{"id":33377,"date":"2019-10-31T21:52:15","date_gmt":"2019-10-31T18:52:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/tehnicheskie-podrobnosti-nedavnego-otklyucheniya-dopolnenij-v-firefox\/"},"modified":"2019-10-31T21:52:15","modified_gmt":"2019-10-31T18:52:15","slug":"tehnicheskie-podrobnosti-nedavnego-otklyucheniya-dopolnenij-v-firefox","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/tehnicheskie-podrobnosti-nedavnego-otklyucheniya-dopolnenij-v-firefox","title":{"rendered":"Hiljuti toimunud t\u00e4iendusete tehnilised detailid Firefoxis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><i>T\u00f5lkija m\u00e4rkus: lugejate mugavuse huvides on kuup\u00e4evad esitatud Moskva ajav\u00f6\u00f6ndis<\/i><\/p>\n<p>Hiljuti j\u00e4ime ilma \u00fche meie allkirjastamiseks kasutatava sertifikaadi kehtivusajast. See p\u00f5hjustas t\u00e4iendusete peatamise kasutajate seas. N\u00fc\u00fcd, kui enamik probleeme on lahendatud, soovin r\u00e4\u00e4kida toimunust l\u00e4hemalt ning tehtud t\u00f6\u00f6st.\n<\/p>\n<p><b>Taust: t\u00e4iendid ja allkirjad<\/b><\/p>\n<p><noindex>\u0425\u043e\u0442\u044f \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 &#171;\u0438\u0437 \u043a\u043e\u0440\u043e\u0431\u043a\u0438&#187;, Firefox \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f, \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0435 &#171;\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f\u043c\u0438&#187;. \u0421 \u0438\u0445 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u0432\u044b\u0448\u0435 15 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439: \u043e\u0442 <a rel=\"nofollow\" href=\"https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/ublock-origin\/\">reklaami blokeerimisest<\/a> kuni <a rel=\"nofollow\" href=\"https:\/\/addons.mozilla.org\/en-US\/firefox\/addon\/tree-style-tab\/\">sajate vahelehtede haldamiseni<\/a>.<\/noindex><\/p>\n<p>Paigaldatud t\u00e4iendusidel peab olema <a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/addons\/2015\/02\/10\/extension-signing-safer-experience\/\">digitaalne allkiri<\/a>, mis kaitseb kasutajaid pahatahtlike t\u00e4ienduste eest ning n\u00f5uab minimaalset t\u00e4ienduste kontrollimist Mozilla t\u00f6\u00f6tajate poolt. Meie kehtestasime selle n\u00f5ude 2015. aastal, kuna kogesime <a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/addons\/2015\/04\/15\/the-case-for-extension-signing\/\">t\u00f5siseid probleeme<\/a> pahatahtlike t\u00e4iendustega.<\/p>\n<p>\u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442: \u043a\u0430\u0436\u0434\u0430\u044f \u043a\u043e\u043f\u0438\u044f Firefox \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 &#171;\u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442&#187;. \u041a\u043b\u044e\u0447 \u043e\u0442 \u044d\u0442\u043e\u0433\u043e &#171;\u043a\u043e\u0440\u043d\u044f&#187; \u0445\u0440\u0430\u043d\u0438\u0442\u0441\u044f \u0432 <a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Hardware_security_module\">riistvara kaitsemoodul (HSM)<\/a>, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438. \u041a\u0430\u0436\u0434\u044b\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u044d\u0442\u0438\u043c \u043a\u043b\u044e\u0447\u043e\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u043e\u0432\u044b\u0439 &#171;\u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442&#187;, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439. \u041a\u043e\u0433\u0434\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0440\u0438\u0441\u044b\u043b\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435, \u043c\u044b \u0441\u043e\u0437\u0434\u0430\u0451\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 &#171;\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442&#187; \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0435\u0433\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442. \u0417\u0430\u0442\u0435\u043c \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0430\u043c\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0421\u0445\u0435\u043c\u0430\u0442\u0438\u0447\u043d\u043e <a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/files\/2019\/05\/Add-on-blog-post-visual-May-7-2019-768x859.png\">n\u00e4eb see v\u00e4lja nii<\/a>.