{"id":52168,"date":"2019-11-02T00:00:00","date_gmt":"2019-11-01T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-cloudflare-i-facebook-predstavili-tls-rasshirenie-dlya-delegirovaniya-korotkozhivushhih-sertifikatov"},"modified":"2020-02-18T13:59:50","modified_gmt":"2020-02-18T10:59:50","slug":"mozilla-cloudflare-i-facebook-predstavili-tls-rasshirenie-dlya-delegirovaniya-korotkozhivushhih-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/mozilla-cloudflare-i-facebook-predstavili-tls-rasshirenie-dlya-delegirovaniya-korotkozhivushhih-sertifikatov","title":{"rendered":"Mozilla, Cloudflare ja Facebook esitlesid TLS-laiendust l\u00fchiajaliste sertifikaatide delegeerimiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mozilla<\/a><\/noindex>, Cloudflare<\/a><\/noindex> ja Facebook<\/a><\/noindex> koost\u00f6\u00f6s kuulutasid v\u00e4lja uue TLS-laienduse Delegated Credentials<\/a><\/noindex> (DC), mis lahendab sertifikaatidega seotud probleeme, kui juurdep\u00e4\u00e4su korraldada veebisaidile sisu edastamise v\u00f5rkude kaudu. Sertifikaadid, mille v\u00e4ljastavad sertifitseerimisasutused, kehtivad pika aja jooksul, mis tekitab raskusi, kui on vaja korraldada juurdep\u00e4\u00e4su veebisaidile kolmanda osapoole teenuse kaudu, mille kaudu peab olema loodud turvaline \u00fchendus, kuna veebisaidi sertifikaadi edastamine v\u00e4listeenusele tekitab t\u00e4iendavaid turvariske. <\/p>\n

Uus laiendus v\u00f5ib samuti osutuda kasulikuks saitidele, mille t\u00f6\u00f6 tagavad suured jaotusstruktuurid, kus on palju koormuse jagajaid. Delegated Credentials aitab v\u00e4ltida peamiste sertifikaatide privaatsete v\u00f5tmete koopiaid igas sisu edastuspunktis hoidmist. Klassikalise l\u00e4henemise korral viib igasugune r\u00fcnnak HTTPS-liiklust edastavates serverites kogu sertifikaadi kompromiteerimiseni. Kui privaatv\u00f5tmed edastatakse sisu edastusv\u00f5rkudele, tekivad andmelekkimise ohud t\u00f6\u00f6tajate sekkumise, luureteenistuste tegevuse v\u00f5i CDN-infrastruktuuri kompromiteerimise t\u00f5ttu. <\/p>\n

Kui v\u00f5tmete lekkimine j\u00e4\u00e4b m\u00e4rkamatuks, saavad selle v\u00f5tmete juurde p\u00e4\u00e4senud isikud piisavalt kaua m\u00e4rkamatult veebisaidi liiklusesse sekkuda (MITM), kuna sertifikaatide kehtivusajad on m\u00f5\u00f5detud kuudes ja aastates. Cloudflare'is v\u00f5ivad sertifikaatide v\u00f5tmete kaitsmiseks rakenduda<\/a><\/noindex> spetsiaalsed v\u00f5tme serverid, mis t\u00f6\u00f6tavad veebisaidi omaniku poolel, kuid sellise re\u017eiimi t\u00f6\u00f6 p\u00f5hjustab liikluse edastamisel m\u00e4rgatavaid viivitusi, v\u00e4hendab t\u00f6\u00f6kindlust t\u00e4iendava l\u00fcli t\u00f5ttu ja n\u00f5uab keerulise infrastruktuuri juurutamist.<\/p>\n

Pakutud TLS-laiendus Delegated Credentials toob kasutusele t\u00e4iendava vahepealse privaatv\u00f5tme, mille kehtivus on piiratud tundide v\u00f5i m\u00f5ne p\u00e4evaga (kuni 7 p\u00e4eva). See v\u00f5ti genereeritakse v\u00e4ljastatud sertifitseerimisasutuse sertifikaadi alusel ja v\u00f5imaldab hoida originaalsertifikaadi privaatv\u00f5tit sisu edastusteenuste eest varjatuna, pakkudes neile ainult ajutist sertifikaati, millel on l\u00fchike kehtivus. <\/p>\n

