Nco tseg Tus txhais lus: rau kev yooj yim ntawm cov neeg nyeem, cov hnub yog muab nyob rau hauv Moscow lub sij hawm
Peb nyuam qhuav plam qhov tas sij hawm ntawm ib daim ntawv pov thawj siv los kos npe rau add-ons. Qhov no ua rau cov add-ons raug kaw rau cov neeg siv. Tam sim no hais tias qhov teeb meem tau kho feem ntau, kuv xav qhia cov ntsiab lus ntawm qhov tshwm sim thiab cov haujlwm uas tau ua tiav.
Keeb kwm: ntxiv thiab kos npe
Installed add-ons yuav tsum muaj kos npe digital, uas tiv thaiv cov neeg siv los ntawm kev ua phem add-ons thiab yuav tsum tau saib xyuas tsawg kawg ntawm cov add-ons los ntawm Mozilla cov neeg ua haujlwm. Peb tau qhia txog qhov yuav tsum tau ua hauv xyoo 2015 vim peb tau ntsib teeb meem loj nrog siab phem add-ons.
Nws ua haujlwm li cas: Txhua daim ntawv luam ntawm Firefox muaj "hauv paus daim ntawv pov thawj". Tus yuam sij rau "hauv paus" no yog khaws cia rau hauv Kho vajtse Security Module (HSM)tsis muaj network nkag. Txhua txhua ob peb xyoos, ib daim ntawv pov thawj tshiab "intermediate" tau kos npe nrog tus yuam sij no, uas yog siv thaum kos npe add-ons. Thaum tus tsim tawm xa ib qho ntxiv, peb tsim ib ntus "kawg daim ntawv pov thawj" thiab kos npe siv daim ntawv pov thawj nruab nrab. Tus add-on nws tus kheej ces kos npe nrog daim ntawv pov thawj zaum kawg. Schematically zoo li no.
Thov nco ntsoov tias txhua daim ntawv pov thawj muaj "kev kawm" (rau leej twg daim ntawv pov thawj tau muab) thiab "tus neeg muab ntawv pov thawj" (uas muab daim ntawv pov thawj). Nyob rau hauv cov ntaub ntawv ntawm ib tug hauv paus daim ntawv pov thawj, "subject" = "dissuer", tab sis rau lwm yam daim ntawv pov thawj, lub issuer ntawm daim ntawv pov thawj yog lub ntsiab ntawm cov niam txiv daim ntawv pov thawj uas nws tau kos npe.
Lub ntsiab lus tseem ceeb: txhua qhov txuas ntxiv tau kos npe los ntawm daim ntawv pov thawj kawg, tab sis yuav luag txhua daim ntawv pov thawj kawg no tau kos npe los ntawm tib daim ntawv pov thawj nruab nrab.
Sau ntawv: Qhov kev zam yog qhov qub qub ntxiv. Lub sijhawm ntawd, ntau daim ntawv pov thawj nruab nrab tau siv.
Daim ntawv pov thawj nruab nrab no ua rau muaj teeb meem: txhua daim ntawv pov thawj siv tau rau qee lub sijhawm. Ua ntej lossis tom qab lub sijhawm no, daim ntawv pov thawj tsis raug thiab tus browser yuav tsis siv add-ons kos npe los ntawm daim ntawv pov thawj no. Hmoov tsis zoo, daim ntawv pov thawj nruab nrab tau tas sijhawm rau lub Tsib Hlis 4 thaum 4 teev sawv ntxov.
Qhov tshwm sim tsis tshwm sim tam sim ntawd. Firefox tsis tshawb xyuas cov npe kos npe ntawm cov teeb tsa txuas ntxiv tas li, tab sis kwv yees li ib zaug txhua 24 teev, thiab lub sijhawm pov thawj yog tus kheej rau txhua tus neeg siv. Yog li ntawd, qee tus neeg tau ntsib teeb meem tam sim ntawd, thaum lwm tus ntsib teeb meem ntau tom qab. Peb thawj zaug paub txog qhov teeb meem nyob ib ncig ntawm lub sij hawm daim ntawv pov thawj tas sij hawm thiab tam sim ntawd pib nrhiav kev daws teeb meem.
Txo kev puas tsuaj
Thaum peb paub tias muaj dab tsi tshwm sim, peb sim tiv thaiv qhov xwm txheej tsis zoo.
