GitHub har besluttet at stoppe underst\u00f8ttelsen af protokollerne TLS 1.0 og 1.1 i NPM-pakkerepositoriet og p\u00e5 alle websteder relateret til NPM-pakkemanagement, inklusive npmjs.com. Fra den 4. oktober vil det kr\u00e6ve en klient, der underst\u00f8tter mindst TLS 1.2 for at oprette forbindelse til repositoriet, herunder installation af pakker. St\u00f8tten til TLS 1.0\/1.1 p\u00e5 selve GitHub blev stoppet allerede i februar 2018. Begrundelsen er at beskytte sikkerheden af deres tjenester og brugerdata. If\u00f8lge GitHub foretages omkring 99% af anmodningerne til NPM-repositoriet allerede ved hj\u00e6lp af TLS 1.2 eller 1.3, og Node.js har inkluderet st\u00f8tte til TLS 1.2 siden 2013 (startende med version 0.10), s\u00e5 \u00e6ndringen vil kun p\u00e5virke en lille del af brugerne. <\/p>\n
Vi minder om, at protokollerne TLS 1.0 og 1.1 officielt er blevet erkl\u00e6ret for\u00e6ldede af IETF (Internet Engineering Task Force). Specifikationen for TLS 1.0 blev offentliggjort i januar 1999. Syv \u00e5r senere blev der udgivet en opdatering, TLS 1.1, med sikkerhedsforbedringer relateret til generering af initialiseringsvektorer og fyldte data. Blandt de st\u00f8rste problemer med TLS 1.0\/1.1 n\u00e6vnes manglende st\u00f8tte til moderne krypteringer (f.eks. ECDHE og AEAD) samt specifikationen, som kr\u00e6ver underst\u00f8ttelse af \u00e6ldre krypteringer, hvis p\u00e5lidelighed er sat under sp\u00f8rgsm\u00e5lstegn i dagens udvikling af computing (for eksempel kr\u00e6ves underst\u00f8ttelse af TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, hvor MD5 og SHA-1 bruges til at sikre integritet og autentificering). Underst\u00f8ttelsen af for\u00e6ldede algoritmer har allerede f\u00f8rt til angreb som ROBOT, DROWN, BEAST, Logjam og FREAK. Ikke desto mindre var disse problemer ikke direkte s\u00e5rbarheder i protokollen, men blev lukket p\u00e5 niveauet for dens implementeringer. Der er ingen kritiske s\u00e5rbarheder i protokoller som TLS 1.0\/1.1, der kan udnyttes til praktiske angreb. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c TLS 1.2. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c GitHub \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 TLS 1.0\/1.1 \u0431\u044b\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101081","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 NPM-repositoriet stopper underst\u00f8ttelsen af TLS 1.0 og 1.1 | ProHoster","description":"GitHub har besluttet at stoppe underst\u00f8ttelsen af protokollerne TLS 1.0 og 1.1 i NPM-pakkerepositoriet og p\u00e5 alle websteder relateret til NPM-pakkemanagement, inklusive npmjs.com.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 NPM \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 TLS 1.0 \u0438 1.1 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-24T08:22:37+00:00","article:modified_time":"2021-08-24T08:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101081","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-24 08:54:06","updated":"2022-10-04 00:49:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/101081","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=101081"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/101081\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=101081"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=101081"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=101081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"