{"id":71037,"date":"2020-02-23T14:45:41","date_gmt":"2020-02-23T11:45:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej"},"modified":"2020-03-03T16:10:57","modified_gmt":"2020-03-03T13:10:57","slug":"lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","title":{"rendered":"Let's Encrypt on hakanud kontrollima erinevate alamv\u00f5rkude abil","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mittetulundus\u00fchingu tunnustuskeskus Let\u2019s Encrypt<\/a><\/noindex>, mis on kogukonna kontrolli all ja pakub sertifikaate tasuta k\u00f5igile soovijatele, teatas<\/a><\/noindex> sertifikaadi saamise volituste kinnitamise uue skeemi juurutamine domeeni jaoks. Serverile, kus asub kasutatavate kontrollide kataloog «\/.well-known\/acme-challenge\/», p\u00f6\u00f6rdutakse n\u00fc\u00fcd mitme HTTP-p\u00e4ringu kaudu, mis saadetakse 4 erinevalt IP-aadressilt, mis asuvad erinevates andmekeskustes ja kuuluvad erinevatesse autonoomsetesse s\u00fcsteemidesse. Kontrolli loetakse edukaiks ainult siis, kui v\u00e4hemalt 3 4-st p\u00e4ringust erinevatelt IP-delt olid edukad. <\/p>\n

Mitme alamv\u00f5rgu kontrollimise rakendamine v\u00e4hendab riske sertifikaatide saamisel teiste domeenide jaoks sihitud r\u00fcnnakute kaudu, mis suunavad liiklust vale marsruudi abil BGP kaudu. Multi-asukoha kontrollis\u00fcsteemi rakendamisel peab r\u00fcndaja samal ajal suunama marsruute mitmest erinevast protsessorist, millel on erinevad uplink-id, mis on oluliselt keerukam kui \u00fcksiku marsruudi suunamine. Erinevatelt IP-delt p\u00e4ringute saatmine suurendab ka kontrollimise usaldusv\u00e4\u00e4rsust, kui \u00fcksikute Let’s Encrypt hostide IP-d on blokeeritud (n\u00e4iteks, venemaal on m\u00f5ned IP-d letsencrypt.org olnud Roskomnadzori blokkis). <\/p>\n

1. juunini kehtib \u00fcleminekuperiood, mis v\u00f5imaldab sertifikaatide genereerimist edukalt l\u00e4bides kontrolli algsest andmekeskusest, kui host teistest alamv\u00f5rkudest on ligip\u00e4\u00e4setav (n\u00e4iteks v\u00f5ib see juhtuda, kui hosti administraator on tulem\u00fc\u00fcris lubanud p\u00e4ringud vaid peamisest Let’s Encrypt andmekeskusest v\u00f5i DNS-i tsoonide s\u00fcnkroniseerimise rikkumise t\u00f5ttu). Logide p\u00f5hjal valmistatakse ette must nimekiri domeenide jaoks, kellel on probleeme kontrollimisega 3 lisandmekeskusest. Musta nimekirja kuuluvad ainult domeenid, millel on t\u00e4idetud kontaktandmed. Kui domeen ei kuulu automaatselt musta nimekirja, saab taotluse esitamiseks esitada ka. erilise vormi<\/a><\/noindex>.<\/p>\n

Praegu on projektil Let’s Encrypt v\u00e4lja antud 113 miljonit sertifikaati, mis katab umbes 190 miljonit domeeni (aasta tagasi oli katvus 150 miljonit domeeni, kaks aastat tagasi \u2014 61 miljonit). Firefox Telemetry teenuse statistika kohaselt on globaalne HTTPS-i lehtede p\u00e4ringute osakaal 81% (aasta tagasi 77%, kaks aastat tagasi 69%), samas USAs on see 91%.<\/p>\n

Lisaks v\u00f5ib m\u00e4rkida, kavatsetud<\/a><\/noindex> ettev\u00f5te Apple
\npeatada Safari brauseris usaldus sertifikaatidele, mille kehtivusaeg \u00fcletab 398 p\u00e4eva (13 kuud). Piirang kavatsetakse kehtestada ainult alates 1. septembrist 2020. a v\u00e4lja antud sertifikaatidele. Sertifikaatide suhtes, mis on saadud enne 1. septembrit ja mille kehtivusaeg on pikem, s\u00e4ilib usaldus, kuid on piiratud 825 p\u00e4evaga (2,2 aastat). <\/p>\n

Muutumine v\u00f5ib negatiivselt m\u00f5jutada usaldusv\u00e4\u00e4rsete keskuste \u00e4ri, mis m\u00fc\u00fcvad odavaid sertifikaate pika kehtivusajaga, mis ulatub kuni 5 aastani. Apple'i arvates tekitavad selliste sertifikaatide genereerimine t\u00e4iendavaid turvaprobleeme, takistavad uute kr\u00fcptostandardite kiiret rakendamist ja v\u00f5imaldavad kurjategijatel pikka aega ohvri liiklust kontrollida v\u00f5i seda kalastamise eesm\u00e4rgil kasutada juhul, kui sertifikaadi lekke t\u00f5ttu ei m\u00e4rgata seda r\u00fcnnaku k\u00e4igus.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 \u0441\u0445\u0435\u043c\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430. \u041e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 «\/.well-known\/acme-challenge\/», \u0442\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u0434\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0441 4 \u0440\u0430\u0437\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u0445 \u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71037","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt on hakanud kontrollima erinevate alamv\u00f5rkude abil | ProHoster","description":"Kasutajatelt toetatud mittetulunduslik usaldusv\u00e4\u00e4rne keskus Let\u2019s Encrypt, mis pakub sertifikaate tasuta k\u00f5ikidele soovijatele.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u043a \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let\u2019s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-23T11:45:41+00:00","article:modified_time":"2020-03-03T13:10:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71037","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:09:24","updated":"2022-10-04 11:44:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/71037","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=71037"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/71037\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=71037"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=71037"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=71037"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}