{"id":38655,"date":"2019-10-31T22:25:05","date_gmt":"2019-10-31T19:25:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej\/"},"modified":"2019-10-31T22:25:05","modified_gmt":"2019-10-31T19:25:05","slug":"chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","title":{"rendered":"Chrome vil begynde at blokere HTTP-ressourcer p\u00e5 HTTPS-sider og kontrollere styrken af adgangskoderne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google advarer<\/a><\/noindex> om \u00e6ndringen i tilgangen til behandling af blandet indhold p\u00e5 sider, der \u00e5bnes via HTTPS. Tidligere viste en speciel indikator, n\u00e5r der p\u00e5 HTTPS-sider blev indl\u00e6st komponenter uden kryptering (via http:\/\/). I fremtiden er det besluttet at blokere indl\u00e6sningen af s\u00e5danne ressourcer som standard. Dermed vil sider, der \u00e5bnes via 'https:\/\/', med sikkerhed kun indeholde ressourcer, der er indl\u00e6st via en sikker kommunikationskanal.<\/p>\n

Det bem\u00e6rkes, at mere end 90% af webstederne i \u00f8jeblikket \u00e5bnes af Chrome-brugere ved hj\u00e6lp af HTTPS. Tilstedev\u00e6relsen af indhold, der indl\u00e6ses uden kryptering, skaber trusler mod sikkerheden ved at \u00e6ndre usikret indhold, n\u00e5r der er kontrol over kommunikationskanalen (f.eks. ved forbindelse via \u00e5bne Wi-Fi). Indikatoren for blandet indhold er blevet anerkendt som ineffektiv og vildledende, da den ikke giver en entydig vurdering af sikkerheden p\u00e5 siden.<\/p>\n

I \u00f8jeblikket blokeres de mest farlige former for blandet indhold, s\u00e5som scripts og iframe, allerede som standard, men billeder, lydfiler og videoer kan stadig downloades via http:\/\/. Gennem manipulation af billeder kan angriberen inds\u00e6tte sporende bruger-Cookies, fors\u00f8ge at udnytte s\u00e5rbarheder i billedbehandlere eller beg\u00e5 svindel ved at \u00e6ndre den pr\u00e6senterede information i billedet.<\/p>\n

Indf\u00f8relsen af blokering er opdelt i flere trin. I Chrome 79, planlagt til den 10. december, vil der komme en ny indstilling, der g\u00f8r det muligt at deaktivere blokeringen for specifikke websteder. Den n\u00e6vnte indstilling vil blive anvendt til allerede blokeret blandet indhold, s\u00e5som scripts og iframe, og vil blive aktiveret gennem en menu, der vises ved at klikke p\u00e5 l\u00e5s-symbolet, hvilket erstatter den tidligere foresl\u00e5ede indikator til at deaktivere blokeringen.<\/p>\n

\"Chrome<\/center><\/p>\n

I Chrome 80, som forventes den 4. februar, vil en bl\u00f8d blokering af lyd- og videoindhold blive indf\u00f8rt, som indeb\u00e6rer automatisk omdirigering af links fra http:\/\/ til https:\/\/, hvilket vil sikre, at indholdet forbliver tilg\u00e6ngeligt, hvis den problematiske ressource ogs\u00e5 er tilg\u00e6ngelig via HTTPS. Billeder vil forts\u00e6tte med at blive indl\u00e6st uden \u00e6ndringer, men i tilf\u00e6lde af indl\u00e6sning via http:\/\/ p\u00e5 https:\/\/ sider vil en indikator for usikret forbindelse blive vist for hele siden. For at omdirigere til https eller blokere billeder vil webudviklere kunne anvende CSP-egenskaberne upgrade-insecure-requests og block-all-mixed-content. I udgivelsen af Chrome 81, planlagt til den 17. marts, vil der blive anvendt automatisk omdirigering fra http:\/\/ til https:\/\/ ved blandet indl\u00e6sning af billeder.<\/p>\n

\"Chrome<\/a><\/noindex><\/center><\/p>\n

Desuden har annonceret<\/a><\/noindex> arbejder Google p\u00e5 at integrere<\/a><\/noindex> i form af et eksternt supplement<\/a><\/noindex>. Integrationen vil f\u00f8re til, at den indbyggede adgangskode manager i Chrome inkluderer v\u00e6rkt\u00f8jer til at analysere p\u00e5lideligheden af de adgangskoder, brugeren anvender. Ved login til en hvilken som helst hjemmeside vil der blive udf\u00f8rt en kontrol af brugernavn og adgangskode mod en database med kompromitterede kontoer, med en advarsel, hvis der opdages problemer. Kontrollen udf\u00f8res mod en database, der d\u00e6kker mere end 4 milliarder kompromitterede konti, der har v\u00e6ret involveret i l\u00e6kager af brugerdata. Advarslen vil ogs\u00e5 blive vist, hvis der fors\u00f8ges at bruge trivielle adgangskoder som 'abc123' (if\u00f8lge statistikkerne<\/a><\/noindex> For at beskytte privatlivets fred, n\u00e5r der tilg\u00e5s et eksternt API, sendes kun de f\u00f8rste to bytes af hash'en fra kombinationen af login og password (hash-algoritmen, der anvendes, er<\/p>\n

Argon2 ). Den fulde hash krypteres med en n\u00f8gle, der genereres p\u00e5 brugerens side. De oprindelige hashes i Googles database krypteres ogs\u00e5 ekstra og kun de f\u00f8rste to bytes af hash'en opbevares til indeksering. Den endelige verificering af hashes, der falder ind under det overf\u00f8rte to-byte pr\u00e6fiks, udf\u00f8res p\u00e5 brugerens side ved hj\u00e6lp af den kryptografiske teknik \u2018<\/a><\/noindex>). Den fulde hash bliver krypteret med en n\u00f8gle, der genereres p\u00e5 brugersiden. De oprindelige hashes i Google-databasen bliver ogs\u00e5 krypteret, og kun de f\u00f8rste to byte af hashen vil blive tilbageholdt til indeksering. Den endelige kontrol af hashes, der falder ind under det angivne to-byte pr\u00e6fiks, foretages p\u00e5 brugersiden ved hj\u00e6lp af kryptografisk teknik '.\u2019<\/a><\/noindex>\u2018, hvor ingen af parterne kender indholdet af de kontrollerede data. For at beskytte mod bestemmelse af indholdet af databasen med kompromitterede konti ved at fors\u00f8ge at g\u00e6tte vilk\u00e5rlige pr\u00e6fikser, bliver de data, der gives, krypteret i forbindelse med en n\u00f8gle, der er genereret baseret p\u00e5 den kontrollerede kombination af brugernavn og adgangskode. <\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS. \u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441 \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 http:\/\/), \u0432\u044b\u0432\u043e\u0434\u0438\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440. \u0412 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u043e «https:\/\/», \u0431\u0443\u0434\u0443\u0442 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28995,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome vil begynde at blokere HTTP-ressourcer p\u00e5 HTTPS-sider og kontrollere p\u00e5lideligheden af adgangskoder | ProHoster","description":"Virksomheden Google har advaret om \u00e6ndringer i tilgangen til h\u00e5ndtering af blandet indhold p\u00e5.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u043d\u0430\u0447\u043d\u0451\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c HTTP-\u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043d\u0430 HTTPS-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:05+00:00","article:modified_time":"2019-10-31T19:25:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:05:22","updated":"2026-01-23 22:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=38655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/28995"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=38655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=38655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=38655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}