{"id":72068,"date":"2020-03-01T14:51:16","date_gmt":"2020-03-01T11:51:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-vydal-milliard-sertifikatov"},"modified":"2020-03-03T16:14:01","modified_gmt":"2020-03-03T13:14:01","slug":"lets-encrypt-vydal-milliard-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","title":{"rendered":"Let\u2019s Encrypt on v\u00e4ljastanud miljardi sertifikaati","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Let's27. veebruar 2020. aastal tasuta Let's Encrypt sertifitseerimiskeskus miljonid sertifikaadid<\/a><\/noindex>.<\/p>\n

Pidulikus pressiteates meenutavad projekti esindajad, et eelmist juubelit \u2014 100 miljoni v\u00e4ljastatud sertifikaadi t\u00e4histamist toimus juunis 2017<\/a><\/noindex>. Siis oli HTTPS-liikluse osakaal internetis 58% (Ameerikas 64%). Viimase kahe ja poole aastaga on n\u00e4itajad oluliselt kasvanud: \u201eT\u00e4na kasutab 81% kogu maailmas laaditavatest lehtedest HTTPS-i, Ameerika \u00dchendriikides oleme 91% tasemel! \u2013 r\u00f5\u00f5mustavad projekti juhid. \u2013 Usunmatult suur saavutus. See on palju k\u00f5rgem privaatsuse ja turvalisuse tase k\u00f5igile.\u201c <\/p>\n

Let's Encrypt on m\u00e4nginud v\u00e4ga olulist rolli selles, et HTTPS-sertifikaatidest on saanud utilitaart\u00fcstandard ja turvaline andmete kr\u00fcpteerimine on saanud Internetis tavaliseks normiks.
\n<\/a><\/noindex>
\nLet's Encrypti innovatiivse sertifitseerimiskeskuse beetatestimine algas detsembris 2015. Unikaalne omadus oli see, et sertifikaatide v\u00e4ljaandmise protsess oli algselt t\u00e4iesti automatiseeritud.<\/p>\n

HTTPS-i automaatne seadistamine serveris toimub kahes etapis. Esimeses etapis teavitab agent sertifitseerimiskeskust serveri haldaja \u00f5igustest domeeninime osas. N\u00e4iteks v\u00f5ib kontroll h\u00f5lmata teatud alamdomeeni loomist v\u00f5i kindla URI-ga HTTP-allika loomist domeeni sees.<\/p>\n

\"Let's
\n
\nLet\u2019s Encrypt tuvastab veebiserveri, millel on k\u00e4ivitunud agent, avaliku v\u00f5tme kaudu. Avalik ja privaatne v\u00f5ti genereeritakse agendi poolt enne esimest \u00fchendumist sertifitseerimiskeskusega. Automaatse kontrolli k\u00e4igus sooritab agent rea teste: n\u00e4iteks allkirjastab ta saadud \u00fchekordselt kasutatava parooli avaliku v\u00f5tmega ja esitab teatud URI-ga HTTP-allika. Kui digitaalallkiri on \u00f5ige ja k\u00f5ik katsed on l\u00e4bitud \u2013 antakse agentidele \u00f5igused sertifikaatide haldamiseks domeeni jaoks.<\/p>\n

\"Let's
\n
\nTeises etapis saab agent sertifikaate k\u00fcsida, v\u00e4rskendada ja t\u00fchistada. Sertifikaadi automaatseks v\u00e4ljastamiseks kasutatakse v\u00e4ljakutsumis- ja vastuskoolituse protokolli (challenge-response) nimega Automated Certificate Management Environment (ACME). K\u00f5ik sertifikaadiga seotud tehingud toimuvad veebiserveri peatamata ACME-klientide abil. Certbot<\/a><\/noindex>See on lihtne kasutada, t\u00f6\u00f6tab enamiku ops\u00fcsteemidega ja on h\u00e4sti dokumenteeritud. Ekspertre\u017eiimiga on saadaval laiem seadistuste valik. Lisaks Certbotile, on olemas palju teisi ACME-kliente<\/a><\/noindex>. <\/p>\n

Let's Encrypti oluline roll<\/h1>\n

\nLet's Encrypt on t\u00f5eliselt revolutsioonilise m\u00f5ju avaldanud turule, mida varem valitsesid kaubanduslikud sertifitseerimiskeskused. N\u00fc\u00fcd on nad praktiliselt t\u00f5rjutud DV-sertifikaatide (domeeni kinnitamise sertifikaadid, Domain Validation) v\u00e4ljastamisest, kuigi nad j\u00e4tkavad organisatsiooni kinnitamise sertifikaatide (Organization Validation, OV) ja k\u00f5rge usaldusv\u00e4\u00e4rsuse sertifikaatide (Extended Validation, EV) m\u00fc\u00fcmist, mida Let's Encrypt ei v\u00e4ljastada, kuna neid ei saa automatiseerida. Siiski on see ni\u0161itoode ja massiturul valitsevad ilmavastutavad tasuta Let's Encrypti sertifikaadid.<\/p>\n