<\/p>\n<p>\u041e\u0431\u0440\u0430\u0442\u0438\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435: \u0443 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0435\u0441\u0442\u044c &#171;\u0441\u0443\u0431\u044a\u0435\u043a\u0442&#187; (\u043a\u043e\u043c\u0443 \u0432\u044b\u0434\u0430\u043d \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442) \u0438 &#171;\u0438\u0437\u0434\u0430\u0442\u0435\u043b\u044c&#187; (\u043a\u0442\u043e \u0432\u044b\u0434\u0430\u043b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442). \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 &#171;\u0441\u0443\u0431\u044a\u0435\u043a\u0442&#187; = &#171;\u0438\u0437\u0434\u0430\u0442\u0435\u043b\u044c&#187;, \u043d\u043e \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u0437\u0434\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u0443\u0431\u044a\u0435\u043a\u0442 \u0432\u044b\u0448\u0435\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0442\u043e\u0442 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d.<\/p>\n<p>Oluline punkt: iga lisa on allkirjastatud unikaalse l\u00f5ppsertifikaadiga, kuid peaaegu alati on need l\u00f5ppsertifikaadid allkirjastatud sama vahesertifikaadiga.<\/p>\n<p><i>Autori m\u00e4rkused: erandiks on v\u00e4ga vanad lisandused. Sel ajal kasutati erinevaid vahesertifikaate.<\/i><\/p>\n<p>See vahesertifikaat tekitas probleeme: iga sertifikaat on kehtiv kindla perioodi jooksul. Enne v\u00f5i p\u00e4rast seda perioodi sertifikaat ei kehti ja brauser ei kasuta selle sertifikaadiga allkirjastatud lisandeid. Kahjuks aegus vahesertifikaadi kehtivus 4. mail kell 4 hommikul.<\/p>\n<p>Tagaj\u00e4rjed ei ilmunud kohe. Firefox kontrollib installitud lisandite allkirju mitte pidevalt, vaid umbes kord 24 tunni jooksul, ning kontrollimise aeg on individuaalne iga kasutaja jaoks. Selle tulemusena tekkisid probleemid m\u00f5nel inimesel kohe, m\u00f5nel aga palju hiljem. Saime probleemist teada umbes samal ajal, kui sertifikaadi kehtivus l\u00f5ppes, ja hakkasime kohe lahendust otsima.<\/p>\n<p>\n<b>Kahju v\u00e4hendamine<\/b><\/p>\n<p>Kui me aru saime, mis juhtus, p\u00fc\u00fcdsime olukorra halvenemist v\u00e4ltida.<\/p>\n<p>Esiteks l\u00f5petati uute lisade vastuv\u00f5tmine ja allkirjastamine. Pole m\u00f5tet kasutada selleks aegunud sertifikaati. Tagasi vaadates \u00fctleksin, et oleks v\u00f5inud k\u00f5ik nii j\u00e4tta. Praegu on lisade vastuv\u00f5tt taas alustatud.<\/p>\n<p>Teiseks saadeti kohe v\u00e4lja parandav teade, mis takistas igap\u00e4evaseid allkirjade kontrollimisi. Nii p\u00e4\u00e4stsime neid kasutajaid, kelle brauserid ei olnud viimase 24 tunni jooksul veel lisanud kontrollinud. Praegu on see parandav teade tagasi v\u00f5etud, vajadus selle j\u00e4rele on kadunud.<\/p>\n<p>\n<b>Paralleelne t\u00f6\u00f6<\/b><\/p>\n<p>Teoreetiliselt n\u00e4eb probleemi lahendus v\u00e4lja lihtne: loome uue kehtiva vahe-sertifikaadi ja uuesti allkirjastame iga lisa. Kahjuks see ei \u00f5nnestu:\n<\/p>\n<ul>\n<li>me ei saa kiiresti allkirjastada 15 tuhat lisandust korraga, s\u00fcsteem ei ole selliseks koormuseks valmis.\n<\/li>\n<li>P\u00e4rast lisade allkirjastamist peavad v\u00e4rskendatud versioonid j\u00f5udma kasutajateni. Enamik lisasid installitakse Mozilla serveritest, seega leiab Firefox j\u00e4rgmise 24 tunni jooksul v\u00e4rskendusi, kuid m\u00f5ned arendajad levitavad allkirjastatud lisasid kolmandate osapoolte kanalite kaudu, mist\u00f5ttu peavad kasutajad selliseid lisasid k\u00e4sitsi v\u00e4rskendama.