{"id":36619,"date":"2019-10-31T22:12:43","date_gmt":"2019-10-31T19:12:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver\/"},"modified":"2019-10-31T22:12:43","modified_gmt":"2019-10-31T19:12:43","slug":"post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver","title":{"rendered":"Post-analu\u00fcs: mis on teada viimase r\u00fcnnaku kohta SKS Keyserveri serveriv\u00f5rgule","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>H\u00e4kkerid kasutasid OpenPGP protokolli omadust, mis on tuntud rohkem kui k\u00fcmme aastat. <\/p>\n<p>Selgitame, mis asi see on ja miks ei saa seda sulgeda.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vasexperts\/blog\/461443\/\"><img decoding=\"async\" alt=\"Post-analu\u00fcs: mis on teada viimase r\u00fcnnaku kohta SKS Keyserveri serveriv\u00f5rgule\" src=\"\/wp-content\/uploads\/2019\/07\/d8fec24b72a147e758eb1174eecb7336.jpeg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\n<i>\/ Unsplash \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/unsplash.com\/photos\/8fs1X0JFgFE\">Chunlea Ju<\/a><\/noindex><\/i><\/p>\n<h2>V\u00f5rguprobleemid<\/h2>\n<p>\nJuuni keskpaiku teostasid tundmatud <noindex><a rel=\"nofollow\" href=\"https:\/\/gist.github.com\/rjhansen\/67ab921ffb4084c865b3618d6955275f\">r\u00fcnnaku<\/a><\/noindex> kr\u00fcptograafiliste v\u00f5tmete serveriv\u00f5rgule <noindex><a rel=\"nofollow\" href=\"https:\/\/bitbucket.org\/skskeyserver\/sks-keyserver\/src\/default\/\">SKS Keyserver<\/a><\/noindex>, mis p\u00f5hineb OpenPGP protokollil. See on IETF standard (<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4880\">RFC 4880<\/a><\/noindex>), mida kasutatakse e-kirjade ja teiste s\u00f5numite kr\u00fcpteerimiseks. SKS v\u00f5rku loodi kolmk\u00fcmmend aastat tagasi avalike sertifikaatide levitamiseks. Sellega \u00fchenduvad sellised t\u00f6\u00f6riistad nagu <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/GnuPG\">GnuPG<\/a><\/noindex> andmete kr\u00fcpteerimiseks ja digitaalsete allkirjade koostamiseks.<\/p>\n<p>H\u00e4kkerid on kompromiteerinud kaks GnuPG projekti hooldaja sertifikaati \u2014 Robert Hansen ja Daniel Gillmor. Rikkis sertifikaadi allalaadimine serverist p\u00f5hjustab GnuPG t\u00f6\u00f6katkestuse \u2014 s\u00fcsteem lihtsalt hangub. On alust arvata, et kurjategijad ei kavatse sellega piirduda, ning kompromiteeritud sertifikaatide arv suureneb. Praegu j\u00e4\u00e4b probleemi ulatus teadmata.<\/p>\n<h2>R\u00fcnnaku sisu<\/h2>\n<p>\nH\u00e4kkerid kasutasid OpenPGP protokolli haavatavust. See on kogukonnale tuntud juba rohkem kui k\u00fcmme aastat. Isegi GitHubist <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/micahflee\/trollwot\">v\u00f5ib leida<\/a><\/noindex> vastavaid eksploitatsioone. Kuid keegi pole veel v\u00f5tnud vastutust selle \"augu\" sulgemise eest (r\u00e4\u00e4gime p\u00f5hjustest hiljem p\u00f5hjalikumalt).<\/p>\n<blockquote><p><b>Pakume v\u00e4lja paar valikut meie blogist Habrist:<\/b><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vasexperts\/blog\/446634\/\">SDN-\u00fclevaade \u2014 kuus avatud l\u00e4htekoodiga emulaatorit<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vasexperts\/blog\/446058\/\">Kuidas ehitada SDN \u2014 kaheksa avatud l\u00e4htekoodiga t\u00f6\u00f6riista<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vasexperts\/blog\/433298\/\">V\u00f5rgudigest: 17 ekspertiisi materjali Wi-Fi ja 5G kohta<\/a><\/noindex><\/li>\n<\/ul>\n<\/blockquote>\n<p>\nOpenPGP spetsifikatsiooni kohaselt v\u00f5ivad k\u00f5ik lisada digitaalallkirju sertifikaatidele nende omaniku kinnitamiseks. Allkirjade maksimumarv ei ole reguleeritud. Siin tekib probleem \u2014 SKS v\u00f5rk v\u00f5imaldab \u00fche sertifikaadi kohta talletada kuni 150 tuhat allkirja, kuid GnuPG ei toeta sellist arvu. Nii et sertifikaadi laadimisel GnuPG-s (nagu ka teistes OpenPGP rakendustes) tekib seiskumine.<\/p>\n<p>\u00dcks kasutajatest <noindex><a rel=\"nofollow\" href=\"https:\/\/buttondown.email\/cryptography-dispatches\/archive\/cryptography-dispatches-hello-world-and-openpgp\/\">tegi katse<\/a><\/noindex> \u2014 sertifikaadi importimine v\u00f5ttis temalt umbes 10 minutit. Sertifikaadil oli \u00fcle 54 tuhande allkirja ja selle kaal ulatus 17 MB:<\/p>\n<pre><code class=\"bash\">$ gpg --homedir=$PWD --recv C4BC2DDB38CCE96485EBE9C2F20691179038E5C6\ngpg: v\u00f5tme F20691179038E5C6: 4 dubleeritud allkirja eemaldatud\ngpg: v\u00f5tme F20691179038E5C6: 54614 allkirja ei kontrollitud puuduolevate v\u00f5tmete t\u00f5ttu\ngpg: v\u00f5tme F20691179038E5C6: 4 allkirja \u00fcmber j\u00e4rjestatud\ngpg: v\u00f5tme F20691179038E5C6: avalik v\u00f5tme \"Daniel Kahn Gillmor \" importitud\ngpg: ei leitud l\u00f5puks usaldusv\u00e4\u00e4rseid v\u00f5tmeid\ngpg: T\u00f6\u00f6deldud kokku: 1\ngpg:               imporditud: 1\n$ ls -lh pubring.gpg\n-rw-r--r--  1 filippo  staff    17M  2 Juuli 16:30 pubring.gpg\n<\/code><\/pre>\n<p>\nOlukorda s\u00fcvendab asjaolu, et OpenPGP v\u00f5tme serverid ei kustuta sertifikaatide teavet. See on tehtud selleks, et j\u00e4lgida k\u00f5iki tegevusi sertifikaatidega ja v\u00e4listada nende manipuleerimine. Seet\u00f5ttu ei saa kompromiteeritud \u00fcksusi likvideerida.