La soci\u00e9t\u00e9 GitHub a d\u00e9cid\u00e9 de mettre fin au support des protocoles TLS 1.0 et 1.1 dans le d\u00e9p\u00f4t de paquets NPM et sur tous les sites associ\u00e9s au gestionnaire de paquets NPM, y compris npmjs.com. \u00c0 partir du 4 octobre, pour se connecter au d\u00e9p\u00f4t, y compris pour l'installation de paquets, un client prenant en charge au moins TLS 1.2 sera requis. Sur GitHub, le support de TLS 1.0\/1.1 a \u00e9t\u00e9 interrompu depuis f\u00e9vrier 2018. Cette d\u00e9cision est motiv\u00e9e par des pr\u00e9occupations en mati\u00e8re de s\u00e9curit\u00e9 des services et de confidentialit\u00e9 des donn\u00e9es des utilisateurs. Selon GitHub, environ 99% des requ\u00eates au d\u00e9p\u00f4t NPM sont d\u00e9j\u00e0 effectu\u00e9es en utilisant TLS 1.2 ou 1.3, et Node.js inclut le support de TLS 1.2 depuis 2013 (\u00e0 partir de la version 0.10), donc ce changement ne touchera qu'une partie infime des utilisateurs. <\/p>\n
Rappelons que les protocoles TLS 1.0 et 1.1 ont \u00e9t\u00e9 officiellement class\u00e9s par le comit\u00e9 IETF (Internet Engineering Task Force) comme des technologies obsol\u00e8tes. La sp\u00e9cification TLS 1.0 a \u00e9t\u00e9 publi\u00e9e en janvier 1999. Sept ans plus tard, une mise \u00e0 jour, TLS 1.1, a \u00e9t\u00e9 publi\u00e9e avec des am\u00e9liorations de s\u00e9curit\u00e9 li\u00e9es \u00e0 la g\u00e9n\u00e9ration de vecteurs d'initialisation et de remplissages suppl\u00e9mentaires. Parmi les principaux probl\u00e8mes de TLS 1.0\/1.1, on mentionne l'absence de prise en charge des chiffres modernes (comme ECDHE et AEAD) et le maintien dans la sp\u00e9cification de l'exigence de prise en charge des anciens chiffrages, dont la fiabilit\u00e9 est remise en question \u00e0 l'heure actuelle (par exemple, la prise en charge de TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, et MD5 et SHA-1 sont utilis\u00e9s pour v\u00e9rifier l'int\u00e9grit\u00e9 et l'authentification). Le support d'algorithmes obsol\u00e8tes a d\u00e9j\u00e0 conduit \u00e0 l'\u00e9mergence d'attaques telles que ROBOT, DROWN, BEAST, Logjam et FREAK. N\u00e9anmoins, ces probl\u00e8mes n'\u00e9taient pas directement des vuln\u00e9rabilit\u00e9s du protocole et \u00e9taient r\u00e9solus au niveau de ses impl\u00e9mentations. Les protocoles TLS 1.0\/1.1 ne pr\u00e9sentent pas de vuln\u00e9rabilit\u00e9s critiques pouvant \u00eatre exploit\u00e9es pour des attaques pratiques. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c TLS 1.2. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c GitHub \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 TLS 1.0\/1.1 \u0431\u044b\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101081","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Le d\u00e9p\u00f4t NPM met fin au support de TLS 1.0 et 1.1 | ProHoster","description":"La soci\u00e9t\u00e9 GitHub a d\u00e9cid\u00e9 de mettre fin au support des protocoles TLS 1.0 et 1.1 dans le d\u00e9p\u00f4t de paquets NPM et sur tous les sites associ\u00e9s au gestionnaire de paquets NPM, y compris npmjs.com.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 NPM \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 TLS 1.0 \u0438 1.1 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-24T08:22:37+00:00","article:modified_time":"2021-08-24T08:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101081","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-24 08:54:06","updated":"2022-10-04 00:49:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/101081","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=101081"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/101081\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=101081"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=101081"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=101081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"