{"id":33343,"date":"2019-10-31T21:52:06","date_gmt":"2019-10-31T18:52:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii\/"},"modified":"2019-10-31T21:52:06","modified_gmt":"2019-10-31T18:52:06","slug":"v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii","title":{"rendered":"Chromis ilmub kolmandate osapoolte k\u00fcpsiste ja varjatud identifitseerimise edastamise kaitse.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google esituse<\/a><\/noindex> ootavad muudatused Chromes, mille eesm\u00e4rk on suurendada privaatsust. Esimene muudatuste osa k\u00e4sitleb k\u00fcpsiste t\u00f6\u00f6tlemist ja SameSite atribuudi toetust. Alates Chrome 76 v\u00e4ljaandmisest, mis on oodata juulis, aktiveeritakse lipuke \u00absame-site-by-default-cookies\u00bb, mis, kui Set-Cookie p\u00e4ises ei ole SameSite atribuuti, seab vaikimisi v\u00e4\u00e4rtuseks \u00abSameSite=Lax\u00bb, piirates k\u00fcpsiste edastamist kolmandate osapoolte saitidelt (kui saitidel on endiselt v\u00f5imalik piirangut t\u00fchistada, seades k\u00fcpsiste loomisel selges\u00f5naliselt atribuudi SameSite=None).<\/a><\/noindex> lipp «same-site-by-default-cookies», mis juhul, kui Set-Cookie p\u00e4ises ei ole atribuuti SameSite, m\u00e4\u00e4rab vaikimisi v\u00e4\u00e4rtuse «SameSite=Lax», mis piirab k\u00fcpsiste saatmist kolmandate osapoolte saitidelt (kuid saidid saavad endiselt piirangu t\u00fchistada, seadistades k\u00fcpsise loomisel selgelt v\u00e4\u00e4rtuse SameSite=None).<\/p>\n

Atribuut SameSite<\/a><\/noindex> v\u00f5imaldab m\u00e4\u00e4rata olukorrad, kus k\u00fcpsiste edastamine on lubatud, kui p\u00e4ring tuleb kolmandalt saidilt. Praegu edastab brauser k\u00fcpsised igasuguste p\u00e4ringute puhul saidile, millele on k\u00fcpsised seadistatud, isegi kui algselt avati teine sait, ja juurdep\u00e4\u00e4s toimus kaudselt pildi laadimise v\u00f5i iframe'i kaudu. Reklaamiv\u00f5rgustikud kasutavad seda omadust, et j\u00e4lgida kasutaja liikumisi erinevate saitide vahel, ja
\nkuritegevuse jaoks CSRF-r\u00fcnnakute korral.<\/a><\/noindex> (vahemaaoludest r\u00fcnnatava ressursi avamisel saadetakse varjatud p\u00e4ring teisele saidile, kus on autentitud praegune kasutaja, ja kasutaja brauser seadistab selle p\u00e4ringu jaoks seansi k\u00fcpsised). Teisest k\u00fcljest kasutatakse k\u00fcpsiste saatmise v\u00f5imalust kolmandatele saitidele vidinate lisamiseks lehtedele, n\u00e4iteks YouTube'i v\u00f5i Facebooki integreerimiseks.<\/p>\n

Atribuudi SameSit abil saab hallata k\u00fcpsiste loomise k\u00e4itumist ning lubada k\u00fcpsiste saatmist ainult vastusena p\u00e4ringutele, mis on algatatud saidilt, kust need k\u00fcpsised esmakordselt saadud on. SameSite v\u00f5ib v\u00f5tta kolm v\u00e4\u00e4rtust «Strict», «Lax» ja «None». 'Strict' re\u017eiimis ei saadeta k\u00fcpsiseid mistahes liikide vahelistele p\u00e4ringutele, sealhulgas k\u00f5ikidele sissetulevatele linkidele v\u00e4liselt saitidelt. 'Lax' re\u017eiimis kehtivad pehmemad piirangud ja k\u00fcpsiste edastamine blokeeritakse ainult kolmepoolsete alamp\u00e4ringute korral, nagu pildi p\u00e4ring v\u00f5i sisu laadimine iframe'i kaudu. 'Strict' ja 'Lax' erinevus seisneb k\u00fcpsiste blokeerimises lingi kaudu liikumisel.<\/p>\n