<\/p>\n<p>Sisuliselt on SKS-v\u00f5rk suur \"failiserver\", kuhu iga\u00fchel on v\u00f5imalik andmeid kirjutada. Probleemi illustreerimiseks l\u00f5i m\u00f6\u00f6dunud aastal GitHubi resident <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/yakamok\/keyserver-fs\">failis\u00fcsteemi<\/a><\/noindex>, mis salvestab dokumente kr\u00fcptov\u00f5tmete serverite v\u00f5rgus.<\/p>\n<h2>Miks haavatavust ei suletud<\/h2>\n<p>\nHaavatavuse sulgemiseks polnud p\u00f5hjust. Varem ei ole seda kasutatud h\u00e4ketegevuste tegemiseks. Kuigi IT- kogukond <noindex><a rel=\"nofollow\" href=\"https:\/\/news.ycombinator.com\/item?id=20315633\">on pikka aega palunud<\/a><\/noindex> SKS ja OpenPGP arendajatel sellele probleemile t\u00e4helepanu p\u00f6\u00f6rata.<\/p>\n<p>\u00d5igusem\u00f5istmise nimel tasub m\u00e4rkida, et juunis nad siiski <noindex><a rel=\"nofollow\" href=\"https:\/\/keys.openpgp.org\/about\/news#2019-06-12-launch\">k\u00e4ivitasid<\/a><\/noindex> eksperimenteerse v\u00f5tme serveri <noindex><a rel=\"nofollow\" href=\"https:\/\/keys.openpgp.org\/about\/news\">keys.openpgp.org<\/a><\/noindex>. Selles on rakendatud kaitse selliste r\u00fcnnakute t\u00fc\u00fcpide eest. Kuid selle andmebaas t\u00e4idetakse nullist ning server ei kuulu SKS-i. Seet\u00f5ttu l\u00e4heb aega, enne kui seda saaks kasutada.<\/p>\n<p><img decoding=\"async\" alt=\"Post-analu\u00fcs: mis on teada viimase r\u00fcnnaku kohta SKS Keyserveri serveriv\u00f5rgule\" src=\"\/wp-content\/uploads\/2019\/07\/6ab10981f7c6215cede6e26c2fd3aa5c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>\/ Unsplash \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/unsplash.com\/photos\/_DkmMhzrsYY\">Rub\u00e9n Bag\u00fc\u00e9s<\/a><\/noindex><\/i><\/p>\n<p>Alguses s\u00fcsteemis esinenud vea parandamist takistab keeruline s\u00fcnkroniseerimismehhanism. V\u00f5tmeserverite v\u00f5rk loodi algselt t\u00f5endina doktori v\u00e4itekirja kaitsmiseks Yaron Minsky poolt. Omamoodi spetsiifiseks valiti t\u00f6\u00f6ks OCaml keel. <noindex><a rel=\"nofollow\" href=\"https:\/\/gist.github.com\/rjhansen\/67ab921ffb4084c865b3618d6955275f\">s\u00f5nadega<\/a><\/noindex> Hooldaja Robert Hanseni s\u00f5nul on koodis orienteerumine keeruline, mist\u00f5ttu sellega tehakse ainult v\u00e4ikeseid parandusi. SKS arhitektuuri kohandamiseks tuleb see nullist \u00fcmber kirjutada.<\/p>\n<p>Igatahes ei usuta GnuPG-s, et v\u00f5rgustikku kunagi parandada \u00f5nnestub. GitHubi postituses m\u00e4rkisid arendajad, et nad ei soovita SKS Keyserveriga t\u00f6\u00f6tada. See on \u00fcks peamisi p\u00f5hjusi, miks nad algatasid \u00fclemineku uuele teenusele keys.openpgp.org. Meie \u00fclesanne on vaid j\u00e4lgida edasisi arenguid.<\/p>\n<blockquote><p><b>M\u00f5ned materjalid meie ettev\u00f5tte blogist:<\/b><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/vasexperts.ru\/blog\/bezopasnost\/botnet-spamit-cherez-routery\/\">Botnet 'spammib' l\u00e4bi ruutereid: mida on vaja teada<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/vasexperts.ru\/blog\/bezopasnost\/ddos-i-5g-tolshhe-truba-bolshe-problem\/\">DDoS ja 5G: paksem 'toru' \u2014 rohkem probleeme<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/vasexperts.ru\/blog\/bezopasnost\/firewall-ili-dpi-instrumenty-zashhity-raznogo-naznacheniya\/\">Firewall v\u00f5i DPI \u2014 erineva otstarbega kaitsemehhanismid<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/vasexperts.ru\/blog\/telekom\/internet-v-derevnyu-stroim-radiorelejnuyu-wi-fi-set\/\">Internet maale \u2014 ehitame raadiolinkide Wi-Fi v\u00f5rgu<\/a><\/noindex><\/li>\n<\/ul>\n<\/blockquote>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vasexperts\/blog\/461443\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenPGP, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043b\u0435\u0442. \u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u0432 \u0447\u0435\u043c \u0441\u0443\u0442\u044c \u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u0435\u0451 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043a\u0440\u044b\u0442\u044c. \/ Unsplash \/ Chunlea Ju \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u0435\u0442\u0438 \u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0438\u044e\u043d\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 