{"id":55146,"date":"2020-01-13T00:00:00","date_gmt":"2020-01-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov"},"modified":"2020-02-18T14:03:13","modified_gmt":"2020-02-18T11:03:13","slug":"mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","title":{"rendered":"Mozilla zav\u00e1d\u00ed CRLite pro kontrolu problematick\u00fdch TLS certifik\u00e1t\u016f","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost Mozilla ozn\u00e1mila<\/a><\/noindex> o zah\u00e1jen\u00ed testov\u00e1n\u00ed ve no\u010dn\u00edch sestaven\u00edch Firefoxu nov\u00e9ho mechanismu pro ur\u010den\u00ed odvolan\u00fdch certifik\u00e1t\u016f \u2014 CRLite<\/a><\/noindex>. CRLite umo\u017e\u0148uje efektivn\u00ed kontrolu odvol\u00e1n\u00ed certifik\u00e1t\u016f na z\u00e1klad\u011b datab\u00e1ze um\u00edst\u011bn\u00e9 na syst\u00e9mu u\u017eivatele. \u0158e\u0161en\u00ed CRLite vyv\u00edjen\u00e9 v Mozille byla vyd\u00e1na<\/a><\/noindex> pod licenc\u00ed MPL 2.0. K\u00f3d pro generaci DB a serverov\u00e9 komponenty jsou naps\u00e1ny v CouchDB<\/a><\/noindex> Go. P\u0159idan\u00e9 klientsk\u00e9 \u010d\u00e1sti pro Firefox pro \u010dten\u00ed dat z DB jsou p\u0159ipraveny<\/a><\/noindex> jsou naps\u00e1ny v jazyce Rust.<\/p>\n

Dosud pou\u017e\u00edvan\u00e1 kontrola certifik\u00e1t\u016f za \u00fa\u010dasti extern\u00edch slu\u017eeb na z\u00e1klad\u011b protokolu OCSP<\/a><\/noindex> (Online Certificate Status Protocol) vy\u017eaduje zaru\u010den\u00fd s\u00ed\u0165ov\u00fd p\u0159\u00edstup, vede k zna\u010dn\u00e9mu zpo\u017ed\u011bn\u00ed p\u0159i zpracov\u00e1n\u00ed po\u017eadavku (v pr\u016fm\u011bru 350 ms) a m\u00e1 probl\u00e9my s zaji\u0161t\u011bn\u00edm soukrom\u00ed (servery OCSP, kter\u00e9 odpov\u00eddaj\u00ed na po\u017eadavky, z\u00edsk\u00e1vaj\u00ed informace o konkr\u00e9tn\u00edch certifik\u00e1tech, podle nich\u017e lze usuzovat na to, jak\u00e9 str\u00e1nky u\u017eivatel nav\u0161t\u011bvuje). Existuje tak\u00e9 mo\u017enost lok\u00e1ln\u00ed kontroly podle seznam\u016f CRL<\/a><\/noindex> (Seznam odvolan\u00fdch certifik\u00e1t\u016f), ale nev\u00fdhodou t\u00e9to metody je velmi velk\u00e1 velikost stahovan\u00fdch dat \u2014 v sou\u010dasnosti datab\u00e1ze odvolan\u00fdch certifik\u00e1t\u016f zab\u00edr\u00e1 p\u0159ibli\u017en\u011b 300 MB a jej\u00ed r\u016fst pokra\u010duje.<\/p>\n

Pro blokov\u00e1n\u00ed kompromitovan\u00fdch a odvolan\u00fdch certifik\u00e1t\u016f d\u016fv\u011bryhodn\u00fdch center se ve Firefoxu pou\u017e\u00edv\u00e1 od roku 2015 centralizovan\u00fd \u010dern\u00fd seznam OneCRL<\/a><\/noindex> ve spojen\u00ed s vyu\u017e\u00edv\u00e1n\u00edm slu\u017eby Google Safe Browsing<\/a><\/noindex> ke stanoven\u00ed mo\u017en\u00e9 \u0161kodliv\u00e9 aktivity. OneCRL, stejn\u011b jako CRLSets<\/a><\/noindex> v Chromu, slou\u017e\u00ed jako prost\u0159edn\u00ed \u010dl\u00e1nek, kter\u00fd agreguje CRL seznamy od certifika\u010dn\u00edch autorit a poskytuje jednotnou centralizovanou OCSP slu\u017ebu pro kontrolu odvolan\u00fdch certifik\u00e1t\u016f, kter\u00e1 umo\u017e\u0148uje nepos\u00edlat po\u017eadavky p\u0159\u00edmo k certifika\u010dn\u00edm autorit\u00e1m. Navzdory zna\u010dn\u00e9mu \u00fasil\u00ed o zv\u00fd\u0161en\u00ed spolehlivosti slu\u017eby online kontroly certifik\u00e1t\u016f data z telemetrie ukazuj\u00ed, \u017ee v\u00edce ne\u017e 7 % po\u017eadavk\u016f OCSP kon\u010d\u00ed timeoutem (p\u0159ed n\u011bkolika lety byl tento ukazatel 15 %). <\/p>\n