<\/li>\n<\/ul>\n<p>Selle asemel p\u00fc\u00fcdsime v\u00e4lja t\u00f6\u00f6tada lahenduse, mis j\u00f5uaks k\u00f5igi kasutajateni, n\u00f5udmata (v\u00f5i peaaegu mitte n\u00f5udmata) nende poolset tegevust.<\/p>\n<p>J\u00f5udsime \u00fcsna kiiresti kahe peamise strateegiani, mida kasutasime paralleelselt:\n<\/p>\n<ul>\n<li>V\u00e4rskendada Firefoxi, et muuta sertifikaadi kehtivusaega. See paneks olemasolevad lisad taas t\u00f6\u00f6tama, kuid n\u00f5uaks uue Firefoxi versiooni v\u00e4ljaandmist ja tarnimist.\n<\/li>\n<li>Luua kehtiv sertifikaat ja kuidagi veenda Firefoxi seda aktsepteerima, mitte olemasolevat, mille kehtivusaeg on l\u00f5ppenud.<\/li>\n<\/ul>\n<p>Otsustasime alguses kasutada esimest varianti, mis tundus \u00fcsna t\u00f6\u00f6kindel. P\u00e4eva l\u00f5puks vabastasime ka teise lahenduse (uue sertifikaadi), millest r\u00e4\u00e4gime edasi.<\/p>\n<p>\n<b>Sertifikaadi vahetamine<\/b><\/p>\n<p>Nagu ma eelnevalt mainisin, oli vajalik:\n<\/p>\n<ul>\n<li>luua uus kehtiv sertifikaat\n<\/li>\n<li>kaugelt see Firefoxi installida\n<\/li>\n<\/ul>\n<p>Selle m\u00f5istmiseks, miks see t\u00f6\u00f6tab, vaatame p\u00f5hjalikumalt pistikprogrammi kontrollimise protsessi. Ise pistikprogramm koosneb failide kogumist, sealhulgas sertifikaadiv\u00f5rgustikku, mida kasutatakse allkirjastamiseks. Seet\u00f5ttu saab pistikprogrammi kontrollida, kui brauserile on teada juursertifikaat, mis on Firefoxi koostamise ajal sisse ehitatud. Kuid nagu me juba teame, on vahe-sertifikaat aegunud, seet\u00f5ttu ei ole pistikprogrammi kontrollimine v\u00f5imalik.<\/p>\n<p>Kui Firefox \u00fcritab laiendust kontrollida, ei piira ta end ainult laienduses sisalduvate sertifikaatide kasutamisega. Selle asemel p\u00fc\u00fcab brauser luua kehtiva sertifikaadi ahela, alustades l\u00f5ppsertifikaadist ja liikudes edasi kuni juureni. Esimesel tasemel alustame l\u00f5ppsertifikaadist ja seej\u00e4rel otsime sertifikaadi, mille subjekt on l\u00f5ppsertifikaadi v\u00e4ljaandja (st vahesertifikaat). Tavalises olukorras kaasneb see vahesertifikaat laiendusega, kuid sellessamas rollis v\u00f5idakse kasutada ka m\u00f5nda sertifikaati brauseri hoidlast. Kui suudame kaugel lisada sertifikaatide hoidlasse uue kehtiva sertifikaadi, p\u00fc\u00fcab Firefox seda kasutada. <a rel=\"nofollow\" href=\"https:\/\/hacks.mozilla.org\/files\/2019\/05\/Add-on-blog-post-visual-2-May-7-2019.png\">Olukord enne ja p\u00e4rast uue sertifikaadi installimist<\/a>.<\/p>\n<p>P\u00e4rast uue sertifikaadi installimist on Firefoxil sertifikaadiga seotud kaheksa v\u00f5imalust: kasutada vanemat ja kehtetuks tunnistatud sertifikaati (mis ei t\u00f6\u00f6ta) v\u00f5i uut ja kehtivat sertifikaati (mis t\u00f6\u00f6tab). Oluline on, et uus sertifikaat sisaldab samu subjektinime ja avalikku v\u00f5tme, mis ka vanal sertifikaadil, seega on selle allkiri l\u00f5ppsertifikaadil kehtiv. Firefox on piisavalt nutikas, et proovida m\u00f5lemat varianti, kuni ta leiab t\u00f6\u00f6tava, seet\u00f5ttu saavad lisad taas kinnitatud. Pange t\u00e4hele, et see on sama loogika, mida me kasutame TLS-sertifikaatide kontrollimisel.<\/p>\n<p><i>Autori m\u00e4rkus: lugejad, kes tunnevad WebPKI-d, m\u00e4rkavad, et ristsertifikaadid t\u00f6\u00f6tavad t\u00e4pselt samamoodi.<\/i><\/p>\n<p>Selle paranduse k\u00f5ige rohkem t\u00e4helepanuv\u00e4\u00e4rne aspekt on see, et see ei n\u00f5ua olemasolevate lisade allkirjastamist. Niipea kui brauser saab uue sertifikaadi, hakkavad k\u00f5ik lisad taas t\u00f6\u00f6le. \u00dcks keerukus seisneb selles, kuidas tarnida uus sertifikaat kasutajatele (automaatselt ja eemalt) ning sundida Firefoxi l\u00e4bi vaatama keelatud lisasid.