SKS Keyserver, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenPGP. \u042d\u0442\u043e \u2014 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 IETF (RFC 4880), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27422,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36619","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenPGP, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043b\u0435\u0442. \u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u0432 \u0447\u0435\u043c \u0441\u0443\u0442\u044c \u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u0435\u0451 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043a\u0440\u044b\u0442\u044c. \/ Unsplash \/ Chunlea Ju \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u0435\u0442\u0438 \u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0438\u044e\u043d\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 SKS Keyserver, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenPGP. \u042d\u0442\u043e \u2014 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 IETF (RFC 4880), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u043e\u0441\u0442-\u0430\u043d\u0430\u043b\u0438\u0437: \u0447\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0441\u0435\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043b\u044e\u0447\u0435\u0439 SKS Keyserver | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenPGP, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043b\u0435\u0442. \u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u0432 \u0447\u0435\u043c \u0441\u0443\u0442\u044c \u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u0435\u0451 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043a\u0440\u044b\u0442\u044c. \/ Unsplash \/ Chunlea Ju \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u0435\u0442\u0438 \u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0438\u044e\u043d\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 SKS Keyserver, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenPGP. \u042d\u0442\u043e \u2014 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 IETF (RFC 4880), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:12:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:12:43+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Post-anal\u00fc\u00fcs: mis on teada viimase r\u00fcnnaku kohta SKS Keyserveri kr\u00fcptov\u00f5tmete v\u00f5rku | ProHoster","description":"H\u00e4kkerid kasutasid OpenPGP protokolli omadust, mis on teada olnud \u00fcle k\u00fcmne aasta. Selgitame, milles on probleem ja miks seda ei saa lahendada. \/ Unsplash \/ Chunlea Ju Probleemid v\u00f5rgus Juuni keskpaiku r\u00fcnnati tundmatute poolt SKS Keyserveri kr\u00fcptov\u00f5tmete serverite v\u00f5rku, mis p\u00f5hineb OpenPGP protokollil. See on IETF standard (RFC 4880), mida kasutatakse.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0441\u0442-\u0430\u043d\u0430\u043b\u0438\u0437: \u0447\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0441\u0435\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043b\u044e\u0447\u0435\u0439 SKS Keyserver | ProHoster","og:description":"\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenPGP, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u0438 \u043b\u0435\u0442. \u0420\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c, \u0432 \u0447\u0435\u043c \u0441\u0443\u0442\u044c \u0438 \u043f\u043e\u0447\u0435\u043c\u0443 \u0435\u0451 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043a\u0440\u044b\u0442\u044c. \/ Unsplash \/ Chunlea Ju \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u0435\u0442\u0438 \u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0438\u044e\u043d\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 SKS Keyserver, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 OpenPGP. \u042d\u0442\u043e \u2014 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 IETF (RFC 4880), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:12:43+00:00","article:modified_time":"2019-10-31T19:12:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36619","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:10:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:41:53","updated":"2026-01-22 04:10:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36619","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36619"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36619\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27422"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36619"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36619"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36619"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}