{"id":183554,"date":"2026-10-02T22:54:30","date_gmt":"2026-10-02T20:54:31","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/cloudflare-sozdayot-udostoveryayushhij-czentr-dlya-besplatnoj-razdachi-tls-sertifikatov"},"modified":"2026-10-02T22:54:35","modified_gmt":"2026-10-02T20:54:35","slug":"cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","title":{"rendered":"Cloudflare stvara certifikacijsko tijelo za besplatnu distribuciju TLS certifikata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tvrtka Cloudflare najavila je osnivanje vlastitog certifikacijskog tijela usmjerenog na pru\u017eanje besplatnih TLS certifikata koji koriste kriptoalgoritme otporne na kvantno hakiranje. Istovremeno je najavljena kupnja certifikacijskog tijela GlobalSign, koje \u0107e postati osnova za realizaciju predvi\u0111enog projekta i omogu\u0107iti odmah izdavanje certifikata za koje je osigurana maksimalna pokrivenost ure\u0111aja, zahvaljuju\u0107i prisutnosti GlobalSign na postoje\u0107im popisima korijenskih certifikata. Pored toga, tvrtka Cloudflare podnijela je zahtjeve za uklju\u010divanje vlastitog korijenskog certifikata u popise korijenskih certifikata koje podr\u017eavaju Google, Apple, Microsoft i Mozilla. <\/p>\n

Novi javni certifikacijski centar trebao bi dopuniti uslugu Let's Encrypt, \u010diji udio me\u0111u certifikacijskim centrima iznosi 39,2% po broju izdanih certifikata. Oslanjanje na jedan certifikacijski centar za gotovo polovicu web stranica stvara sistemske rizike u slu\u010daju neuspjeha Let's Encrypt zbog nedostatka sli\u010dnih besplatnih alternativa. Kao i Let's Encrypt, usluga Cloudflare \u0107e biti potpuno automatizirana i omogu\u0107it \u0107e upravljanje certifikatima kori\u0161tenjem otvorenog ACME protokola. Za dobivanje certifikata putem usluge Cloudflare korisnicima Let's Encrypt bit \u0107e dovoljno promijeniti URL u postavkama. <\/p>\n

Drugi zadatak novog certifikacijskog tijela je priprema za prijelaz na postkvantnu kriptografiju. U prvom kvartalu 2027. godine, tvrtka Cloudflare planira me\u0111u prvim implementirati podr\u0161ku za pojednostavljeni format certifikata MTC (Merkle Tree Certificates) u svom certifikacijskom tijelu, koji je namijenjen kori\u0161tenju s postkvantnim kriptoalgoritmima, a veli\u010dina digitalnog potpisa otprilike je 40 puta ve\u0107a od veli\u010dine tradicionalnih potpisivanja. <\/p>\n

Za smanjenje veli\u010dine podataka pri svakom TLS povezivanju, u MTC se koristi stablasta struktura 'Merkle Tree' (Merkleovo drvo), u kojoj svaki grana verificira sve donje grane i \u010dvorove zahvaljuju\u0107i zajedni\u010dkom (stablaste) hashiranju. Ako tradicionalni pristup zahtijeva da certifikacijski centar potpisuje svaki certifikat pojedina\u010dno, MTC kombinira certifikate i dodaje ih u log na temelju Merkleovog drveta, a potpisuje se samo korijenski hash. Na takvoj shemi, uz zavr\u0161ni hash mo\u017ee se potvrditi da je odre\u0111eni certifikat uklju\u010den u trenutno potpisano stablo. Pri povezivanju na web stranicu preglednik prima skra\u0107eni MTC certifikat i set hashova za matemati\u010dno dokazivanje njegove uklju\u010denosti u drvo, \u0161to omogu\u0107uje korisniku da provjeri autenti\u010dnost web stranice na temelju potvrde da certifikat doista postoji u potpisanom stablu. <\/p>\n

Certifikacijsko tijelo Cloudflare \u0107e podr\u017eavati kako tradicionalne, tako i MTC certifikate, \u0161to \u0107e korisnicima omogu\u0107iti glatki prijelaz na novi format. Javno lansiranje projekta o\u010dekuje se nakon zavr\u0161etka testiranja nove infrastrukture na internim uslugama Cloudflare-a. Cloudflare se obvezuje osigurati potpunu otvorenost procesa u novom certifikacijskom tijelu, objavljivati reproducibilne verzije softvera koji se koristi za formiranje digitalnih potpisa, provoditi certifikaciju sigurnosnih hardverskih modula (HSM) u kojima se pohranjuju privatni klju\u010devi i pravovremeno otkrivati informacije o problemima i incidentima.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u044b, \u0441\u0442\u043e\u0439\u043a\u0438\u0435 \u043a \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043d\u0430 \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u043e \u043e \u043f\u043e\u043a\u0443\u043f\u043a\u0435 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 GlobalSign, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0442\u0430\u043d\u0435\u0442 \u0431\u0430\u0437\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0443\u043c\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0441\u0440\u0430\u0437\u0443 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0445\u0432\u0430\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044e GlobalSign \u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0430\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183554","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cloudflare stvara certifikacijsko tijelo za besplatno dijeljenje TLS certifikata | ProHoster","description":"Tvrtka Cloudflare najavila je stvaranje vlastitog certifikacijskog tijela, usmjerenog na pru\u017eanje besplatnih TLS certifikata koji koriste kriptoalgoritme otporne na napade kvantnim ra\u010dunalima.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cloudflare \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 \u0434\u043b\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0434\u0430\u0447\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cloudflare \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u044b, \u0441\u0442\u043e\u0439\u043a\u0438\u0435 \u043a \u043f\u043e\u0434\u0431\u043e\u0440\u0443 \u043d\u0430 \u043a\u0432\u0430\u043d\u0442\u043e\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/cloudflare-creates-a-certificate-authority-to-issue-free-tls-certificates","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-02T20:54:31+00:00","article:modified_time":"2026-10-02T20:54:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/183554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=183554"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/183554\/revisions"}],"predecessor-version":[{"id":183555,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/183554\/revisions\/183555"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=183554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=183554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=183554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}