{"id":38175,"date":"2019-10-31T22:22:05","date_gmt":"2019-10-31T19:22:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej\/"},"modified":"2019-10-31T22:22:05","modified_gmt":"2019-10-31T19:22:05","slug":"forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","title":{"rendered":"CA\/B-forummet stemte imod at reducere varigheden af SSL-certifikater til 397 dage","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Den 26. juli 2019 pr\u00e6senterede Google et forslag<\/a><\/noindex> om at forkorte den maksimale varighed af server SSL\/TLS-certifikater fra de nuv\u00e6rende 825 dage til 397 dage (cirka 13 m\u00e5neder), alts\u00e5 n\u00e6sten halvering. Google mener, at kun fuld automatisering af certifikatbehandlinger vil kunne l\u00f8se de nuv\u00e6rende sikkerhedsproblemer, som ofte skyldes menneskelige fejl. Derfor er det ideelt, at man str\u00e6ber efter at automatisere udstedelsen af kortvarige certifikater.<\/p>\n

Sp\u00f8rgsm\u00e5let blev sat til afstemning i CA\/Browser Forum (CABF), som fastl\u00e6gger kravene til SSL\/TLS-certifikater, inklusive den maksimale varighed.<\/p>\n

Og den 10. september blev resultaterne offentliggjort<\/a><\/noindex>: konsortiemedlemmerne stemte imod<\/b> forslaget.
\n<\/a><\/noindex><\/p>\n

Resultater<\/h1>\n

<\/p>\n

Afstemning blandt certifikatudgivere<\/h4>\n

For (11 stemmer)<\/b>: Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (tidligere Comodo CA), eMudhra, Kamu SM, Let's Encrypt, Logius, PKIoverheid, SHECA, SSL.com<\/p>\n

Imod (20)<\/b>: Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (tidligere Trustwave)<\/p>\n

Undlod (2)<\/b>: HARICA, TurkTrust<\/p><\/blockquote>\n

<\/p>\n

Afstemning blandt certifikatforbrugere<\/h4>\n

For (7)<\/b>: Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360<\/p>\n

Imod<\/b>: 0<\/p>\n

Undlod<\/b>: 0<\/p><\/blockquote>\n

\nIf\u00f8lge reglerne i CA\/Browser Forum skal to tredjedele af certifikatudgiverne og 50% plus \u00e9n stemme blandt forbrugerne stemme for for at vedtage en positiv beslutning.<\/p>\n

Repr\u00e6sentanter fra Digicert har undskyldt<\/a><\/noindex> for at have undladt at stemme, hvor de ville have stemt for at forkorte certifikaternes varighed. De bem\u00e6rker, at for nogle kunder kan en forkortelse af varigheden v\u00e6re problematisk, men p\u00e5 lang sigt giver det fordele for sikkerheden.<\/p>\n

P\u00e5 den ene side er industrien dog stadig ikke klar til at forkorte certifikaternes varighed og fuldt ud overg\u00e5 til automatiserede l\u00f8sninger. Selvom certifikationscentre kan tilbyde s\u00e5danne tjenester, har mange kunder endnu ikke implementeret automatisering. Derfor uds\u00e6ttes forkortelsen til 397 dage for nu. Men sp\u00f8rgsm\u00e5let forbliver \u00e5bent.<\/p>\n

Nu kan Google fors\u00f8ge at implementere standarden \"tvangsm\u00e6ssigt\", ligesom det blev gjort med protokollen Certificate Transparency<\/a><\/noindex>. Desuden underst\u00f8ttes den af andre udviklere: Apple, Microsoft, Mozilla og Opera.<\/p>\n

Vi minder om, at fuld automatisering er et af principperne bag arbejdet i det non-profit certifikationscenter Let's Encrypt. Det udsteder gratis certifikater til alle, men den maksimale gyldighedsperiode for et certifikat er begr\u00e6nset til 90 dage. De korte gyldighedsperioder for certifikater har to hovedfordele<\/a><\/noindex>:<\/p>\n

    \n
  1. begr\u00e6nsning af skader fra kompromitterede n\u00f8gler og forkert udstedte certifikater, da de anvendes over en kortere periode;\n<\/li>\n
  2. korte certifikatlevetider underst\u00f8tter og fremmer automatisering, som er helt n\u00f8dvendig for at forenkle brugen af HTTPS. Hvis vi skal migrere hele verdensv\u00e6gten til HTTPS, kan vi ikke forvente, at administratorerne for hver enkelt eksisterende hjemmeside manuelt opdaterer certifikaterne. S\u00e5 snart udstedelse og opdatering af certifikater bliver fuldt automatiseret, bliver kortere levetider for certifikater tv\u00e6rtimod mere praktiske og h\u00e5ndterbare. <\/li>\n<\/ol>\n

    \nEn unders\u00f8gelse fra GlobalSign p\u00e5 Habr<\/a><\/noindex> viste, at 73,7 % af respondenterne \"i h\u00f8j grad st\u00f8tter\" en forkortelse af certifikatets levetid.<\/p>\n

    Hvad ang\u00e5r skjulingen af EV-ikonet for SSL-certifikater i adresselinjen, stemte konsortiet ikke om dette, fordi sp\u00f8rgsm\u00e5let om UI i browsere ligger helt i udviklernes h\u00e6nder. I september-oktober vil der komme nye versioner af Chrome 77 og Firefox 70, som vil fjerne EV-certifikaternes s\u00e6rlige plads i browserens adresselinje. Her er hvordan \u00e6ndringen ser ud i desktopversionen af Firefox 70:<\/p>\n

    Tidligere:<\/p>\n

    \"CA\/B-forummet
    \n
    \nFremover:<\/p>\n

    \"CA\/B-forummet
    \n
    \nIf\u00f8lge sikkerhedseksperten Troy Hunt, vil fjernelse af EV-oplysningerne fra browserens adresselinje     faktisk begrave denne type certifikater<\/a><\/noindex>.
    \n
    Kilde:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    26 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 SSL\/TLS \u0441 \u043d\u044b\u043d\u0435\u0448\u043d\u0438\u0445 825 \u0434\u043d\u0435\u0439 \u0434\u043e 397 \u0434\u043d\u0435\u0439 (\u043e\u043a\u043e\u043b\u043e 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432), \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432\u0434\u0432\u043e\u0435. Google \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u044b\u043d\u0435\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0430\u0441\u0442\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u043a\u0438\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432 \u0438\u0434\u0435\u0430\u043b\u0435 \u043d\u0443\u0436\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28658,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38175","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 CA\/B Forum stemte imod at forkorte levetiden for SSL-certifikater til 397 dage | ProHoster","description":"Den 26. juli 2019 foreslog Google at reducere den maksimale levetid for servere.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u043e\u0440\u0443\u043c CA\/B \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0442\u0438\u0432 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 397 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"26 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/da\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:05+00:00","article:modified_time":"2019-10-31T19:22:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38175","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:47:03","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:29:57","updated":"2026-01-23 20:47:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=38175"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38175\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/28658"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=38175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=38175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=38175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}