{"id":72068,"date":"2020-03-01T14:51:16","date_gmt":"2020-03-01T11:51:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-vydal-milliard-sertifikatov"},"modified":"2020-03-03T16:14:01","modified_gmt":"2020-03-03T13:14:01","slug":"lets-encrypt-vydal-milliard-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","title":{"rendered":"Let\u2019s Encrypt izdao milijardu certifikata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Let's27. velja\u010de 2020. godine besplatni certifikacijski centar Let's Encrypt izdao je milijarditi certifikat<\/a><\/noindex>.<\/p>\n

U sve\u010danom priop\u0107enju za medije, predstavnici projekta prisje\u0107aju se da je prethodni jubilej od 100 milijuna izdanih certifikata obilje\u017een u lipnju 2017. godine<\/a><\/noindex>. Tada je udio HTTPS prometa na internetu iznosio 58% (u SAD-u 64%). Tijekom dvije i pol godine, pokazatelji su zna\u010dajno porasli: \u201eDanas 81% u\u010ditanih stranica \u0161irom svijeta koristi HTTPS, a u Sjedinjenim Dr\u017eavama dostigli smo razinu od 91%! \u2013 raduju se \u010dlanovi projekta. \u2013 Nevjerojatan uspjeh. To je znatno vi\u0161a razina privatnosti i sigurnosti za sve.\u201d <\/p>\n

Let's Encrypt je odigrao veoma va\u017enu ulogu u tome da HTTPS certifikati postanu uobi\u010dajeni standard, a pouzdano \u0161ifriranje prometa savr\u0161en norm u internetu.
\n<\/a><\/noindex>
\nBeta testiranje inovativnog certifikacijskog centra Let's Encrypt zapo\u010delo je u prosincu 2015. godine. Jedinstvena karakteristika novog centra bila je ta da je proces izdavanja certifikata u po\u010detku bio potpuno automatiziran.<\/p>\n

Automatsko postavljanje HTTPS-a na serveru odvija se u dva koraka. U prvom koraku agent obavje\u0161tava certifikacijski centar o pravima administratora servera na domensko ime. Na primjer, provjera mo\u017ee uklju\u010divati stvaranje odre\u0111enog poddomene ili postavljanje unutar domene HTTP resursa s odre\u0111enim URI-jem.<\/p>\n

\"Let's
\n
\nLet's Encrypt identificira web server s pokrenutim agentom putem javnog klju\u010da. Javni i privatni klju\u010devi generiraju se od strane agenta prije prvog povezivanja s certifikacijskim centrom. Tijekom automatske provjere, agent izvr\u0161ava niz testova: na primjer, potpisuje javnim klju\u010dem dobivenu jedanputnu lozinku i prikazuje HTTP resurs s odre\u0111enim URI-jem. Ako je digitalni potpis ispravan i svi testovi su pro\u0161li \u2014 agentu se dodjeljuju prava na upravljanje certifikatima za domenu.<\/p>\n

\"Let's
\n
\nU drugom koraku agent mo\u017ee tra\u017eiti, a\u017eurirati i opozvati certifikate. Za automatsko izdavanje certifikata koristi se protokol autentikacije klase \u201echallenge-response\u201d (izazov-odgovor) pod nazivom Automated Certificate Management Environment (ACME). Sve manipulacije sa certifikatom odvijaju se bez zastoja web servera uz pomo\u0107 ACME klijenta. Certbot<\/a><\/noindex>. Jednostavan je za kori\u0161tenje, radi na ve\u0107ini operativnih sustava i izvrsno je dokumentiran. Postoji stru\u010dni na\u010din rada s naprednim postavkama. Osim Certbota, postoji mnogo drugih ACME klijenata<\/a><\/noindex>. <\/p>\n

Va\u017ena uloga Let's Encrypt<\/h1>\n

\nLet's Encrypt je napravio pravu revoluciju na tr\u017ei\u0161tu gdje su ranije vladali komercijalni certifikacijski centri. Sada su gotovo iza\u0161li iz poslovanja s izdavanjem DV certifikata (certifikati s potvrdom domene, Domain Validation), iako nastavljaju prodavati certifikate s potvrdom organizacije (Organization Validation, OV) i certifikate visoke pouzdanosti (Extended Validation, EV), koje Let's Encrypt ne izdaje jer se ne mogu automatizirati. Ipak, to je ni\u0161ni proizvod, dok na masovnom tr\u017ei\u0161tu bezuvjetno vladaju besplatni certifikati Let's Encrypt.<\/p>\n

