{"id":38655,"date":"2019-10-31T22:25:05","date_gmt":"2019-10-31T19:25:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej\/"},"modified":"2019-10-31T22:25:05","modified_gmt":"2019-10-31T19:25:05","slug":"chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","title":{"rendered":"Chrome hakkab blokeerima HTTP-ressursse HTTPS-lehtedel ning kontrollima paroolide usaldusv\u00e4\u00e4rsust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google'i ettev\u00f5te hoiatab<\/a><\/noindex> muutusest segasisu t\u00f6\u00f6tlemise l\u00e4henemisviisis HTTPS-protokolliga avatud lehtedel. Varem kuvati avatud lehtedel, kus oli komponente, mis laaditi alla kr\u00fcpteerimata (HTTP-protokolli kaudu), spetsiaalne indikaator. Tulevikus otsustati selliste ressursside laadimine vaikev\u00e4lja l\u00fckata. Seega sisaldavad lehed, mis on avatud \"https:\/\/\", garanteeritult ainult ressursside, mis on laaditud kaitstud sidekanali kaudu.<\/p>\n

T\u00e4heldatakse, et praegu avatakse Chrome'i kasutajate poolt rohkem kui 90% veebilehtedest HTTPS-i kaudu. Kr\u00fcpteerimata sissekanded loovad turvarikkumise ohu kr\u00fcpteerimata sisu muutmise kaudu, kui sidekanalit j\u00e4lgitakse (n\u00e4iteks avatud Wi-Fi kaudu \u00fchendamisel). Segasisu indikaator tunnistatakse ebat\u00f5husaks ja eksitavaks, kuna see ei anna kindlat hinnangut lehe turvalisusele.<\/p>\n

Praegu blokeeritakse k\u00f5ige ohtlikumad segasisu t\u00fc\u00fcbid, nagu skriptid ja iframe'id, juba vaikimisi, kuid pilte, helifaile ja videoid saab endiselt laadida http:\/\/ kaudu. Pilte asendades saab r\u00fcndaja sisestada j\u00e4lgimisaktiivsuse k\u00fcpsised, proovida \u00e4ra kasutada pildit\u00f6\u00f6tlejate haavatavusi v\u00f5i valeinformatsiooni esitamise teel petta kasutajat.<\/p>\n

Blokeerimise rakendamine on jagatud mitmeks etapiks. Chrome 79, mis on planeeritud 10. detsembriks, sisaldab uut seadet, mis v\u00f5imaldab blokeeringu keelata teatud veebisaitidel. Antud seade rakendub juba blokeerimise all olevale segasisule, nagu skriptid ja iframe'id, ning seda saab kutsuda esile men\u00fc\u00fcst, mis avaneb lukus\u00fcmbolile kl\u00f5psamisel, asendades varasema ettepaneku blokeeringu keelamiseks.<\/p>\n

\"Chrome<\/center><\/p>\n

Chrome 80, mis oodatakse 4. veebruaril, rakendab pehmet skeemi heli- ja videofailide blokeerimiseks, mis t\u00e4hendab automaatset asendamist http:\/\/ linkidega https:\/\/, v\u00f5imaldades seda kasutada, kui probleemne ressurss on ka HTTPS-is saadaval. Pildid j\u00e4tkavad laadimist muutumatult, kuid juhul, kui need laaditakse http:\/\/ lehtedelt https:\/\/, kuvatakse kogu lehe jaoks ka kaitsmata \u00fchenduse indikaator. Automaatseks asendamiseks https-iga v\u00f5i piltide blokeerimiseks saavad veebiarendajad kasutada CSP omadusi upgrade-insecure-requests ja block-all-mixed-content. Chrome 81 v\u00e4ljalaskmisel, mis on planeeritud 17. m\u00e4rtsiks, rakendatakse automaatset asendamist http:\/\/ piltide puhul https:\/\/.<\/p>\n