Ua ntej, lawv tau tso tseg tsis lees txais thiab kos npe tshiab ntxiv. Tsis muaj qhov taw tes rau kev siv daim ntawv pov thawj tas sij hawm rau qhov no. Saib rov qab, kuv xav hais tias peb tuaj yeem tso txhua yam raws li nws tau ua. Tam sim no peb tau rov pib txais cov tshuaj ntxiv.
Qhov thib ob, lawv tam sim ntawd xa tawm qhov kho uas tiv thaiv kev kos npe los ntawm kev kuaj xyuas txhua hnub. Yog li, peb tau cawm cov neeg siv uas nws qhov browser tseem tsis tau muaj sijhawm los xyuas cov add-ons hauv XNUMX teev dhau los. Qhov kev kho no tam sim no tau muab tshem tawm thiab tsis xav tau ntxiv lawm.
Parallel kev ua haujlwm
Hauv kev xav, kev daws teeb meem zoo li yooj yim: tsim ib daim ntawv pov thawj tshiab siv tau nruab nrab thiab rov kos npe rau txhua qhov ntxiv. Hmoov tsis zoo qhov no yuav tsis ua haujlwm:
- peb tsis tuaj yeem rov kos npe sai sai 15 txhiab add-ons ib zaug, lub kaw lus tsis yog tsim los rau lub nra
- Tom qab peb kos npe rau qhov ntxiv, cov hloov tshiab yuav tsum tau xa mus rau cov neeg siv. Feem ntau cov add-ons raug teeb tsa los ntawm Mozilla servers, yog li Firefox yuav pom qhov hloov tshiab hauv XNUMX teev tom ntej, tab sis qee cov neeg tsim khoom faib cov ntawv kos npe los ntawm cov neeg sab nrauv, yog li cov neeg siv yuav tau hloov kho cov add-ons manually.
Hloov chaw, peb tau sim tsim kho kom ncav cuag txhua tus neeg siv yam tsis tas yuav tsum tau ua ntau lossis tsis ua haujlwm ntawm lawv feem.
Heev sai peb tuaj rau ob lub tswv yim tseem ceeb, uas peb siv nyob rau hauv parallel:
- Hloov kho Firefox los hloov lub sijhawm siv tau daim ntawv pov thawj. Qhov no yuav ua rau cov add-ons uas twb muaj lawm ua haujlwm tau zoo dua, tab sis yuav tsum tau tso tawm thiab xa cov tsim tshiab ntawm Firefox
- Tsim ib daim ntawv pov thawj uas siv tau thiab qee yam yaum Firefox kom txais nws es tsis txhob ntawm qhov uas twb muaj lawm uas tau tas sij hawm lawm
Peb txiav txim siab siv thawj qhov kev xaiv ua ntej, uas zoo li ua haujlwm tau zoo. Thaum kawg, lawv tau tso tawm qhov kho thib ob (ib daim ntawv pov thawj tshiab), uas peb yuav tham txog tom qab.
Hloov daim ntawv pov thawj
Raws li kuv tau hais los saum no, nws yuav tsum:
- tsim ib daim ntawv pov thawj tshiab siv tau
- nruab nws remotely hauv Firefox
Txhawm rau kom nkag siab tias vim li cas qhov no ua haujlwm, cia peb saib ze dua ntawm cov txheej txheem kev txheeb xyuas ntxiv. Lub add-on nws tus kheej los ua ib txheej ntawm cov ntaub ntawv, nrog rau cov saw hlau ntawm daim ntawv pov thawj siv rau kev kos npe. Yog li ntawd, cov add-on tuaj yeem txheeb xyuas tau yog tias tus browser paub cov ntawv pov thawj hauv paus, uas tau tsim rau hauv Firefox thaum lub sijhawm tsim. Txawm li cas los xij, raws li peb twb paub lawm, daim ntawv pov thawj nruab nrab tau tas sij hawm, yog li nws tsis tuaj yeem txheeb xyuas qhov ntxiv-on.