<\/p>\n<p>\n<b>Normandy ja uurimis\u00fcsteem<\/b><\/p>\n<p>\u041f\u043e \u0438\u0440\u043e\u043d\u0438\u0438 \u0441\u0443\u0434\u044c\u0431\u044b, \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0440\u0435\u0448\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435, \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0435 &#171;\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c&#187;. \u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043c\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Normandy, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u042d\u0442\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435, \u0438 \u0438\u043c\u0435\u044e\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c API-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c Firefox. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0433\u0443\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.<\/p>\n<p><i>Autori m\u00e4rkuse kohaselt: me ei lisa sertifikaati mingite eriliste privileegidega; see on allkirjastatud juursertifikaadiga, seet\u00f5ttu usaldab Firefox seda. Me lihtsalt lisame selle sertifikaatide hulka, mida brauser saab kasutada.<\/i><\/p>\n<p>Seega, lahendus seisneb uuringu loomises:\n<\/p>\n<ul>\n<li>kasutajatele meie loodud uue sertifikaadi seadmine\n<\/li>\n<li>brauseri sundimine desaktiveeritud lisandeid uuesti kontrollima, et need t\u00f6\u00f6taksid taas\n<\/li>\n<\/ul>\n<p>&#171;\u041d\u043e \u043f\u043e\u0434\u043e\u0436\u0434\u0438&#187;, &#8212; \u0441\u043a\u0430\u0436\u0435\u0442\u0435 \u0432\u044b, &#171;\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0436\u0435 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442, \u043a\u0430\u043a \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435?&#187;. \u041f\u043e\u0434\u043f\u0438\u0448\u0435\u043c \u0435\u0433\u043e \u043d\u043e\u0432\u044b\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c!<\/p>\n<p>\n<b>Kogume k\u00f5ik kokku... miks see nii kaua v\u00f5tab?<\/b><\/p>\n<p>Nii et, plaan: v\u00e4lja anda uus sertifikaat, et asendada vana, luua s\u00fcsteemne t\u00e4iendus ja paigaldada see kasutajatele l\u00e4bi Normandy. Probleemid, nagu ma \u00fctlesin, algasid 4. mail kell 4:00 ja juba kell 12:44 samal p\u00e4eval, v\u00e4hem kui 9 tunni jooksul, saatsime paranduse Normandy'sse. Selle j\u00f5udmine k\u00f5ikide kasutajateni v\u00f5ttis veel 6-12 tundi. See on juba mitte halb, kuid Twitteris k\u00fcsivad kasutajad, miks me ei saanud kiiremini tegutseda.<\/p>\n<p>Esiteks, uue vahesertifikaadi v\u00e4ljaandmiseks kulus aega. Nagu ma eelnevalt mainisin, on juursertifikaadi v\u00f5ti salvestatud eraldi turvaseadmestikku. See on turvalisuse seisukohalt hea, kuna juurt kasutatakse v\u00e4ga harva ja see peab olema usaldusv\u00e4\u00e4rselt kaitstud, kuid see on veidi ebamugav, kui on vaja kiiresti uue sertifikaadi allkirjastamist. \u00dchel meie inseneridest tuli minna HSM-i ladustamisse. Seej\u00e4rel olid katsetused \u00f5igete sertifikaatide v\u00e4ljastamiseks eba\u00f5nnestunud, ning iga katse v\u00f5ttis aega \u00fcks kuni kaks tundi, mis kulus testimise peale.<\/p>\n<p>Teiseks, v\u00f5ttis s\u00fcsteemi t\u00e4ienduse v\u00e4ljat\u00f6\u00f6tamine aega. Kontseptuaalselt on see v\u00e4ga lihtne, kuid isegi lihtsad programmid n\u00f5uavad t\u00e4helepanu. Soovisime veenduda, et me ei teeks olukorda veel hullemaks. Uuringut peab enne kasutajatele saatmist testima. Lisaks peab t\u00e4iendus olema allkirjastatud, kuid meie t\u00e4iendite allkirjastamise s\u00fcsteem oli v\u00e4lja l\u00fclitatud, seega tuli leida lahendus.<\/p>\n<p>L\u00f5puks, kui olime uuringud saatmiseks ette valmistanud, v\u00f5ttis juurutamine aega. Brauser kontrollib Normandy v\u00e4rskenduste k\u00e4ttesaadavust iga 6 tunni j\u00e4rel. Mitte k\u00f5ik arvutid ei ole pidevalt sisse l\u00fclitatud ja v\u00f5rguga \u00fchendatud, seet\u00f5ttu on vajalik aeg, et parandus kasutajateni j\u00f5uaks.