Shagon Takaddun shaida na Firefox
Tare da fitowar Mozilla Firefox 65 a cikin Fabrairu 2019, wasu masu amfani sun dandana kamar "Haɗin ku ba shi da tsaro" ko "SEC_ERROR_UNKNOWN_ISSUER". Dalilin ya zama riga-kafi irin su Avast, Bitdefender da Kaspersky, waɗanda ke sanya takaddun shaida a kan kwamfutar don aiwatar da MiTM a cikin zirga-zirgar HTTPS na mai amfani. Kuma tunda Firefox tana da kantin sayar da takaddun shaida, suna ƙoƙarin kutsawa cikinta suma.
Masu haɓaka Browser masu amfani don ƙin shigar da riga-kafi na ɓangare na uku waɗanda ke tsoma baki tare da ayyukan masu bincike da sauran shirye-shirye, amma har yanzu masu sauraron jama'a ba su saurari kiran ba. Abin takaici, ta hanyar aiki azaman wakili na gaskiya, yawancin riga-kafi suna rage ingancin kariya ta sirri akan kwamfutocin abokin ciniki. Don wannan dalili, muna haɓakawa , wanda a gefen uwar garken yana gano kasancewar MiTM, kamar riga-kafi, a cikin tashar tsakanin abokin ciniki da uwar garken.
Wata hanya ko wata, a wannan yanayin, riga-kafi sun sake tsoma baki tare da mai binciken, kuma Firefox ba ta da wani zaɓi sai dai ta magance matsalar da kanta. Akwai saiti a cikin saitin burauza security.enterprise_roots.an kunna. Idan kun kunna wannan tuta, Firefox za ta fara amfani da kantin sayar da takaddun shaida na Windows don inganta haɗin SSL. Idan wani ya fuskanci kurakuran da aka ambata a sama lokacin ziyartar rukunin yanar gizon HTTPS, to, zaku iya ko dai musaki binciken haɗin yanar gizo na SSL a cikin riga-kafi, ko saita wannan tuta da hannu a cikin saitunan burauzar ku.
matsala a cikin Mozilla bug tracker. Masu haɓakawa sun yanke shawarar kunna tuta don dalilai na gwaji security.enterprise_roots.an kunna ta tsohuwa domin a yi amfani da kantin sayar da takardar shedar Windows ba tare da ƙarin aikin mai amfani ba. Wannan zai faru daga sigar Firefox 66 akan Windows 8 da Windows 10 tsarin wanda aka sanya riga-kafi na ɓangare na uku (API yana ba ku damar tantance kasancewar riga-kafi a cikin tsarin daga sigar Windows 8 kawai).
source: www.habr.com