Kev txij nkawm tso tawm ntawm Firefox 101.0.1 yog muaj, tseem ceeb rau kev ntxiv dag zog rau kev cais sandbox ntawm Windows platform. Tus tshiab version enables, los ntawm lub neej ntawd, thaiv kev nkag mus rau Win32k API (Win32 GUI Cheebtsam uas khiav ntawm qib ntsiav) los ntawm cov txheej txheem cov ntsiab lus cais. Qhov kev hloov pauv tau ua ntej ntawm Pwn2Own 2022 kev sib tw, uas yuav muaj nyob rau lub Tsib Hlis 18-20. Pwn2Own cov neeg koom yuav ua kom pom cov txheej txheem ua haujlwm rau kev siv qhov tsis paub yav dhau los thiab, yog tias ua tiav, yuav tau txais txiaj ntsig zoo. Piv txwv li, tus nqi them rau kev hla kev cais sandbox hauv Firefox ntawm Windows platform yog $ 100 txhiab.
Lwm qhov kev hloov pauv suav nrog kev kho qhov teeb meem nrog cov ntawv sau qhia hauv daim duab-hauv-daim duab hom thaum siv Netflix, thiab kho qhov teeb meem uas qee cov lus txib tsis muaj nyob rau hauv daim duab-hauv-daim duab qhov rais.
Tsis tas li ntawd, nws tau tshaj tawm tias cov cai tshiab tau ntxiv rau Mozilla hauv paus daim ntawv pov thawj kev cai cia. Cov kev hloov pauv, uas yog lub hom phiaj los hais txog qee qhov ntev-pom TLS server daim ntawv pov thawj tshem tawm tsis ua haujlwm, yuav pib siv rau lub Rau Hli 1.
Thawj qhov kev hloov pauv cuam tshuam txog kev suav cov lej nrog cov laj thawj rau kev tshem tawm daim ntawv pov thawj (RFC 5280), uas cov tub ceev xwm muab ntawv pov thawj yuav tam sim no, qee zaum, yuav tsum tau qhia hauv qhov xwm txheej ntawm daim ntawv pov thawj tshem tawm. Yav dhau los, qee cov ntawv pov thawj tsis tau xa cov ntaub ntawv no lossis muab tso rau nws, uas ua rau nws nyuaj rau kev taug qab cov laj thawj rau tshem tawm cov ntawv pov thawj server. Tam sim no, ua tiav cov laj thawj vim li cas hauv daim ntawv pov thawj tshem tawm cov npe (CRLs) yuav dhau los ua qhov yuav tsum tau ua thiab yuav tso cai rau peb cais cov xwm txheej cuam tshuam txog kev cuam tshuam ntawm cov yuam sij thiab ua txhaum txoj cai rau kev ua haujlwm nrog daim ntawv pov thawj los ntawm cov ntaub ntawv tsis muaj kev nyab xeeb, xws li hloov cov ntaub ntawv hais txog ib qho. koom haum, muag ib tug sau, los yog hloov daim ntawv pov thawj ua ntej lub sij hawm.
Qhov thib ob hloov pauv yuav tsum tau lees paub cov tub ceev xwm xa tag nrho URLs ntawm daim ntawv pov thawj tshem tawm (CRLs) mus rau hauv paus thiab nruab nrab daim ntawv pov thawj database (CCADB, Common CA Certificate Database). Qhov kev hloov pauv yuav ua rau nws muaj peev xwm coj mus rau hauv tus account tag nrho cov ntawv pov thawj TLS tshem tawm, nrog rau ua ntej cov ntaub ntawv ua tiav ntau ntxiv txog kev tshem tawm daim ntawv pov thawj rau hauv Firefox, uas tuaj yeem siv rau kev txheeb xyuas yam tsis tau xa daim ntawv thov mus rau cov servers ntawm cov ntaub ntawv pov thawj thaum lub sijhawm TLS kev teeb tsa kev sib txuas.
Tau qhov twg los: opennet.ru