Ve v\u00fdchoz\u00edm nastaven\u00ed, pokud nelze prov\u00e9st kontrolu p\u0159es OCSP, prohl\u00ed\u017ee\u010d pova\u017euje certifik\u00e1t za platn\u00fd. Slu\u017eba m\u016f\u017ee b\u00fdt nedostupn\u00e1 jak z d\u016fvod\u016f s\u00ed\u0165ov\u00fdch probl\u00e9m\u016f a omezen\u00ed v intern\u00edch s\u00edt\u00edch, tak zablokov\u00e1na \u00fato\u010dn\u00edky \u2014 pro obch\u00e1zen\u00ed kontroly OCSP b\u011bhem MITM \u00fatoku sta\u010d\u00ed jednodu\u0161e zablokovat p\u0159\u00edstup k valida\u010dn\u00ed slu\u017eb\u011b. \u010c\u00e1ste\u010dn\u011b ke sn\u00ed\u017een\u00ed rizika takov\u00fdch \u00fatok\u016f byla realizov\u00e1na technika Must-Staple<\/a><\/noindex>, kter\u00e1 umo\u017e\u0148uje pova\u017eovat chybu p\u0159i p\u0159\u00edstupu k OCSP nebo nedostupnost OCSP za probl\u00e9m s certifik\u00e1tem, av\u0161ak tato mo\u017enost je voliteln\u00e1 a vy\u017eaduje speci\u00e1ln\u00ed vystaven\u00ed certifik\u00e1tu. <\/p>\n

CRLite umo\u017e\u0148uje shrom\u00e1\u017edit \u00fapln\u00e9 informace o v\u0161ech odvolan\u00fdch certifik\u00e1tech do snadno aktualizovateln\u00e9 struktury o velikosti pouh\u00fdch 1 MB, co\u017e umo\u017e\u0148uje uchov\u00e1vat celou datab\u00e1zi CRL na stran\u011b klienta.
\nProhl\u00ed\u017ee\u010d bude moci denn\u011b synchronizovat svou kopii dat o odvolan\u00fdch certifik\u00e1tech a tato datab\u00e1ze bude dostupn\u00e1 za v\u0161ech okolnost\u00ed. <\/p>\n

CRLite spojuje informace z Certificate Transparency<\/a><\/noindex>, ve\u0159ejn\u00e9ho logu v\u0161ech vydan\u00fdch a odvolan\u00fdch certifik\u00e1t\u016f a v\u00fdsledk\u016f skenov\u00e1n\u00ed certifik\u00e1t\u016f na internetu (shroma\u017e\u010fuj\u00ed se r\u016fzn\u00e9 CRL seznamy certifika\u010dn\u00edch autorit a agreguj\u00ed se informace o v\u0161ech zn\u00e1m\u00fdch certifik\u00e1tech). Data jsou balena pomoc\u00ed kask\u00e1dov\u00fdch filtr\u016f Bloop<\/a><\/noindex>, pravd\u011bpodobnostn\u00ed struktury, kter\u00e1 dovoluje fale\u0161n\u00e9 ur\u010den\u00ed chyb\u011bj\u00edc\u00edho prvku, ale vylu\u010duje opomenut\u00ed existuj\u00edc\u00edho prvku (tj. s ur\u010dit\u00fdm pravd\u011bpodobnost\u00ed m\u016f\u017ee doj\u00edt k fale\u0161n\u00e9mu poplachu na platn\u00fd certifik\u00e1t, ale odvolan\u00e9 certifik\u00e1ty budou zaru\u010den\u011b odhaleny). <\/p>\n

Aby se eliminovaly fale\u0161n\u00e9 alarmy v CRLite, byly zavedeny dal\u0161\u00ed korek\u010dn\u00ed \u00farovn\u011b filtru. Po vygenerov\u00e1n\u00ed struktury se prov\u00e1d\u00ed proch\u00e1zen\u00ed v\u0161ech zdrojov\u00fdch z\u00e1znam\u016f a ur\u010den\u00ed vznikl\u00fdch fale\u0161n\u00fdch alarm\u016f. Na z\u00e1klad\u011b t\u00e9to kontroly se vytv\u00e1\u0159\u00ed dal\u0161\u00ed struktura, kter\u00e1 kask\u00e1dov\u011b nan\u00e1\u0161\u00ed na prvn\u00ed a opravuje vznikl\u00e9 fale\u0161n\u00e9 alarmy. Operace se opakuje, dokud nejsou fale\u0161n\u00e9 alarmy p\u0159i kontroln\u00ed kontrole zcela vylou\u010deny. Obvykle je pro \u00fapln\u00e9 pokryt\u00ed v\u0161ech \u00fadaj\u016f dosta\u010duj\u00edc\u00ed vytvo\u0159en\u00ed 7-10 vrstev. Vzhledem k tomu, \u017ee stav datab\u00e1ze kv\u016fli periodick\u00e9 synchronizaci pon\u011bkud zaost\u00e1v\u00e1 za aktu\u00e1ln\u00edm stavem CRL, kontrola nov\u00fdch certifik\u00e1t\u016f vydan\u00fdch po posledn\u00ed aktualizaci datab\u00e1ze CRLite se prov\u00e1d\u00ed pomoc\u00ed protokolu OCSP, v\u010detn\u011b pou\u017eit\u00ed techniky OCSP Stapling<\/a><\/noindex> (ov\u011b\u0159en\u00e1 certifika\u010dn\u00ed autoritou odpov\u011b\u010f OCSP je p\u0159ed\u00e1v\u00e1na obsluhuj\u00edc\u00edm webov\u00fdm serverem p\u0159i dohod\u011b TLS p\u0159ipojen\u00ed).<\/p>\n