<\/p>\n<p>\n<b>L\u00f5ppfaasid<\/b><\/p>\n<p>Uuring peaks lahendama probleemi enamikul kasutajatel, kuid see ei ole k\u00f5igile kergesti k\u00e4ttesaadav. Teatud kasutajate puhul on vajalik eriline l\u00e4henemine:\n<\/p>\n<ul>\n<li>kasutajad, kes on uuringud v\u00f5i telemetria v\u00e4lja l\u00fclitanud\n<\/li>\n<li>Androidi versiooni (Fennec) kasutajad, kus uuringud pole \u00fcldse toetatud\n<\/li>\n<li>Firefox ESR kohandatud versioonide kasutajad ettev\u00f5tetes, kus telemeetriat ei ole v\u00f5imalik lubada\n<\/li>\n<li>kasutajad, kes on MitM-prokside taga, kuna meie lisade paigaldamise s\u00fcsteem kasutab v\u00f5tme sidumist, mis ei t\u00f6\u00f6ta selliste proksidega\n<\/li>\n<li>vanemate Firefoxi versioonide kasutajad, mis ei toeta uuringute l\u00e4biviimist\n<\/li>\n<\/ul>\n<p>Me ei saa viimase kategooria kasutajatega midagi ette v\u00f5tta \u2014 nad peaksid kindlasti uuendama Firefoxi uue versioonini, sest vanematel on t\u00f5sised, lahendamata haavatavused. Me teame, et m\u00f5ned inimesed j\u00e4\u00e4vad vanadele Firefoxi versioonidele lootuses k\u00e4ivitada vanu lisaelemente, kuid paljusid vanu lisaelemente on juba kohandatud uute brauseriversioonide jaoks. \u00dclej\u00e4\u00e4nud kasutajatele oleme v\u00e4lja t\u00f6\u00f6tanud patareid, mis paigaldavad uue sertifikaadi. See on v\u00e4lja antud kui veaparanduse versioon (<i>t\u00f5lkija m\u00e4rkus: Firefox 66.0.5<\/i>), seega saavad inimesed selle \u2014 t\u00f5en\u00e4oliselt on nad juba saanud \u2014 l\u00e4bi tavalise uuenduste kanali. Kui kasutate kohandatud Firefox ESR versiooni, p\u00f6\u00f6rduge oma hooldaja poole.<\/p>\n<p>Me m\u00f5istame, et see pole k\u00f5ikeh\u00f5lmav lahendus. M\u00f5nel juhul on kasutajad kaotanud lisaandmed (n\u00e4iteks lisasegu <a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1549204\">Multi-Account Containers<\/a>).<\/p>\n<p>Seda k\u00f5rvalm\u00f5ju oli v\u00e4ltimatu, kuid usume, et l\u00fchiajaliselt valisime enamikule kasutajatele parima lahenduse. Pikaajalises plaanis otsime v\u00e4lja teisi, t\u00e4iustatud arhitektuurilisi l\u00e4henemisviise.<\/p>\n<p>\n<b>Tunnid<\/b><\/p>\n<p>Esiteks on meie meeskond teinud imelist t\u00f6\u00f6d, luues ja edastades paranduse v\u00e4hem kui 12 tunni jooksul p\u00e4rast probleemi tuvastamist. Inimesena, kes oli koosolekutel kohal, v\u00f5in \u00f6elda, et selles keerulises olukorras t\u00f6\u00f6tasid inimesed v\u00e4ga hoolsalt ning aega raisati vaid v\u00e4he.<\/p>\n<p>On ilmne, et seda k\u00f5ike ei oleks tohtinud \u00fcldse juhtuda. Selgelt on vaja korrigeerida meie protsesse, et v\u00e4hendada sarnaste juhtumite t\u00f5en\u00e4osust ja kergendada tagaj\u00e4rgede eemaldamist.<\/p>\n<p>J\u00e4rgmise n\u00e4dala jooksul avaldame ametliku post-mortemi ja muudatuste nimekirja, mida kavatseme teha. Kuni selle ajani jagan oma m\u00f5tteid. Esiteks peab olema parem viis j\u00e4lgida, mis on potentsiaalne aegpomm. Peame olema kindlad, et me ei satuks olukorda, kus \u00fcks neist \u00fchel hetkel plahvatab. T\u00f6\u00f6tame veel \u00fcksikasjade kallal, kuid v\u00e4hemalt on vajalik k\u00f5igi selliste asjade arvestamine.<\/p>\n<p>\u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u043d\u0443\u0436\u0435\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0434\u0430\u0436\u0435 \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u2014 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043a\u043e\u0433\u0434\u0430 \u2014 \u0432\u0441\u0451 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442. \u0411\u044b\u043b\u043e \u0437\u0434\u043e\u0440\u043e\u0432\u043e, \u0447\u0442\u043e \u043c\u044b \u0441\u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 &#171;\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439&#187;, \u043d\u043e \u044d\u0442\u043e \u043d\u0435\u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0438 \u043e\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0430\u043c\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043c\u044b \u0437\u043d\u0430\u0435\u043c, \u0447\u0442\u043e \u0443 \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u043e \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u043b\u0438 \u0431\u044b \u043d\u0435 \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445 (\u043f\u0440\u0438\u0437\u043d\u0430\u044e\u0441\u044c, \u0443 \u043c\u0435\u043d\u044f \u043e\u043d\u0438 \u0442\u043e\u0436\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b!). \u0412 \u0442\u043e \u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0430\u043c \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0440\u0438\u0441\u043b\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u043e, \u043a\u0430\u043a\u043e\u0439 \u0431\u044b \u043d\u0438 \u0431\u044b\u043b\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044f\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e\u043b\u0436\u043d\u044b \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f), \u043d\u043e \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0432\u0441\u0435\u0433\u043e \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043d\u0430\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u043e\u0442\u0437\u044b\u0432\u0447\u0438\u0432\u044b\u043c, \u0447\u0435\u043c \u0441\u0435\u0439\u0447\u0430\u0441. \u0414\u0430\u0436\u0435 6 \u043c\u0430\u044f \u0435\u0449\u0451 \u0431\u044b\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u043d\u0438 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439. \u041d\u0430\u0434 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0443\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438, \u043d\u043e \u0441\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0435\u0441\u044f \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0430 \u0432\u0430\u0436\u043d\u0430.<\/p>\n<p>L\u00f5puks vaatame l\u00e4hemalt lisaehitiste turbekonstruktsiooni, et veenduda, et see tagab vajaliku turvalisuse taseme minimaalse riskiga midagi rikkuda.<\/p>\n<p>J\u00e4rgmisel n\u00e4dalal vaatame p\u00f5hjalikuma anal\u00fc\u00fcsi tulemusi, aga praegu olen valmis vastama k\u00fcsimustele e-posti teel: ekr-blog@mozilla.com<\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"http:\/\/www.linux.org.ru\/news\/mozilla\/14982826\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0447\u0438\u043a\u0430: \u0434\u043b\u044f \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u0430 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u0430\u0442\u044b \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043f\u043e \u043c\u043e\u0441\u043a\u043e\u0432\u0441\u043a\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043c\u044b \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u044f \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u0445 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0438 \u043e \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435. \u041f\u043e\u0434\u043e\u043f\u043b\u0451\u043a\u0430: \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0425\u043e\u0442\u044f \u043c\u043d\u043e\u0433\u0438\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33377","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0447\u0438\u043a\u0430: \u0434\u043b\u044f \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u0430 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u0430\u0442\u044b \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043f\u043e \u043c\u043e\u0441\u043a\u043e\u0432\u0441\u043a\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043c\u044b \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u044f \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u0445 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0438 \u043e \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435. \u041f\u043e\u0434\u043e\u043f\u043b\u0451\u043a\u0430: \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0425\u043e\u0442\u044f \u043c\u043d\u043e\u0433\u0438\u0435\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/tehnicheskie-podrobnosti-nedavnego-otklyucheniya-dopolnenij-v-firefox\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0432 Firefox | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0447\u0438\u043a\u0430: \u0434\u043b\u044f \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u0430 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u0430\u0442\u044b \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043f\u043e \u043c\u043e\u0441\u043a\u043e\u0432\u0441\u043a\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043c\u044b \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u044f \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u0445 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0438 \u043e \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435. \u041f\u043e\u0434\u043e\u043f\u043b\u0451\u043a\u0430: \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0425\u043e\u0442\u044f \u043c\u043d\u043e\u0433\u0438\u0435\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/tehnicheskie-podrobnosti-nedavnego-otklyucheniya-dopolnenij-v-firefox\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:52:15+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:52:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Viimaste lisade v\u00e4ljal\u00fclitamise tehnilised \u00fcksikasjad Firefoxis | ProHoster","description":"M\u00e4rkus: t\u00f5lkija jaoks on mugavuse huvides kuup\u00e4evad antud Moskva ajas. Hiljuti j\u00e4tsime \u00e4ra t\u00e4htaegade m\u00f6\u00f6dumise \u00fche sertifikaadi osas, mida kasutati lisade allkirjastamiseks. See viis lisade v\u00e4ljal\u00fclitamiseni kasutajatel. N\u00fc\u00fcd, kui probleem on enamasti lahendatud, sooviksin r\u00e4\u00e4kida juhtunud \u00fcksikasjadest ja tehtud t\u00f6\u00f6st. Taust: lisad ja allkirjastamine. Kuigi paljud","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/tehnicheskie-podrobnosti-nedavnego-otklyucheniya-dopolnenij-v-firefox","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0432 Firefox | ProHoster","og:description":"\u041f\u0440\u0438\u043c. \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0447\u0438\u043a\u0430: \u0434\u043b\u044f \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u0430 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u0430\u0442\u044b \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u044b \u043f\u043e \u043c\u043e\u0441\u043a\u043e\u0432\u0441\u043a\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043c\u044b \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0422\u0435\u043f\u0435\u0440\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u044f \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u0445 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0438 \u043e \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435. \u041f\u043e\u0434\u043e\u043f\u043b\u0451\u043a\u0430: \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0425\u043e\u0442\u044f \u043c\u043d\u043e\u0433\u0438\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/tehnicheskie-podrobnosti-nedavnego-otklyucheniya-dopolnenij-v-firefox","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:15+00:00","article:modified_time":"2019-10-31T18:52:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33377","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 14:58:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:46:11","updated":"2026-01-21 14:58:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33377","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33377"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33377\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}