{"id":86929,"date":"2020-07-01T19:42:02","date_gmt":"2020-07-01T17:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami"},"modified":"2020-07-01T19:42:02","modified_gmt":"2020-07-01T17:42:02","slug":"chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","title":{"rendered":"Chrome limite \u00e9galement la dur\u00e9e de vie des certificats TLS \u00e0 13 mois","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"ChromeD\u00e9veloppeurs du projet Chromium une modification a \u00e9t\u00e9 apport\u00e9e<\/a><\/noindex>, qui fixe la dur\u00e9e maximale de vie des certificats TLS \u00e0 398 jours (13 mois).<\/p>\n

Cette condition s'applique \u00e0 tous les certificats serveur publics \u00e9mis apr\u00e8s le 1er septembre 2020. Si un certificat ne respecte pas cette r\u00e8gle, le navigateur le rejettera comme invalide, en r\u00e9pondant sp\u00e9cifiquement par l'erreur ERR_CERT_VALIDITY_TOO_LONG<\/code>.<\/p>\n

Pour les certificats obtenus avant le 1er septembre 2020, la confiance sera maintenue et limit\u00e9 \u00e0 825 jours<\/a><\/noindex> (2,2 ans), comme c'est le cas aujourd'hui.
\n<\/a><\/noindex>
\nAuparavant, la limite sur la dur\u00e9e maximale de vie des certificats avait \u00e9t\u00e9 instaur\u00e9e par les d\u00e9veloppeurs des navigateurs Firefox et Safari. Ce changement entre \u00e9galement en vigueur le 1er septembre<\/a><\/noindex>.<\/p>\n

Cela signifie que les sites Web utilisant des certificats SSL\/TLS avec une longue dur\u00e9e de vie, \u00e9mis apr\u00e8s la date limite, afficheront des erreurs de confidentialit\u00e9 dans les navigateurs.<\/p>\n

\"Chrome
\n
\nApple a \u00e9t\u00e9 le premier \u00e0 annoncer la nouvelle politique lors d'une r\u00e9union du forum CA\/Browser en f\u00e9vrier 2020<\/a><\/noindex>. En mettant en \u0153uvre cette nouvelle r\u00e8gle, Apple a promis de l'appliquer sur tous les appareils iOS et macOS. Cela mettra la pression sur les administrateurs de sites Web et les d\u00e9veloppeurs pour que leurs certificats soient conformes aux exigences.<\/p>\n

La r\u00e9duction de la dur\u00e9e de vie des certificats est discut\u00e9e depuis plusieurs mois par Apple, Google et d'autres participants CA\/Browser. Cette politique a ses avantages et ses inconv\u00e9nients.<\/p>\n

L'objectif de cette d\u00e9marche est d'am\u00e9liorer la s\u00e9curit\u00e9 des sites Web, en s'assurant que les d\u00e9veloppeurs utilisent des certificats conformes aux derni\u00e8res normes cryptographiques, et de r\u00e9duire le nombre de vieux certificats abandonn\u00e9s qui pourraient potentiellement \u00eatre vol\u00e9s et r\u00e9utilis\u00e9s pour du phishing et des attaques malveillantes. Si des attaquants parviennent \u00e0 compromettre la cryptographie dans la norme SSL\/TLS, des certificats \u00e0 dur\u00e9e limit\u00e9e permettront un passage \u00e0 des certificats plus s\u00fbrs environ un an plus tard.<\/p>\n

La r\u00e9duction de la dur\u00e9e de validit\u00e9 des certificats pr\u00e9sente certains inconv\u00e9nients. Il a \u00e9t\u00e9 not\u00e9 qu'en augmentant la fr\u00e9quence de remplacement des certificats, Apple et d'autres soci\u00e9t\u00e9s compliquent \u00e9galement un peu la vie des propri\u00e9taires de sites et des entreprises qui doivent g\u00e9rer les certificats et se conformer aux exigences.<\/p>\n

D'autre part, Let's Encrypt et d'autres autorit\u00e9s de certification encouragent les webmasters \u00e0 mettre en place des proc\u00e9dures automatis\u00e9es pour le renouvellement des certificats. Cela r\u00e9duit les co\u00fbts humains et le risque d'erreurs \u00e0 mesure que la fr\u00e9quence de remplacement des certificats augmente.<\/p>\n

Comme vous le savez, Let's Encrypt d\u00e9livre des certificats HTTPS gratuits, dont la validit\u00e9 expire au bout de 90 jours, et fournit des outils pour automatiser le renouvellement. Ainsi, ces certificats s'int\u00e8grent encore mieux dans l'infrastructure globale, \u00e0 mesure que les navigateurs imposent une limitation sur la dur\u00e9e de validit\u00e9 maximale.<\/p>\n

Ce changement a \u00e9t\u00e9 soumis au vote des membres de l'association CA\/Browser Forum, mais la d\u00e9cision n'a pas \u00e9t\u00e9 approuv\u00e9e en raison du d\u00e9saccord des autorit\u00e9s de certification.<\/a><\/noindex>.<\/p>\n

R\u00e9sultats<\/h1>\n

<\/p>\n

Vote des \u00e9diteurs de certificats<\/h4>\n

Pour (11 voix)<\/b>: Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (anciennement Comodo CA), eMudhra, Kamu SM, Let's Encrypt, Logius, PKIoverheid, SHECA, SSL.com<\/p>\n

Contre (20)<\/b>: Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (anciennement Trustwave)<\/p>\n

Abstentions (2)<\/b>: HARICA, TurkTrust<\/p><\/blockquote>\n

<\/p>\n

Vote des consommateurs de certificats<\/h4>\n

Pour (7)<\/b>: Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360<\/p>\n

Contre<\/b>: 0<\/p>\n

Abstention<\/b>: 0<\/p><\/blockquote>\n

\nLes navigateurs imposent d\u00e9sormais cette politique sans le consentement des autorit\u00e9s de certification.
\n
Source : habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium \u0432\u043d\u0435\u0441\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 398 \u0434\u043d\u0435\u0439 (13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432). \u0423\u0441\u043b\u043e\u0432\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0430\u0432\u0438\u043b\u0443, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u0432\u0435\u0440\u0433\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u043e\u0439 ERR_CERT_VALIDITY_TOO_LONG. \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043e 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e\u0432\u0435\u0440\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86930,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86929","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome limite \u00e9galement la dur\u00e9e de vie des certificats TLS \u00e0 13 mois | ProHoster","description":"D\u00e9veloppeurs du projet Chromium.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u0442\u043e\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 13 \u043c\u0435\u0441\u044f\u0446\u0430\u043c\u0438 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium.","og:url":"https:\/\/prohoster.info\/fr\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-01T17:42:02+00:00","article:modified_time":"2020-07-01T17:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86929","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:02:56","updated":"2022-10-03 00:14:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/86929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=86929"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/86929\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/86930"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=86929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=86929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=86929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}