Thaum Firefox sim txheeb xyuas qhov ntxiv-on, nws tsis txwv rau kev siv cov ntawv pov thawj uas muaj nyob hauv qhov ntxiv nws tus kheej. Hloov chaw, tus browser sim tsim cov ntawv pov thawj siv tau, pib nrog daim ntawv pov thawj kawg thiab txuas ntxiv mus txog thaum nws mus rau hauv paus. Hauv thawj theem, peb pib nrog daim ntawv pov thawj kawg thiab tom qab ntawd nrhiav daim ntawv pov thawj uas nws qhov kev kawm yog tus muab daim ntawv pov thawj kawg (uas yog, daim ntawv pov thawj nruab nrab). Feem ntau daim ntawv pov thawj nruab nrab no yog muab nrog cov add-on, tab sis txhua daim ntawv pov thawj los ntawm qhov browser cia tuaj yeem ua haujlwm raws li daim ntawv pov thawj nruab nrab no. Yog tias peb tuaj yeem txuas ntxiv ib daim ntawv pov thawj tshiab siv tau rau lub khw muag ntawv pov thawj, Firefox yuav sim siv nws. Qhov xwm txheej ua ntej thiab tom qab txhim kho daim ntawv pov thawj tshiab.
Tom qab txhim kho daim ntawv pov thawj tshiab, Firefox yuav muaj ob txoj kev xaiv thaum siv tau daim ntawv pov thawj saw: siv daim ntawv pov thawj qub (uas yuav tsis ua haujlwm) lossis daim ntawv pov thawj tshiab (uas yuav ua haujlwm). Nws yog ib qho tseem ceeb uas daim ntawv pov thawj tshiab muaj tib lub npe kawm thiab pej xeem tus yuam sij raws li daim ntawv pov thawj qub, yog li nws kos npe rau ntawm daim ntawv pov thawj zaum kawg yuav siv tau. Firefox yog ntse txaus los sim ob qho kev xaiv kom txog thaum nws pom ib qho uas ua haujlwm, yog li cov add-ons tau sim dua. Nco ntsoov tias qhov no yog tib lub laj thawj uas peb siv los ua pov thawj TLS daim ntawv pov thawj.
Tus Sau Cov Lus Ceeb Toom: Cov neeg nyeem paub txog WebPKI yuav nco ntsoov tias cov ntawv pov thawj hla ua haujlwm raws nraim tib yam.
Qhov zoo tshaj plaws txog qhov kev txhim kho no yog tias nws tsis xav kom koj rov kos npe rau cov add-ons uas twb muaj lawm. Sai li qhov browser tau txais daim ntawv pov thawj tshiab, tag nrho cov add-ons yuav ua haujlwm dua. Qhov kev sib tw tseem tshuav yog xa daim ntawv pov thawj tshiab rau cov neeg siv (automatically thiab remotely), nrog rau kev tau txais Firefox rov kuaj xyuas cov neeg xiam oob qhab add-ons.
Normandy thiab kev tshawb fawb system
Ironically, qhov teeb meem no yog daws los ntawm ib tug tshwj xeeb add-on hu ua "system". Txhawm rau ua qhov kev tshawb fawb, peb tau tsim lub kaw lus hu ua Normandy uas muab kev tshawb fawb rau cov neeg siv. Cov kev tshawb fawb no tau ua tiav hauv qhov browser, thiab tau txhim kho kev nkag mus rau Firefox sab hauv APIs. Kev tshawb fawb tuaj yeem ntxiv daim ntawv pov thawj tshiab rau lub khw muag khoom pov thawj.
Tus sau ntawv: Peb tsis ntxiv daim ntawv pov thawj nrog cov cai tshwj xeeb; nws tau kos npe los ntawm daim ntawv pov thawj hauv paus, yog li Firefox ntseeg nws. Peb tsuas ntxiv nws mus rau lub pas dej ua ke ntawm daim ntawv pov thawj uas tuaj yeem siv los ntawm qhov browser.
Yog li kev daws teeb meem yog los tsim kev kawm:
- txhim kho daim ntawv pov thawj tshiab peb tsim rau cov neeg siv
- yuam tus browser kom rov kuaj xyuas cov neeg xiam oob qhab add-ons kom lawv ua haujlwm dua
"Tab sis tos," koj hais tias, "cov add-ons tsis ua haujlwm, kuv tuaj yeem tso lub system ntxiv li cas?" Cia peb kos npe nrog daim ntawv pov thawj tshiab!
Muab tag nrho ua ke... yog vim li cas thiaj siv sij hawm ntev?
