{"id":101081,"date":"2021-08-24T10:22:37","date_gmt":"2021-08-24T08:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1"},"modified":"2021-08-24T10:22:37","modified_gmt":"2021-08-24T08:22:37","slug":"repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","title":{"rendered":"NPM-i hoidla l\u00f5petab TLS 1.0 ja 1.1 toe.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub on otsustanud l\u00f5petada TLS 1.0 ja 1.1 protokollide toe pakkumise NPM pakettide hoidlas ning k\u00f5igil NPM-i pakihalduriga seotud saitidel, sealhulgas npmjs.com. Alates 4. oktoobrist on repotidesse \u00fchendamiseks, sealhulgas pakettide installimiseks, vajalik v\u00e4hemalt TLS 1.2 tuge pakkiv klient. GitHubis l\u00f5petati TLS 1.0\/1.1 toe pakkumine juba 2018. aasta veebruaris. Motivatsiooniks on toodud \u00fclesannete turvalisus ja kasutajate andmete konfidentsiaalsus. GitHubi andmetel toimub umbes 99% NPM-i hoidlas tehtavatest p\u00e4ringutest juba TLS 1.2 v\u00f5i 1.3 abil ning Node.js sisaldab TLS 1.2 tuge alates 2013. aastast (versioonist 0.10), seega puudutab muudatus vaid v\u00e4henenud osa kasutajatest. <\/p>\n

Tuletame meelde, et TLS 1.0 ja 1.1 protokollid on ametlikult klassifitseeritud IETF (Internet Engineering Task Force) komitee poolt aegunud tehnoloogiateks. TLS 1.0 spetsifikatsioon avaldati jaanuaris 1999. Aastaid hiljem, 2006. aastal, ilmus uuendus TLS 1.1, mis sisaldas turvaparandusi, mis olid seotud initsialiseerimise vektorite ja t\u00e4iendava t\u00e4itmise generaatoritega. TLS 1.0\/1.1 peamiste probleemide hulgas on t\u00e4nap\u00e4evaste cipherite, nagu ECDHE ja AEAD, toe puudumine ning spetsifikatsioonis n\u00f5ue, et vanade cipherite (nt TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA) tugi peaks olema s\u00e4ilinud, mille usaldusv\u00e4\u00e4rsus on kaasaegse arvutitehnika arengu tasemel k\u00fcsitav (nt integriteedi ja autentimise kontrollimiseks kasutatakse MD5 ja SHA-1). Aegunud algoritmide tugi on viinud selliste r\u00fcnnakute, nagu ROBOT, DROWN, BEAST, Logjam ja FREAK, tekkimisele. Siiski ei olnud need probleemid otseselt protokolli haavatavused ning need olid suletud protokolli rakendustes. TLS 1.0\/1.1 protokollides puuduvad kriitilised haavatavused, mida saaks kasutada praktiliste r\u00fcnnakute vahendina.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c TLS 1.2. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c GitHub \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 TLS 1.0\/1.1 \u0431\u044b\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101081","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47NPM hoidla l\u00f5petab TLS 1.0 ja 1.1 toe | ProHoster","description":"GitHub on otsustanud l\u00f5petada TLS 1.0 ja 1.1 protokollide toe pakkumise NPM pakettide hoidlas ning k\u00f5igil NPM-i pakihalduriga seotud saitidel, sealhulgas npmjs.com.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 NPM \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 TLS 1.0 \u0438 1.1 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-24T08:22:37+00:00","article:modified_time":"2021-08-24T08:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101081","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-24 08:54:06","updated":"2022-10-04 00:49:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101081","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=101081"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101081\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=101081"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=101081"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=101081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}