Let's Encrypt tegi sertifikaatide automaatse uuendamise standardiks. Kuigi nende kehtivusaeg on l\u00fchike (90 p\u00e4eva), elimineerib automaatne protseduur \u201einimfaktori\u201c, mis traditsiooniliselt kujutab endast peamist haavatavust turvalisuses. Domeeni administraatorid unustavad sageli sertifikaate pikendada, mille t\u00f5ttu teenused katkemist esinevad. Viimane selline juhtum toimus Microsoft Teamsiga. 3. veebruaril 2020 lakkas see koost\u00f6\u00f6teenus t\u00f6\u00f6tamast. aegunud sertifikaadi t\u00f5ttu<\/a><\/noindex>.<\/p>\n

ACME protokolli kaudu sertifikaatide automaatne asendamine v\u00e4listab sarnaste juhtumite v\u00f5imaluse.<\/p>\n

Kuigi Let's Encrypt teenindab poole Interneti, on see f\u00fc\u00fcsilises maailmas v\u00e4ike mittetulundus\u00fching: \u201eKaks ja pool aastat hiljem on meie organisatsioon kasvanud, kuid mitte palju! \u2014 kirjutavad nad. \u2014 Juuni 2017. aastal teenindasime umbes 46 miljonit veebisaiti, 11 t\u00f6\u00f6taja j\u00f5ul ja aastase eelarvega 2,61 miljonit dollarit. T\u00e4na teenindame peaaegu 192 miljonit veebisaiti, 13 t\u00f6\u00f6taja j\u00f5ul ja aastase eelarvega umbes 3,35 miljonit dollarit. See t\u00e4hendab, et teenindame \u00fcle nelja korra rohkem saidid vaid kahe t\u00e4iendava t\u00f6\u00f6tajaga ja 28% eelarve suurenemisega.<\/p>\n

Projekti toetamine toimub l\u00e4bi annetuste<\/a><\/noindex> ja sponsorluse<\/a><\/noindex>.<\/p>\n

Praegu on HTTPS muutunud de facto standardiks internetis. Alates eelmisest aastast hoiatavad peamised brauserid kasutajaid, et teiste saitide k\u00fclge \u00fchendamine, mis ei kr\u00fcpteeri liiklust HTTPS-i kaudu, on ohtlik. Sellises turvamaastiku muutuses on suur osa Let\u2019s Encrypti teenustel.<\/p>\n

Peale selle, Let\u2019s Encrypt on s\u00f5na otseses m\u00f5ttes taaselustanud avalike XMPP-serverite infrastruktuuri<\/a><\/noindex>. N\u00fc\u00fcd t\u00f6\u00f6tab Jabber usaldusv\u00e4\u00e4rse kr\u00fcptimisega nii kliendi-serveeri kui ka serveeriserveri tasemel ning absoluutne enamus sertifikaate on v\u00e4lja andnud Let\u2019s Encrypt.<\/p>\n

\"Let's
\n
\n\u201eKogukonnana oleme teinud uskumatuid asju, et kaitsta inimesi internetis,\u201d \u00f6eldakse pressiteates<\/a><\/noindex>. \u201e\u00dche miljardi sertifikaadi v\u00e4ljaandmine on kinnituseks kogu edule, mida oleme saavutanud kogukonnana.\u201d
\n
Allikas: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442. \u0412 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u043c \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u044e\u0431\u0438\u043b\u0435\u0439 \u0432 100\u00a0\u043c\u043b\u043d \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438 \u0432 \u0438\u044e\u043d\u0435 2017 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0434\u043e\u043b\u044f HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 58% (\u0432 \u0421\u0428\u0410\u00a0\u2014 64%). \u0417\u0430 \u0434\u0432\u0430 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u0433\u043e\u0434\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0438: \u00ab\u0421\u0435\u0433\u043e\u0434\u043d\u044f 81% \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72069,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72068","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let\u2019s Encrypt on v\u00e4ljastanud miljon sertifikaati | ProHoster","description":"27. veebruaril 2020. tasuta sertifitseerimiskeskus.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let\u2019s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:16+00:00","article:modified_time":"2020-03-03T13:14:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72068","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-09-30 13:26:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/72068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=72068"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/72068\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/72069"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=72068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=72068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=72068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}