Yog li, txoj kev npaj: muab daim ntawv pov thawj tshiab los hloov qhov qub, tsim cov txheej txheem ntxiv thiab nruab rau cov neeg siv ntawm Normandy. Cov teeb meem, raws li kuv tau hais, tau pib thaum lub Tsib Hlis 4 thaum 4:00, thiab twb nyob ntawm 12:44 ntawm tib hnub, tsawg dua 9 teev tom qab, peb tau xa ib qho kev kho rau Normandy. Nws siv sijhawm 6-12 teev ntxiv rau nws kom ncav cuag txhua tus neeg siv. Tsis yog qhov phem, tab sis cov neeg hauv Twitter tab tom nug vim li cas peb tsis tuaj yeem ua sai dua.
Ua ntej, nws tau siv sijhawm los muab daim ntawv pov thawj nruab nrab tshiab. Raws li kuv tau hais los saum no, tus yuam sij rau daim ntawv pov thawj hauv paus yog khaws cia offline hauv qhov kho vajtse ruaj ntseg module. Qhov no yog qhov zoo los ntawm kev saib xyuas kev ruaj ntseg, vim tias cov hauv paus hniav siv tsis tshua muaj thiab yuav tsum tau tiv thaiv kev ntseeg siab, tab sis nws tsis yooj yim me ntsis thaum koj xav tau urgently kos npe rau daim ntawv pov thawj tshiab. Ib tug ntawm peb cov engineers yuav tsum tau mus rau HSM chaw cia khoom. Tom qab ntawd muaj kev sim ua tsis tiav los muab daim ntawv pov thawj raug, thiab txhua qhov kev sim raug nqi ib lossis ob teev siv sijhawm sim.
Qhov thib ob, kev txhim kho ntawm qhov system add-on siv qee lub sijhawm. Conceptually nws yog heev yooj yim, tab sis txawm cov kev pab cuam yooj yim yuav tsum tau saib xyuas. Peb xav kom peb tsis txhob ua kom qhov xwm txheej hnyav dua. Kev tshawb fawb yuav tsum tau sim ua ntej xa mus rau cov neeg siv. Tsis tas li ntawd, qhov add-on yuav tsum tau kos npe, tab sis peb qhov add-on kos npe system tau ua tsis taus, yog li peb yuav tsum nrhiav kev daws teeb meem.
Thaum kawg, thaum peb muaj cov kev tshawb fawb npaj rau kev xa tawm, kev xa mus siv sijhawm. Lub browser tshawb xyuas Normandy hloov tshiab txhua 6 teev. Tsis yog txhua lub khoos phis tawj ib txwm nyob thiab txuas nrog Is Taws Nem, yog li nws yuav siv sijhawm rau kev kho kom kis mus rau cov neeg siv.
Cov kauj ruam kawg
Kev tshawb fawb yuav tsum kho qhov teeb meem rau cov neeg siv feem ntau, tab sis tsis muaj rau txhua tus. Qee cov neeg siv xav tau txoj hauv kev tshwj xeeb:
- cov neeg siv uas tsis muaj kev tshawb fawb lossis telemetry
- cov neeg siv ntawm Android version (Fennec), qhov twg kev tshawb fawb tsis txaus siab txhua
- cov neeg siv kev cai tsim ntawm Firefox ESR hauv kev lag luam uas tsis tuaj yeem siv telemetry
- cov neeg siv zaum tom qab MitM tus neeg sawv cev, txij li peb qhov kev teeb tsa txuas ntxiv siv qhov tseem ceeb pinning, uas tsis ua haujlwm nrog cov npe no
- cov neeg siv cov cuab yeej cuab tam ntawm Firefox uas tsis txhawb kev tshawb fawb
Peb tsis tuaj yeem ua dab tsi txog pawg tom kawg ntawm cov neeg siv - lawv tseem yuav tsum tau hloov kho rau Firefox tshiab, vim tias cov neeg siv tsis tu ncua muaj qhov tsis zoo tsis txaus ntseeg. Peb paub tias qee tus neeg nyob ntawm Firefox qub vim lawv xav khiav cov qub add-ons, tab sis ntau tus qub add-ons twb tau xa mus rau cov tshiab versions ntawm browser. Rau lwm tus neeg siv, peb tau tsim ib thaj uas yuav nruab ib daim ntawv pov thawj tshiab. Nws tau tso tawm raws li kev tso tawm bugfix (Tus txhais lus ceeb toom: Firefox 66.0.5), yog li cov neeg yuav tau txais nws - feem ntau yuav tau txais nws - los ntawm kev hloov kho tshiab channel. Yog tias koj siv qhov kev cai tsim ntawm Firefox ESR, thov hu rau koj tus neeg saib xyuas.