\"Chrome<\/a><\/noindex><\/center><\/p>\n

Lisaks teeb Google teatas<\/a><\/noindex> Chrome'i j\u00e4rgmiste versioonide \u00fcheks komponendiks uue funktsiooni Password Checkup, mis varem arenes<\/a><\/noindex> v\u00e4lise lisandina . Integreerimine toob kaasa Chrome'i sisseehitatud paroolihaldurisse vahendid kasutaja paroolide usaldusv\u00e4\u00e4rsuse anal\u00fc\u00fcsimiseks. Igal sisselogimisel kontrollitakse sisselogimisandmeid h\u00e4kitud kontode andmebaasi, andes hoiatuse, kui probleeme tuvastatakse. Kontrollimine toimub andmebaasi kaudu, mis katab \u00fcle 4 miljardi h\u00e4kitud konto, mis on ilmnenud kasutajate andmeleketes. Hoiatus kuvatakse ka triviaalsete paroolide, nagu 'abc123' (vastavalt<\/a><\/noindex>. Integreerimine toob kaasa Chrome'i paroolihaldurisse vahendid kasutaja paroolide usaldusv\u00e4\u00e4rsuse anal\u00fc\u00fcsimiseks. Iga kord, kui kasutaja \u00fcritab siseneda m\u00f5nele veebisaidile, kontrollitakse kasutajanime ja parooli kompromiteeritud kontode andmebaasis, teavitades probleemi tuvastamisel. Kontroll tehakse andmebaasi p\u00f5hjal, mis h\u00f5lmab rohkem kui 4 miljardit kompromiteeritud kontot, mis on olnud kasutajate andmelekete juures. Teatamine toimub ka triviaalsete paroolide kasutamise katsete korral, nagu \"abc123\" (alates Google'i 23% ameeriklastest kasutavad selliseid salas\u00f5nu), v\u00f5i sama parooli kasutamisel mitmel saidil.<\/a><\/noindex> Privaatsuse s\u00e4ilitamiseks v\u00e4lise API k\u00f5nes edastatakse ainult esimene kahe baitise h\u00e4\u00e4lik logi ja parooli kombinatsioonist (h\u00e4\u00e4likute genereerimiseks kasutatakse algoritmi<\/p>\n

Argon2 ). T\u00e4ielik hummus on kr\u00fcpteeritud v\u00f5tmega, mis genereeritakse kasutaja poolel. Algse hummused Google'i andmebaasis on samuti t\u00e4iendavalt kr\u00fcpteeritud ning indekseerimiseks j\u00e4etakse ainult esimene kahe baitise hummus. L\u00f5plik hantimine hummuste osas, mis kuuluvad edastatud kahe baitise prefiksi alla, toimub kasutaja poolel, kasutades kr\u00fcptograafilist tehnikat '<\/a><\/noindex>). T\u00e4ielik r\u00e4si kr\u00fcpteeritakse kasutaja poolel genereeritud v\u00f5tmega. Google'i andmebaasis olevaid algseid r\u00e4se lisaks kr\u00fcpteeritakse ning indekseeritakse ainult r\u00e4si esimese kahe baitiga. L\u00f5plik r\u00e4si verifitseeritakse, kui see langeb kokku edastatud kahe baiti eelseisvaga, kasutades kr\u00fcptograafilist tehnikat \"blindage<\/a><\/noindex>\", kus ei teata kummagi osapoole suhtes kontrollitavate andmete sisu. Kompromiteeritud konto andmebaasi sisu m\u00e4\u00e4ratlemise v\u00e4ltimiseks juhuslike prefiksidega p\u00e4ringute kaudu kr\u00fcpteeritakse edastatavad andmed v\u00f5tmega, mis on genereeritud kontrollitava kasutajanime ja parooli sideme p\u00f5hjal. <\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS. \u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441 \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 http:\/\/), \u0432\u044b\u0432\u043e\u0434\u0438\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440. \u0412 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u043e «https:\/\/», \u0431\u0443\u0434\u0443\u0442 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28995,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome hakkab HTTPS-lehtedel HTTP-resursse blokeerima ja kontrollib paroolide usaldusv\u00e4\u00e4rsust | ProHoster","description":"Google on hoiatanud segatud sisu t\u00f6\u00f6tlemise l\u00e4henemise muutmise kohta.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u043d\u0430\u0447\u043d\u0451\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c HTTP-\u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043d\u0430 HTTPS-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:05+00:00","article:modified_time":"2019-10-31T19:25:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:05:22","updated":"2026-01-23 22:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/28995"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}