{"id":71037,"date":"2020-02-23T14:45:41","date_gmt":"2020-02-23T11:45:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej"},"modified":"2020-03-03T16:10:57","modified_gmt":"2020-03-03T13:10:57","slug":"lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","title":{"rendered":"Let's Encrypt er g\u00e5et over til at kontrollere ved brug af forskellige subnetv\u00e6rk","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Non-profit certifying authority Let\u2019s Encrypt<\/a><\/noindex>, community-controlled and providing certificates free of charge to all who wish, har annonceret<\/a><\/noindex> om implementeringen af det nye bekr\u00e6ftelsesskema for bef\u00f8jelser til modtagelse af certifikat til dom\u00e6net. Henvendelsen til serveren, hvor den anvendte kontrolkatalog «\/.well-known\/acme-challenge\/» er placeret, vil nu finde sted ved hj\u00e6lp af flere HTTP-anmodninger sendt fra 4 forskellige IP-adresser, placeret i forskellige datacentre og tilh\u00f8rende forskellige autonome systemer. Kontrollen betragtes som vellykket, hvis mindst 3 ud af 4 anmodninger fra forskellige IP-adresser er blevet vellykkede. <\/p>\n

Kontrol fra flere subnetv\u00e6rk vil minimere risiciene for at opn\u00e5 certifikater p\u00e5 fremmede dom\u00e6ner ved at udf\u00f8re m\u00e5lrettede angreb, der omdirigerer trafik via indeksering af falske ruter ved hj\u00e6lp af BGP. Ved brug af et multipoitkontrolsystem vil angriberen skulle opn\u00e5 omdirigering af ruter for flere autonome systemer fra udbydere med forskellige uplinks samtidig, hvilket er betydeligt sv\u00e6rere end at omdirigere en enkelt rute. At sende anmodninger fra forskellige IP-adresser vil desuden \u00f8ge p\u00e5lideligheden af kontrollen, hvis enkelte v\u00e6rter fra Let\u2019s Encrypt kommer p\u00e5 bloklisten (f.eks. er nogle IP-adresser fra letsencrypt.org blevet blokeret af Roskomnadzor i Rusland). <\/p>\n

Indtil 1. juni vil der v\u00e6re en overgangsperiode, der tillader generation af certifikater ved vellykket best\u00e5et kontrol fra det prim\u00e6re datacenter, n\u00e5r v\u00e6rten fra de \u00f8vrige subnetv\u00e6rk ikke er tilg\u00e6ngelig (f.eks. kan dette ske, hvis v\u00e6rtsadministratoren p\u00e5 firewall'en kun har tilladt anmodninger fra det prim\u00e6re datacenter fra Let\u2019s Encrypt eller p\u00e5 grund af synkroniseringsfejl i DNS-zoner). P\u00e5 grundlag af loggene vil der blive udarbejdet en hvid liste for dom\u00e6ner, der oplever problemer med kontrol fra 3 yderligere datacentre. Kun dom\u00e6ner med udfyldte kontaktoplysninger vil komme p\u00e5 den hvide liste. Hvis dom\u00e6net ikke automatisk kommer p\u00e5 den hvide liste, kan ans\u00f8gningen om at blive inkluderet ogs\u00e5 sendes via a special form<\/a><\/noindex>.<\/p>\n

I \u00f8jeblikket har prosjektet Let\u2019s Encrypt udstedt 113 millioner certifikater, der d\u00e6kker omkring 190 millioner dom\u00e6ner (for et \u00e5r siden var der d\u00e6kket 150 millioner dom\u00e6ner, og for to \u00e5r siden - 61 millioner). If\u00f8lge statistikken fra Firefox Telemetry udg\u00f8r den samlede andel af websideanmodninger over HTTPS globalt 81% (for et \u00e5r siden 77%, for to \u00e5r siden 69%), og i USA - 91%.<\/p>\n

Derudover kan det n\u00e6vnes, hensigten<\/a><\/noindex> Apple-virksomheden
\noph\u00f8re med at stole p\u00e5 certifikater i Safari-browseren, hvis levetid overstiger 398 dage (13 m\u00e5neder). Begr\u00e6nsningen forventes at blive indf\u00f8rt kun for certifikater udstedt fra 1. september 2020. For certifikater udstedt f\u00f8r 1. september, der har en lang levetid, vil tilliden blive bevaret, men begr\u00e6nset til 825 dage (2,2 \u00e5r). <\/p>\n

\u00c6ndringen kan have en negativ indvirkning p\u00e5 forretningen for certifikatudstedere, der s\u00e6lger billige certifikater med lange udl\u00f8b, op til 5 \u00e5r. If\u00f8lge Apple skaber genereringen af s\u00e5danne certifikater yderligere sikkerhedstrusler, forhindrer hurtig implementering af nye kryptostandarder og giver ondsindede akt\u00f8rer mulighed for i l\u00e6ngere tid at kontrollere offerets trafik eller bruge den til phishing, hvis certifikatet l\u00e6kkes ubem\u00e6rket efter et hack.<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 \u0441\u0445\u0435\u043c\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430. \u041e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 «\/.well-known\/acme-challenge\/», \u0442\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u0434\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0441 4 \u0440\u0430\u0437\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u0445 \u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71037","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt er g\u00e5et over til at verificere med forskellige undernet | ProHoster","description":"Den non-profit certifikatmyndighed Let\u2019s Encrypt, som kontrolleres af f\u00e6llesskabet og tilbyder certifikater gratis til alle interesserede.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u043a \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let\u2019s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-23T11:45:41+00:00","article:modified_time":"2020-03-03T13:10:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71037","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:09:24","updated":"2022-10-04 11:44:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/71037","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=71037"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/71037\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=71037"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=71037"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=71037"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}