\"Mozilla<\/a><\/noindex><\/center><\/p>\n

Pomoc\u00ed Bloomov\u00fdch filtr\u016f se prosincov\u00fd v\u00fd\u0159ez informac\u00ed z WebPKI, kter\u00fd pokr\u00fdv\u00e1 100 milion\u016f aktivn\u00edch certifik\u00e1t\u016f a 750 tis\u00edc odvolan\u00fdch certifik\u00e1t\u016f, poda\u0159ilo zabalit do struktury o velikosti 1,3 MB. Proces generov\u00e1n\u00ed struktury je dost n\u00e1ro\u010dn\u00fd na zdroje, ale prob\u00edh\u00e1 na serveru Mozilla a u\u017eivateli se ji\u017e dod\u00e1v\u00e1 hotov\u00e1 aktualizace. Nap\u0159\u00edklad ve bin\u00e1rn\u00ed podob\u011b vy\u017eaduj\u00ed pou\u017eit\u00e9 zdrojov\u00e9 \u00fadaje p\u0159i generov\u00e1n\u00ed p\u0159ibli\u017en\u011b 16 GB pam\u011bti p\u0159i ukl\u00e1d\u00e1n\u00ed v datab\u00e1zi Redis, a v \u0161estn\u00e1ctkov\u00e9 podob\u011b zab\u00edr\u00e1 dump v\u0161ech s\u00e9riov\u00fdch \u010d\u00edsel certifik\u00e1t\u016f p\u0159ibli\u017en\u011b 6,7 GB. Proces agregace v\u0161ech odvolan\u00fdch a aktivn\u00edch certifik\u00e1t\u016f trv\u00e1 p\u0159ibli\u017en\u011b 40 minut a proces generov\u00e1n\u00ed zabalen\u00e9 struktury na z\u00e1klad\u011b Bloomova filtru vy\u017eaduje dal\u0161\u00edch 20 minut.<\/p>\n

V sou\u010dasn\u00e9 dob\u011b je v Mozille zaji\u0161t\u011bno aktualizace datab\u00e1ze CRLite \u010dty\u0159ikr\u00e1t denn\u011b (ne v\u0161echny aktualizace jsou dod\u00e1v\u00e1ny klient\u016fm). Generov\u00e1n\u00ed delta-aktualizac\u00ed zat\u00edm nen\u00ed realizov\u00e1no \u2014 pou\u017eit\u00ed bsdiff4, kter\u00e9 se pou\u017e\u00edv\u00e1 k vytv\u00e1\u0159en\u00ed delta-aktualizac\u00ed vyd\u00e1n\u00ed, nezaru\u010duje dostate\u010dnou efektivitu pro CRLite a aktualizace jsou neod\u016fvodn\u011bn\u011b velk\u00e9. Pro odstran\u011bn\u00ed tohoto nedostatku se pl\u00e1nuje p\u0159epracovat form\u00e1t struktury \u00falo\u017ei\u0161t\u011b, aby se vylou\u010dilo zbyte\u010dn\u00e9 p\u0159estavov\u00e1n\u00ed a odstra\u0148ov\u00e1n\u00ed vrstev.<\/p>\n

CRLite nyn\u00ed funguje v prohl\u00ed\u017ee\u010di Firefox v pasivn\u00edm re\u017eimu a pou\u017e\u00edv\u00e1 se paraleln\u011b s OCSP pro shroma\u017e\u010fov\u00e1n\u00ed statistik o spr\u00e1vnosti fungov\u00e1n\u00ed. CRLite lze p\u0159epnout do re\u017eimu hlavn\u00edho ov\u011b\u0159ov\u00e1n\u00ed, k tomu je pot\u0159eba v about:config nastavit parametr security.pki.crlite_mode = 2.<\/p>\n

\"Mozilla<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 — CRLite. CRLite \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u0432 Mozilla \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f CRLite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MPL 2.0. \u041a\u043e\u0434 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0411\u0414 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 Python \u0438 Go. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55146","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla zav\u00e1d\u00ed CRLite pro ov\u011b\u0159ov\u00e1n\u00ed problematick\u00fdch TLS certifik\u00e1t\u016f | ProHoster","description":"Spole\u010dnost Mozilla ozn\u00e1mila zah\u00e1jen\u00ed testov\u00e1n\u00ed ve no\u010dn\u00edch sestaven\u00edch Firefoxu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55146","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:50:02","updated":"2022-10-10 06:24:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/55146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=55146"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/55146\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=55146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=55146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=55146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}