GitHub tau txiav txim siab txiav kev txhawb nqa rau TLS 1.0 thiab 1.1 hauv NPM pob repository thiab txhua qhov chaw cuam tshuam nrog NPM pob tus thawj tswj hwm, suav nrog npmjs.com. Pib Lub Kaum Hli 4, txuas mus rau qhov chaw cia khoom, suav nrog kev txhim kho pob khoom, yuav xav tau tus neeg siv khoom uas txhawb nqa yam tsawg kawg nkaus TLS 1.2. Ntawm GitHub nws tus kheej, kev txhawb nqa rau TLS 1.0/1.1 tau txiav tawm rov qab rau lub Ob Hlis 2018. Lub hom phiaj tau hais tias muaj kev txhawj xeeb txog kev ruaj ntseg ntawm nws cov kev pabcuam thiab kev ceev ntiag tug ntawm cov neeg siv cov ntaub ntawv. Raws li GitHub, kwv yees li 99% ntawm kev thov rau NPM lub chaw cia khoom twb tau siv TLS 1.2 lossis 1.3, thiab Node.js tau suav nrog kev txhawb nqa rau TLS 1.2 txij li xyoo 2013 (txij li thaum tso tawm 0.10), yog li qhov kev hloov pauv tsuas yog cuam tshuam rau ib feem me me ntawm cov neeg siv.
Cia peb nco qab tias TLS 1.0 thiab 1.1 raws tu qauv tau raug cais raws li kev siv thev naus laus zis los ntawm IETF (Internet Engineering Task Force). TLS 1.0 specification tau luam tawm thaum Lub Ib Hlis 1999. Xya xyoo tom qab, qhov hloov tshiab TLS 1.1 tau tso tawm nrog kev txhim kho kev ruaj ntseg ntsig txog cov cim kev pib vectors thiab padding. Ntawm cov teeb meem tseem ceeb ntawm TLS 1.0/1.1 yog qhov tsis muaj kev txhawb nqa rau cov ciphers niaj hnub (piv txwv li, ECDHE thiab AEAD) thiab muaj nyob rau hauv cov lus qhia ntawm qhov yuav tsum tau los txhawb cov qub ciphers, qhov kev ntseeg siab ntawm cov lus nug nyob rau theem tam sim no ntawm kev txhim kho kev siv thev naus laus zis (piv txwv li, kev txhawb nqa rau TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA yuav tsum tau kuaj xyuas qhov tseeb thiab kev lees paub siv MD5 thiab SHA-1). Kev them nyiaj yug rau cov algorithms tsis tu ncua tau ua rau muaj kev tawm tsam xws li ROBOT, DROWN, BEAST, Logjam thiab FREAK. Txawm li cas los xij, cov teeb meem no tsis raug txiav txim ncaj qha raws tu qauv qhov tsis zoo thiab raug daws nyob rau theem ntawm nws qhov kev siv. TLS 1.0/1.1 cov txheej txheem lawv tus kheej tsis muaj qhov tsis zoo uas tuaj yeem siv los ua qhov kev tawm tsam.
Tau qhov twg los: opennet.ru