictv\u00edm modifikace nezabezpe\u010den\u00e9ho obsahu v p\u0159\u00edpad\u011b kontroly nad komunika\u010dn\u00edm kan\u00e1lem (nap\u0159\u00edklad p\u0159i p\u0159ipojen\u00ed p\u0159es ve\u0159ejn\u00e9 Wi-Fi). Indik\u00e1tor sm\u00ed\u0161en\u00e9ho obsahu byl uzn\u00e1n za neefektivn\u00ed a zav\u00e1d\u011bj\u00edc\u00ed pro u\u017eivatele, jeliko\u017e neposkytuje jednozna\u010dn\u00e9 hodnocen\u00ed bezpe\u010dnosti str\u00e1nky.<\/p>\n

V sou\u010dasnosti jsou nejnebezpe\u010dn\u011bj\u0161\u00ed typy sm\u00ed\u0161en\u00e9ho obsahu, jako jsou skripty a iframe, ji\u017e blokov\u00e1ny ve v\u00fdchoz\u00edm nastaven\u00ed, ale obr\u00e1zky, zvukov\u00e9 soubory a videa st\u00e1le mohou b\u00fdt na\u010d\u00edt\u00e1na prost\u0159ednictv\u00edm http:\/\/. Pomoc\u00ed z\u00e1m\u011bny obr\u00e1zk\u016f m\u016f\u017ee \u00fato\u010dn\u00edk vlo\u017eit sledovac\u00ed akce u\u017eivatele do cookie, pokusit se vyu\u017e\u00edt zranitelnosti v obslu\u017en\u00fdch programech pro obr\u00e1zky nebo prov\u00e9st podvod t\u00edm, \u017ee nahrad\u00ed informaci zobrazenou na obr\u00e1zku.<\/p>\n

Zaveden\u00ed blokace je rozd\u011bleno do n\u011bkolika f\u00e1z\u00ed. V Chrome 79, pl\u00e1novan\u00e9m na 10. prosince, se objev\u00ed nov\u00e9 nastaven\u00ed, kter\u00e9 umo\u017en\u00ed deaktivaci blokace pro konkr\u00e9tn\u00ed str\u00e1nky. Uveden\u00e9 nastaven\u00ed se bude aplikovat na ji\u017e blokovan\u00fd sm\u00ed\u0161en\u00fd obsah, jako jsou skripty a iframe, a bude vyvol\u00e1no prost\u0159ednictv\u00edm nab\u00eddky, kter\u00e1 se zobraz\u00ed po kliknut\u00ed na symbol z\u00e1mku, \u010d\u00edm\u017e nahrad\u00ed d\u0159\u00edve nab\u00edzen\u00fd indik\u00e1tor pro deaktivaci blokace.<\/p>\n

\"Chrome<\/center><\/p>\n

V Chrome 80, kter\u00fd se o\u010dek\u00e1v\u00e1 4. \u00fanora, se bude uplat\u0148ovat m\u00edrn\u00e1 blokovac\u00ed sch\u00e9ma pro zvukov\u00e9 a video soubory, kter\u00e1 zahrnuje automatickou v\u00fdm\u011bnu v odkazu http:\/\/ za https:\/\/, co\u017e umo\u017en\u00ed zachovat funk\u010dnost, pokud je probl\u00e9mov\u00fd zdroj tak\u00e9 dostupn\u00fd p\u0159es HTTPS. Obr\u00e1zky se budou nad\u00e1le nahr\u00e1vat beze zm\u011bn, ale v p\u0159\u00edpad\u011b nahr\u00e1v\u00e1n\u00ed p\u0159es http:\/\/ na str\u00e1nk\u00e1ch https:\/\/ se pro celou str\u00e1nku za\u010dne zobrazovat indik\u00e1tor nezabezpe\u010den\u00e9ho spojen\u00ed. Pro automatickou v\u00fdm\u011bnu na https nebo blokaci obr\u00e1zk\u016f budou moci v\u00fdvoj\u00e1\u0159i webov\u00fdch str\u00e1nek pou\u017e\u00edt CSP vlastnosti upgrade-insecure-requests a block-all-mixed-content. Vyd\u00e1n\u00ed Chrome 81, napl\u00e1novan\u00e9 na 17. b\u0159ezna, p\u0159inese automatickou v\u00fdm\u011bnu pro sm\u00ed\u0161en\u00e9 nahr\u00e1v\u00e1n\u00ed obr\u00e1zk\u016f z http:\/\/ na https:\/\/.<\/p>\n