\"Mozilla,<\/a><\/noindex><\/center><\/p>\n

Probleemide v\u00e4ltimiseks juurdep\u00e4\u00e4suga p\u00e4rast v\u00e4ljakutse v\u00f5tme eluaja l\u00f5ppemist on ette n\u00e4htud automaatse uuendamise tehnoloogia, mis toimub algse TLS-serveri poolel. Generatsiooni jaoks ei ole vajalik manuaalsete toimingute v\u00f5i skriptide k\u00e4ivitamine \u2014 autoriseeritud server, mis vajab privaatv\u00f5tit, p\u00f6\u00f6rdub enne eelneva v\u00f5tme eluaja l\u00f5ppemist algse TLS-serveri poole ja see loob uue ajutise v\u00f5tme j\u00e4rgmise l\u00fchikese ajavahemiku jaoks.<\/p>\n

\"Mozilla,<\/a><\/noindex><\/center><\/p>\n

TLS-i laienduse Delegated Credentials toetavad brauserid peavad selliseid tuletatud sertifikaate usaldusv\u00e4\u00e4rseteks. N\u00e4iteks on selle laienduse tugi juba lisatud Firefoxi \u00f6\u00f6versioonidesse ja beetaversioonidesse ning seda saab aktiveerida konfiguratsioonis 'about:config', muutes seadet 'security.tls.enable_delegated_credentials'. Novembri keskpaiku kavatsetakse teatud protsenti Firefoxi beetaversioonide kasutajatest kaasata katsetesse,TLS-i Delegated Credentialsi katsetus<\/a><\/noindex>, mille raames saadetakse kvaliteedi kontrollimiseks uus testik\u00fcsimus Cloudflare DC-serverisse. Delegated Credentialsit toetab ka teek Fizz<\/a><\/noindex> TLS 1.3 rakendusega.<\/p>\n

Delegated Credentialsi spetsifikatsioon on edastatud IETF (Internet Engineering Task Force) komiteele, mis tegeleb Interneti protokollide ja arhitektuuri arendamisega, ja see on hetkel mustand<\/a><\/noindex>, mis p\u00fc\u00fcab saada Interneti-standardiks. Delegated Credentialsi laiendust saab rakendada ainult TLSv1.3 puhul.
\nAjutiste v\u00f5tmete genereerimiseks on vajalik saada TLS-sertifikaat, mis sisaldab spetsiaalset X.509 laiendust, mida praegu toetab ainult sertifitseerimiskeskus DigiCert. <\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Mozilla, Cloudflare \u0438 Facebook \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u043e\u0435 TLS-\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 Delegated Credentials (DC), \u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438 \u043f\u0440\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430. \u0412\u044b\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u043c\u0438 \u0446\u0435\u043d\u0442\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438\u043c\u0435\u044e\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0442\u0440\u0443\u0434\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0430\u0439\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0438\u0441, \u043e\u0442 \u043b\u0438\u0446\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043e\u043b\u0436\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52168","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla, Cloudflare ja Facebook esitlesid TLS-laiendust l\u00fchiajaliste sertifikaatide delegeerimiseks | ProHoster","description":"Mozilla,","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/mozilla-cloudflare-i-facebook-predstavili-tls-rasshirenie-dlya-delegirovaniya-korotkozhivushhih-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla, Cloudflare \u0438 Facebook \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 TLS-\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0434\u0435\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0436\u0438\u0432\u0443\u0449\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"Mozilla,","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/mozilla-cloudflare-i-facebook-predstavili-tls-rasshirenie-dlya-delegirovaniya-korotkozhivushhih-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-01T21:00:00+00:00","article:modified_time":"2020-02-18T10:59:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52168","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 02:44:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:40:57","updated":"2026-01-24 02:44:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52168","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=52168"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52168\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=52168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=52168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=52168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}