{"id":72068,"date":"2020-03-01T14:51:16","date_gmt":"2020-03-01T11:51:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-vydal-milliard-sertifikatov"},"modified":"2020-03-03T16:14:01","modified_gmt":"2020-03-03T13:14:01","slug":"lets-encrypt-vydal-milliard-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","title":{"rendered":"Let\u2019s Encrypt on v\u00e4ljastanud miljardi sertifikaati","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Let's27. veebruar 2020. aastal avati tasuta sertifitseerimiskeskus Let’s Encrypt miljardi sertifikaadi<\/a><\/noindex>.<\/p>\n

Pidulikus pressiteates meenutavad projekti esindajad, et eelmine juubel 100 miljoni v\u00e4ljastatud sertifikaadiga t\u00e4histati juunis 2017<\/a><\/noindex>. Sel ajal moodustas HTTPS-i liiklus internetis 58% (USA-s 64%). Viie ja poole aastaga on n\u00e4itajad oluliselt kasvanud: \u201eT\u00e4na kasutab 81% kogu maailmas laaditavatest lehtedest HTTPS-i, ja Ameerika \u00dchendriikides oleme j\u00f5udnud 91% tasemeni! \u2014 r\u00f5\u00f5mustavad projekti t\u00f6\u00f6tajad. \u2014 See on h\u00e4mmastav saavutus. See t\u00e4hendab palju k\u00f5rgemat privaatsuse ja turvalisuse taset k\u00f5igile.\u201d <\/p>\n

Let’s Encrypt on m\u00e4nginud v\u00e4ga olulist rolli selles, et HTTPS-sertifikaadid on muutunud utilitaarses standardis, ning turvaline andme\u0161ifreerimine on saanud internetis t\u00f5eks.
\n<\/a><\/noindex>
\nInnovaatilise sertifitseerimiskeskuse Let’s Encrypt beetatestsimine algas 2015. aasta detsembris. Uue keskuse erip\u00e4ra on see, et sertifikaatide v\u00e4ljastamise protsess oli algselt t\u00e4ielikult automatiseeritud.<\/p>\n

HTTPS-i automaatne seadistamine serveris toimub kahes etapis. Esimeses etapis teavitab agent sertifitseerimiskeskust serveri administraatori \u00f5igustest domeeninime suhtes. N\u00e4iteks v\u00f5ib kontroll h\u00f5lmata kindla alamdomeeni loomist v\u00f5i HTTP-ressursi seadistamist domeeni sees teatud URI-ga.<\/p>\n

\"Let's
\n
\nLet\u2019s Encrypt tuvastab veebiserveri, kus agent t\u00f6\u00f6tab, avaliku v\u00f5tme abil. Avalikud ja privaatsed v\u00f5tmed genereerib agent enne esimest \u00fchendust sertifitseerimiskeskusega. Automaatse kontrollimise k\u00e4igus t\u00e4idab agent mitmeid teste: n\u00e4iteks allkirjastab ta avaliku v\u00f5tmega saadud \u00fchekordselt kasutatava parooli ja esitab HTTP-ressursi kindla URI-ga. Kui digitaalne allkiri on \u00f5ige ja k\u00f5ik testid on l\u00e4bitud, antakse agendile \u00f5igused haldamiseks sertifikaatide domeeni jaoks.<\/p>\n

\"Let's
\n
\nTeisel etapil saab agent sertifikaate taotleda, uuendada ja tagasi v\u00f5tta. Sertifikaadi automaatseks v\u00e4ljastamiseks kasutatakse v\u00e4ljakutse ja vastuse klassi autentimisprotokolli, mida nimetatakse Automated Certificate Management Environment (ACME). K\u00f5ik sertifikaadiga seotud toimingud tehakse veebiserveri seiskamata ACME-klient kasutades. Certbot<\/a><\/noindex>. See on kasutajas\u00f5bralik, t\u00f6\u00f6tab enamikus operatsioonis\u00fcsteemides ja on h\u00e4sti dokumenteeritud. Ekspertre\u017eiim pakub laiendatud seadistuste komplekti. Lisaks Certbotile on olemas palju teisi ACME-kliente.<\/a><\/noindex>. <\/p>\n

Let’s Encrypti olulised saavutused<\/h1>\n

\nLet’s Encrypt on revolutsiooniline turul, kus varem domineerisid kommertssertifitseerimiskeskused. Praegu on nad peaaegu l\u00f5petanud DV-sertifikaatide (domeeni kinnitamise sertifikaadid) v\u00e4ljastamise, kuigi nad j\u00e4tkavad OV (organisatsiooni kinnitamise) ja EV (laiendatud kinnitamise) sertifikaatide m\u00fc\u00fcmist, mida Let’s Encrypt ei v\u00e4ljastanud, kuna neid ei saa automatiseerida. Siiski on see ni\u0161i toode ja massiturul valitsevad vabade sertifikaatide Let’s Encrypt.<\/p>\n