Let's Encrypt je standardizovao automatsko obnavljanje certifikata. Iako je njihov \u017eivotni vijek kratak (90 dana), automatska procedura uklanja 1udski faktor1, koji tradicionalno predstavlja glavnu ranjivost u sigurnosti. Administratori domena \u010desto jednostavno zaborave obnoviti certifikate, zbog \u010dega usluge padaju. Posljednji takav slu\u010daj dogodio se s Microsoft Teams. 3. velja\u010de 2020. godine, ova usluga za suradnju je postala nedostupna. zbog isteka certifikata.<\/a><\/noindex>.<\/p>\n

Automatska zamjena certifikata putem ACME protokola isklju\u010duje mogu\u0107nost sli\u010dnih incidenata.<\/p>\n

Iako projekt Let's Encrypt opslu\u017euje polovicu interneta, u fizi\u010dkom svijetu to je mala neprofitna organizacija: \"Tijekom tih dvije i pol godine na\u0161a organizacija je rasla, ali prili\u010dno malo! - pi\u0161u oni. - U lipnju 2017. godine opslu\u017eivali smo oko 46 milijuna web-stranica s 11 stalnih zaposlenika i godi\u0161njim bud\u017eetom od 2,61 milijun dolara. Danas opslu\u017eujemo gotovo 192 milijuna web-stranica s 13 stalnih zaposlenika i godi\u0161njim bud\u017eetom od otprilike 3,35 milijuna dolara. To zna\u010di da opslu\u017eujemo vi\u0161e od \u010detiri puta vi\u0161e stranica s samo dva dodatna zaposlenika i 28-postotnim pove\u0107anjem bud\u017eeta.\"<\/p>\n

Podr\u0161ka projektu dolazi kroz donacije<\/a><\/noindex> i sponzorstvo<\/a><\/noindex>.<\/p>\n

Trenutno je HTTPS postao de facto standard na internetu. Od pro\u0161le godine glavni brauzeri upozoravaju korisnike na opasnosti povezivanja na web stranice koje ne \u0161ifriraju promet putem HTTPS-a. Velik doprinos ovom promjenom u sigurnosnom pejza\u017eu ima Let’s Encrypt.<\/p>\n

Osim toga, Let’s Encrypt doslovno o\u017eivio infrastrukturu javnih XMPP poslu\u017eitelja<\/a><\/noindex>. Sada Jabber radi s pouzdanim \u0161ifriranjem kako na razini klijent-server, tako i server-server, a apsolutna ve\u0107ina certifikata koju je izdao Let’s Encrypt.<\/p>\n

\"Let's
\n
\n\u201eKao zajednica napravili smo nevjerojatne stvari kako bismo za\u0161titili ljude na internetu\u201c, navedeno je u priop\u0107enju za tisak<\/a><\/noindex>. \u201eIzdavanje milijardu certifikata potvrda je svih postignu\u0107a koja smo ostvarili kao zajednica.\u201c
\n
Izvor: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442. \u0412 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u043c \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u044e\u0431\u0438\u043b\u0435\u0439 \u0432 100\u00a0\u043c\u043b\u043d \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438 \u0432 \u0438\u044e\u043d\u0435 2017 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0434\u043e\u043b\u044f HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 58% (\u0432 \u0421\u0428\u0410\u00a0\u2014 64%). \u0417\u0430 \u0434\u0432\u0430 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u0433\u043e\u0434\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0438: \u00ab\u0421\u0435\u0433\u043e\u0434\u043d\u044f 81% \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72069,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72068","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let\u2019s Encrypt je izdao milijardu certifikata | ProHoster","description":"27. velja\u010de 2020. godine, besplatni centar za certificiranje.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let\u2019s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:16+00:00","article:modified_time":"2020-03-03T13:14:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72068","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-09-30 13:26:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/72068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=72068"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/72068\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/72069"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=72068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=72068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=72068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}