\"Chrome<\/a><\/noindex><\/center><\/p>\n

Krom\u011b toho Google ozn\u00e1mila<\/a><\/noindex> integruje do jednoho z n\u00e1sleduj\u00edc\u00edch vyd\u00e1n\u00ed prohl\u00ed\u017ee\u010de Chrome novou funkci Password Checkup, kter\u00e1 byla d\u0159\u00edve vyv\u00edjena<\/a><\/noindex> ve form\u011b extern\u00edho dopl\u0148ku<\/a><\/noindex>Integrace povede k zaveden\u00ed v nativn\u00edm spr\u00e1vci hesel Chrome prost\u0159edk\u016f pro anal\u00fdzu spolehlivosti pou\u017e\u00edvan\u00fdch u\u017eivatelsk\u00fdch hesel. P\u0159i pokusu o p\u0159ihl\u00e1\u0161en\u00ed na jakoukoli str\u00e1nku dojde k ov\u011b\u0159en\u00ed u\u017eivatelsk\u00e9ho jm\u00e9na a hesla v datab\u00e1zi kompromitovan\u00fdch \u00fa\u010dt\u016f s v\u00fdstupem varov\u00e1n\u00ed v p\u0159\u00edpad\u011b zji\u0161t\u011bn\u00ed probl\u00e9m\u016f. Ov\u011b\u0159en\u00ed se prov\u00e1d\u00ed podle datab\u00e1ze, kter\u00e1 pokr\u00fdv\u00e1 v\u00edce ne\u017e 4 miliardy kompromitovan\u00fdch \u00fa\u010dt\u016f, kter\u00e9 byly zm\u00edn\u011bny v \u00fanik\u00e1ch u\u017eivatelsk\u00fdch datab\u00e1z\u00ed. Varov\u00e1n\u00ed bude tak\u00e9 zobrazov\u00e1no p\u0159i pokusu o pou\u017eit\u00ed trivi\u00e1ln\u00edch hesel, jako je \u201eabc123\u201c (podle statistik\u00e1ch<\/a><\/noindex> Google 23% Ameri\u010dan\u016f pou\u017e\u00edv\u00e1 podobn\u00e1 hesla) nebo p\u0159i pou\u017eit\u00ed stejn\u00e9ho hesla na v\u00edce str\u00e1nk\u00e1ch.<\/p>\n

Pro zachov\u00e1n\u00ed soukrom\u00ed p\u0159i vol\u00e1n\u00ed na extern\u00ed API se p\u0159en\u00e1\u0161\u00ed pouze prvn\u00ed dva bajty hash od spojen\u00ed u\u017eivatelsk\u00e9ho jm\u00e9na a hesla (k hashov\u00e1n\u00ed se pou\u017e\u00edv\u00e1 algoritmus Argon2<\/a><\/noindex>). Pln\u00fd hash je \u0161ifrov\u00e1n kl\u00ed\u010dem generovan\u00fdm na stran\u011b u\u017eivatele. P\u016fvodn\u00ed hash v datab\u00e1zi Google je tak\u00e9 dodate\u010dn\u011b \u0161ifrov\u00e1n a pro indexaci jsou ponech\u00e1ny pouze prvn\u00ed dva bajty hash. Kone\u010dn\u00e9 porovn\u00e1n\u00ed hash, kter\u00e9 spadaj\u00ed pod zadan\u00fd dvoubajtov\u00fd prefix, se prov\u00e1d\u00ed na stran\u011b u\u017eivatele pomoc\u00ed kryptografick\u00e9 techniky \u201eoslepen\u00ed<\/a><\/noindex>\u201c, p\u0159i kter\u00e9 \u017e\u00e1dn\u00e1 z stran nezn\u00e1 obsah ov\u011b\u0159ovan\u00fdch dat. Pro ochranu p\u0159ed ur\u010den\u00edm obsahu datab\u00e1ze kompromitovan\u00fdch \u00fa\u010dt\u016f pomoc\u00ed prozkoum\u00e1v\u00e1n\u00ed pomoc\u00ed libovoln\u00fdch prefix\u016f, p\u0159ed\u00e1van\u00e1 data jsou \u0161ifrov\u00e1na v\u00e1z\u00e1n\u00edm na kl\u00ed\u010d, kter\u00fd byl vygenerov\u00e1n na z\u00e1klad\u011b ov\u011b\u0159ovan\u00e9 kombinace u\u017eivatelsk\u00e9ho jm\u00e9na a hesla. <\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS. \u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441 \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 http:\/\/), \u0432\u044b\u0432\u043e\u0434\u0438\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440. \u0412 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u043e «https:\/\/», \u0431\u0443\u0434\u0443\u0442 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28995,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome za\u010dne blokovat HTTP prost\u0159edky na HTTPS str\u00e1nk\u00e1ch a ov\u011b\u0159ovat spolehlivost hesel | ProHoster","description":"Spole\u010dnost Google varovala p\u0159ed zm\u011bnou p\u0159\u00edstupu k zpracov\u00e1n\u00ed sm\u00ed\u0161en\u00e9ho obsahu na.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u043d\u0430\u0447\u043d\u0451\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c HTTP-\u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043d\u0430 HTTPS-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:05+00:00","article:modified_time":"2019-10-31T19:25:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:05:22","updated":"2026-01-23 22:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=38655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/28995"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=38655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=38655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=38655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}