Let’s Encrypt on teinud automaatse sertifikaadi uuendamise standardiks. Vaatamata nende l\u00fchikesele kehtivusele (90 p\u00e4eva) k\u00f5rvaldab automaatne protseduur \"inimfaktorid\", mis on traditsiooniliselt p\u00f5hiline turvaauk. Domeeniadministraatorid sageli lihtsalt unustavad sertifikaate pikendada, mist\u00f5ttu teenused lakkavad t\u00f6\u00f6tamast. Viimane selline probleem tekkis Microsoft Teamsiga. 3. veebruaril 2020 katkestati selle koost\u00f6\u00f6teenuse t\u00f6\u00f6. seoses aegunud sertifikaadiga<\/a><\/noindex>.<\/p>\n

Sertifikaatide automaatne vahetamine ACME protokolli kaudu v\u00e4listab selliste intsidendide v\u00f5imaluse.<\/p>\n

Kuigi projekt Let’s Encrypt teenindab pooli internetist, on f\u00fc\u00fcsilises maailmas tegemist v\u00e4ikese mittetulundus\u00fchinguga: \"Viimase kahe ja poole aasta jooksul on meie organisatsioon kasvanud, kuid mitte palju! \u2014 kirjutavad nad. \u2014 2017. aasta juunis teenindasime umbes 46 miljonit veebilehte 11 t\u00f6\u00f6taja ja 2,61 miljoni dollari aastabud\u017eetiga. T\u00e4na teenindame peaaegu 192 miljonit veebilehte 13 t\u00f6\u00f6tajaga ja umbes 3,35 miljoni dollari aastabudjetiga. See t\u00e4hendab, et teenindame rohkem kui neljakordset arvu veebisaite vaid kahe lisa t\u00f6\u00f6tajaga ja 28-protsendilise eelarvekasvuga.\"<\/p>\n

Projekti toetatakse l\u00e4bi annetuste<\/a><\/noindex> ja sponsorluse<\/a><\/noindex>.<\/p>\n

Praeguseks on HTTPS muutunud de facto standardiks internetis. Eelmisel aastal hoiatavad peamised brauserid kasutajaid HTTPS-iga mitte\u0161ifreeritud veebisaitide k\u00fclge \u00fchendamise ohtude eest. Sellise turvamaastiku muutuse eest on suur osa teenust Let’s Encrypt.<\/p>\n

Lisaks on Let’s Encrypt s\u00f5na otseses m\u00f5ttes taaselustanud avalike XMPP-serverite infrastruktuuri<\/a><\/noindex>. N\u00fc\u00fcd t\u00f6\u00f6tab Jabber usaldusv\u00e4\u00e4rse \u0161ifreerimisega nii kliendi-serveri kui ka serveri-serveri tasemel, ning absoluutne enamus sertifikaate on v\u00e4lja andnud Let’s Encrypt.<\/p>\n

\"Let's
\n
\n\u201eKogukonnana oleme teinud uskumatuid asju, et kaitsta inimesi internetis,\u201c on \u00f6eldud pressiteates<\/a><\/noindex>. \u201e\u00dche miljardi sertifikaadi v\u00e4ljastamine on kinnituseks kogu edusammule, mille oleme kogukonnana saavutanud.\u201c
\n
Allikas: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442. \u0412 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u043c \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u044e\u0431\u0438\u043b\u0435\u0439 \u0432 100\u00a0\u043c\u043b\u043d \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438 \u0432 \u0438\u044e\u043d\u0435 2017 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0434\u043e\u043b\u044f HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 58% (\u0432 \u0421\u0428\u0410\u00a0\u2014 64%). \u0417\u0430 \u0434\u0432\u0430 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u0433\u043e\u0434\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0438: \u00ab\u0421\u0435\u0433\u043e\u0434\u043d\u044f 81% \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72069,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72068","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt on v\u00e4ljastanud miljardi sertifikaadi | ProHoster","description":"27. veebruar 2020 tasuta sertifitseerimiskeskus.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let\u2019s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:16+00:00","article:modified_time":"2020-03-03T13:14:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72068","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-09-30 13:26:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/72068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=72068"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/72068\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/72069"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=72068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=72068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=72068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}