Teiste tulevaste muudatuste hulgas kavandatakse ka rangete piirangute rakendamist, mis keelavad kolmandate osapoolte k\u00fcpsiste t\u00f6\u00f6tlemise p\u00e4ringute korral, mis ei kasuta HTTPS-i (SameSite=None atribuudiga k\u00fcpsised saavad olla seatud ainult Secure re\u017eiimis). Lisaks on plaanis t\u00f6\u00f6tada v\u00e4lja kaitse peidetud identifitseerimise ('browser fingerprinting') vastu, sealhulgas meetodid identifikaatorite genereerimiseks kaudsete andmete p\u00f5hjal, nagu ekraani lahutusv\u00f5ime<\/a><\/noindex>, toetatud MIME-t\u00fc\u00fcpide loetelu, spetsiifilised parameetrid p\u00e4istes (HTTP\/2<\/a><\/noindex> ja HTTPS<\/a><\/noindex>), installitud pluginade ja fontide<\/a><\/noindex>, teatud Web API-de k\u00e4ttesaadavus, mis on spetsiifilised graafikakaartidele omadused<\/a><\/noindex> j\u00f5udluse jaoks WebGL ja Canvas'i abil, manipuleerimine<\/a><\/noindex> CSS-iga, erip\u00e4rade anal\u00fc\u00fcs hiire<\/a><\/noindex> ja ja klaviatuuri<\/a><\/noindex>.<\/p>\n

Samuti lisatakse Chrome'i lisatakse<\/a><\/noindex> kuritarvituste kaitse, mis on seotud tagasip\u00f6\u00f6rdumise raskendamisega algsesse saidile p\u00e4rast teisele saidile liikumist. R\u00e4\u00e4gime praktikatest, mis ummistavad sirvimise ajaloo seeria automaatsete suunamistega v\u00f5i valeandmete kunstlikuga ajaloos, mis on lisatud pushState'i kaudu, mille tulemusena ei saa kasutaja kasutada nuppu «Back» algsesse saidile naasmiseks p\u00e4rast juhuslikku \u00fcleminekut v\u00f5i sundsuunamist kelmustele v\u00f5i pahavara saidile. Selliste manipuleerimiste kaitsmiseks j\u00e4tab Chrome tagasip\u00f6\u00f6rdumise nupu t\u00f6\u00f6tlejas automaatsete suunamiste ja k\u00fclastuste ajaloo manipulatsioonidega seotud kirjed vahele, j\u00e4ttes alles ainult lehek\u00fcljed, mille avamine on olnud kasutaja selge tegevuse tulemus.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0433\u0440\u044f\u0434\u0443\u0449\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Chrome, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 Cookie \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 SameSite. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Chrome 76, \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u0438\u044e\u043b\u0435, \u0431\u0443\u0434\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0444\u043b\u0430\u0433 «same-site-by-default-cookies», \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430 SameSite \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 Set-Cookie \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 «SameSite=Lax», \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0449\u0435\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 Cookie \u0434\u043b\u044f \u0432\u0441\u0442\u0430\u0432\u043a\u043e\u043a \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33343","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome'is tekib kaitse kolmandate osapoolte k\u00fcpsiste edastamise ja varjatud tuvastamise vastu | ProHoster","description":"Google esitles kommende muudatusi Chromes, mille eesm\u00e4rk on parandamine.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Cookie \u0438 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0433\u0440\u044f\u0434\u0443\u0449\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Chrome, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-chrome-poyavitsya-zashhita-ot-peredachi-storonnih-cookie-i-skrytoj-identifikatsii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:06+00:00","article:modified_time":"2019-10-31T18:52:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33343","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 14:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:42:23","updated":"2026-01-21 14:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33343","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33343"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33343\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33343"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33343"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}