Peb nkag siab tias qhov no tsis yog qhov zoo tagnrho. Qee zaum, cov neeg siv poob cov ntaub ntawv ntxiv (piv txwv li, cov ntaub ntawv ntxiv Multi-Account Ntim).
Qhov kev mob tshwm sim no tsis tuaj yeem zam tau, tab sis peb ntseeg tias nyob rau lub sijhawm luv luv peb tau xaiv qhov kev daws teeb meem zoo tshaj plaws rau cov neeg siv feem ntau. Nyob rau hauv lub sij hawm ntev, peb yuav nrhiav lwm yam, ntau tshaj architectural mus kom ze.
Cov ntsiab lus kawm
Ua ntej, peb pab neeg tau ua txoj haujlwm zoo kawg nkaus tsim thiab xa khoom kho hauv tsawg dua 12 teev tom qab pom qhov teeb meem. Raws li ib tug neeg uas tuaj koom lub rooj sib tham, kuv tuaj yeem hais tias nyob rau hauv qhov xwm txheej nyuaj no tib neeg tau ua haujlwm hnyav heev thiab siv sijhawm tsawg heev.
Obviously, tsis muaj qhov no yuav tsum tau tshwm sim txhua. Nws yog qhov tsim nyog los kho peb cov txheej txheem kom txo tau cov xwm txheej zoo li no thiab kho kom yooj yim dua.
Lub lim tiam tom ntej peb yuav tshaj tawm tsab ntawv tshaj tawm tom qab kev tuag thiab cov npe ntawm cov kev hloov pauv uas peb npaj siab yuav ua. Txog tam sim no, kuv mam li qhia kuv cov kev xav. Ua ntej, yuav tsum muaj txoj hauv kev zoo dua los saib xyuas cov xwm txheej ntawm dab tsi yog lub sijhawm foob pob. Peb yuav tsum nco ntsoov tias peb tsis pom peb tus kheej nyob rau hauv ib qho xwm txheej uas ib tug ntawm lawv dheev ua haujlwm. Peb tseem tab tom ua haujlwm tawm cov ntsiab lus, tab sis qhov tsawg kawg nkaus, nws yog qhov yuav tsum tau coj mus rau hauv tus account tag nrho cov no.
Qhov thib ob, peb xav tau lub tshuab xa tawm sai sai rau cov neeg siv, txawm tias thaum twg-tshwj xeeb tshaj yog thaum-txhua yam ua tsis tiav. Nws yog qhov zoo uas peb tuaj yeem siv qhov "kev tshawb fawb" system, tab sis nws yog ib qho cuab yeej tsis zoo thiab muaj qee qhov tsis xav tau. Tshwj xeeb, peb paub tias ntau tus neeg siv muaj kev hloov kho tsis siv neeg qhib, tab sis xav tsis txhob koom nrog hauv kev tshawb fawb (Kuv lees, kuv tau muab lawv tua ib yam nkaus!). Nyob rau tib lub sijhawm, peb xav tau ib txoj hauv kev xa cov hloov tshiab rau cov neeg siv, tab sis txawm li cas los xij ntawm kev siv sab hauv, cov neeg siv yuav tsum tuaj yeem sau npe rau cov kev hloov tshiab (xws li kev kho kub) tab sis xaiv tawm ntawm txhua yam. Tsis tas li ntawd, qhov hloov tshiab channel yuav tsum teb ntau dua li tam sim no. Txawm tias nyob rau lub Tsib Hlis 6, tseem muaj cov neeg siv uas tsis tau coj kom zoo dua ntawm kev kho lossis qhov tshiab. Qhov teeb meem no twb tau ua haujlwm lawm, tab sis qhov tshwm sim tau pom tias nws tseem ceeb npaum li cas.
Thaum kawg, peb yuav ua tib zoo saib ntawm qhov ntxiv-on qhov kev ruaj ntseg architecture kom paub tseeb tias nws muab cov qib zoo ntawm kev ruaj ntseg nrog tsawg heev uas yuav ua txhaum dab tsi.
Lub lim tiam tom ntej peb yuav saib cov txiaj ntsig ntawm kev tshuaj xyuas ntau dua ntawm qhov tshwm sim, tab sis lub sijhawm no kuv yuav zoo siab los teb cov lus nug los ntawm email: [email tiv thaiv]
Tau qhov twg los: linux.org.ru ua