Mozilla, Cloudflare thiab Facebook tau tshaj tawm TLS txuas ntxiv rau kev tso npe ntawm daim ntawv pov thawj luv luv

Mozilla, Cloudflare и Facebook koom tes tshaj tawm qhov txuas ntxiv TLS tshiab Delegated Credentials (DC), daws qhov teeb meem nrog daim ntawv pov thawj thaum teeb tsa kev nkag mus rau ib qho chaw los ntawm cov ntsiab lus xa tawm. Cov ntawv pov thawj uas muab los ntawm cov tub ceev xwm ntawv pov thawj muaj lub sijhawm siv tau ntev, uas tsim teeb meem thaum tsim nyog los npaj kev nkag mus rau lub xaib los ntawm kev pabcuam thib peb, sawv cev ntawm qhov kev sib txuas ruaj ntseg yuav tsum tau tsim, txij li hloov lub xaib daim ntawv pov thawj mus rau sab nraud. kev pabcuam tsim muaj kev hem thawj ntxiv.

Qhov kev txuas ntxiv tshiab kuj tseem yuav pab tau rau cov chaw uas ua haujlwm ntawm cov kev faib loj loj uas muaj cov khoom sib npaug loj. Delegated Credentials yuav zam kom tsis txhob khaws cov ntawv luam ntawm cov yuam sij ntiag tug ntawm daim ntawv pov thawj tseem ceeb ntawm txhua lub ntsiab lus xa khoom. Nrog rau txoj hauv kev classic, kev ua tiav zoo ntawm ib qho ntawm cov servers koom nrog kev xa HTTPS tsheb yuav ua rau muaj kev cuam tshuam ntawm tag nrho daim ntawv pov thawj. Yog tias tus yuam sij ntiag tug raug xa mus rau cov ntsiab lus xa tawm, muaj kev hem thawj ntawm cov ntaub ntawv xau los ntawm kev ua phem los ntawm cov neeg ua haujlwm, kev ua ntawm cov koom haum txawj ntse, lossis kev cuam tshuam ntawm CDN infrastructure.

Yog tias qhov xau tseem ceeb mus tsis pom, cov neeg uas tau txais kev nkag mus rau cov yuam sij yuav tuaj yeem tsis pom lawv tus kheej mus rau hauv qhov chaw khiav tsheb (MITM) ntev heev, txij li lub sijhawm siv tau ntawm daim ntawv pov thawj suav hauv lub hlis thiab xyoo. Cloudflare tuaj yeem tiv thaiv daim ntawv pov thawj yuam sij los ntawm thov tshwj xeeb tseem ceeb servers ua hauj lwm nyob rau sab ntawm tus tswv ntawm lub site, tab sis kev ua hauj lwm nyob rau hauv hom no ua rau kom muaj kev ncua sij hawm nyob rau hauv lub tsheb thauj mus los, txo kev cia siab rau vim qhov tsos ntawm ib tug ntxiv txuas thiab yuav tsum tau mus rau lub deployment ntawm complex infrastructure.

Qhov kev thov TLS txuas ntxiv Delegated Credentials qhia txog qhov tseem ceeb ntawm tus kheej nruab nrab ntxiv, qhov siv tau tsuas yog txwv rau cov xuab moos lossis ob peb hnub (tsis pub dhau 7 hnub). Tus yuam sij no yog tsim los ntawm daim ntawv pov thawj uas tau muab los ntawm lub chaw pov thawj thiab tso cai rau koj khaws tus yuam sij ntiag tug ntawm daim ntawv pov thawj thawj daim ntawv pov thawj zais cia los ntawm cov kev pabcuam xa khoom, muab lawv tsuas yog daim ntawv pov thawj ib ntus nrog lub neej luv.

Txhawm rau kom tsis txhob muaj teeb meem kev nkag mus tom qab tus yuam sij nruab nrab tau tas sij hawm, ib qho kev hloov tshiab tsis siv neeg yog muab uas tau ua nyob rau sab ntawm tus thawj TLS server. Ntau tiam tsis xav tau kev khiav hauj lwm los yog khiav cov ntawv sau - ib tus neeg rau zaub mov tso cai uas yuav tsum muaj tus yuam sij ntiag tug, ua ntej lub neej ntawm tus yuam sij dhau los tas sij hawm, hu rau tus thawj TLS server ntawm lub xaib thiab nws tsim ib qho tseem ceeb nruab nrab rau lub sijhawm luv luv tom ntej.

Cov browsers uas txhawb nqa Delegated Credentials TLS txuas ntxiv yuav kho cov ntawv pov thawj uas tau txais los ntawm kev ntseeg siab. Piv txwv li, kev txhawb nqa rau qhov kev txuas ntxiv tau muab ntxiv rau yav tsaus ntuj tsim thiab beta versions ntawm Firefox thiab tuaj yeem qhib rau ntawm: config los ntawm kev hloov qhov "security.tls.enable_delegated_credentials" chaw. Nyob rau nruab nrab Lub Kaum Ib Hlis, ib qho kev sim kuj tseem npaj yuav ua ntawm qee feem pua ​​​​ntawm cov neeg siv kev sim versions ntawm Firefox "TLS Delegated Credentials Experiment", nyob rau hauv qhov kev thov xeem yuav raug xa mus rau Cloudflare DC server txhawm rau txheeb xyuas qhov zoo ntawm kev siv TLS tshiab txuas ntxiv. Kev them nyiaj yug rau Delegated Credentials kuj tau tsim rau hauv lub tsev qiv ntawv ua fizz Nrog rau kev siv TLS 1.3.

Cov Delegated Credentials specification tau raug xa mus rau IETF (Internet Engineering Task Force) pawg neeg ua haujlwm, uas yog lub luag haujlwm rau kev txhim kho Internet raws tu qauv thiab architecture, thiab yog nyob rau ntawm tsab ntawv, uas lees tias yog tus qauv hauv Internet. Daim ntawv tso cai tso cai txuas ntxiv tsuas yog siv tau nrog TLSv1.3.
Txhawm rau tsim cov yuam sij nruab nrab, koj yuav tsum tau txais daim ntawv pov thawj TLS uas suav nrog qhov tshwj xeeb X.509 txuas ntxiv, uas tam sim no tsuas yog txhawb nqa los ntawm DigiCert daim ntawv pov thawj txoj cai.

Tau qhov twg los: opennet.ru