{"id":38655,"date":"2019-10-31T22:25:05","date_gmt":"2019-10-31T19:25:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej\/"},"modified":"2019-10-31T22:25:05","modified_gmt":"2019-10-31T19:25:05","slug":"chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","title":{"rendered":"A Chrome elkezd blokkolni az HTTP-er\u0151forr\u00e1sokat HTTPS-oldalakon, \u00e9s ellen\u0151rizni fogja a jelszavak megb\u00edzhat\u00f3s\u00e1g\u00e1t.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Google v\u00e1llalat figyelmeztette<\/a><\/noindex> a weboldalak HTTPS-en t\u00f6rt\u00e9n\u0151 megjelen\u00edt\u00e9s\u00e9re vonatkoz\u00f3 megk\u00f6zel\u00edt\u00e9s megv\u00e1ltoztat\u00e1s\u00e1r\u00f3l. Kor\u00e1bban, ha HTTPS-en el\u00e9rhet\u0151 oldalon olyan elemek voltak, amelyeket nem titkos\u00edtott (HTTP protokollon kereszt\u00fcl) t\u00f6lt\u00f6ttek be, k\u00fcl\u00f6n jelz\u0151 jelent meg. A j\u00f6v\u0151ben azonban \u00fagy d\u00f6nt\u00f6ttek, hogy alap\u00e9rtelmez\u00e9s szerint blokkolj\u00e1k az ilyen er\u0151forr\u00e1sok bet\u00f6lt\u00e9s\u00e9t. \u00cdgy a \"https:\/\/\" protokollon megnyitott oldalak garant\u00e1ltan csak biztons\u00e1gos csatorn\u00e1n bet\u00f6lt\u00f6tt er\u0151forr\u00e1sokat tartalmaznak.<\/p>\n

Megjegyzik, hogy jelenleg a felhaszn\u00e1l\u00f3k Chrome-j\u00e1val megnyitott weboldalak t\u00f6bb mint 90%-a HTTPS protokollt haszn\u00e1l. A titkos\u00edt\u00e1s n\u00e9lk\u00fcli bet\u00f6lt\u00f6tt elemek jelenl\u00e9te biztons\u00e1gi s\u00e9r\u00fcl\u00e9seket id\u00e9zhet el\u0151 a v\u00e9dtelen tartalom m\u00f3dos\u00edt\u00e1sa r\u00e9v\u00e9n a kapcsolat ellen\u0151rz\u00e9se alatt (p\u00e9ld\u00e1ul ny\u00edlt Wi-Fi haszn\u00e1lata eset\u00e9n). A vegyes tartalom jelz\u0151t hat\u00e1stalannak \u00e9s f\u00e9lrevezet\u0151nek tartj\u00e1k, mivel nem ad egy\u00e9rtelm\u0171 \u00e9rt\u00e9kel\u00e9st az oldal biztons\u00e1g\u00e1r\u00f3l.<\/p>\n

Jelenleg a legvesz\u00e9lyesebb vegyes tartalmak, mint p\u00e9ld\u00e1ul a szkriptek \u00e9s az iframe-ek, m\u00e1r alap\u00e9rtelmez\u00e9s szerint blokkolva vannak, de a k\u00e9pek, hangf\u00e1jlok \u00e9s vide\u00f3k m\u00e9g mindig http:\/\/ protokollon kereszt\u00fcl bet\u00f6lthet\u0151k. A k\u00e9pek manipul\u00e1l\u00e1s\u00e1val a t\u00e1mad\u00f3 be\u00e1ll\u00edthatja a felhaszn\u00e1l\u00f3i tev\u00e9kenys\u00e9gek nyomon k\u00f6vet\u00e9s\u00e9re szolg\u00e1l\u00f3 s\u00fctiket, megpr\u00f3b\u00e1lhatja kihaszn\u00e1lni a k\u00e9pfeldolgoz\u00f3kban l\u00e9v\u0151 sebezhet\u0151s\u00e9geket, vagy hamis inform\u00e1ci\u00f3t cser\u00e9lhet, helyettes\u00edtve a k\u00e9pen megjelen\u00edtett adatokat.<\/p>\n

A blokkol\u00e1s bevezet\u00e9se t\u00f6bb l\u00e9pcs\u0151ben t\u00f6rt\u00e9nik. A Chrome 79, amelyet december 10-\u00e9n terveznek megjelentetni, \u00faj be\u00e1ll\u00edt\u00e1st k\u00edn\u00e1l, amely lehet\u0151v\u00e9 teszi a blokkol\u00e1s kikapcsol\u00e1s\u00e1t konkr\u00e9t webhelyek sz\u00e1m\u00e1ra. Ez a be\u00e1ll\u00edt\u00e1s m\u00e1r blokkolt vegyes tartalomra, p\u00e9ld\u00e1ul szkriptekre \u00e9s iframe-ekre vonatkozik, \u00e9s a z\u00e1rol\u00e1s kikapcsol\u00e1s\u00e1ra szolg\u00e1l\u00f3 jelz\u0151t v\u00e1ltja fel, ha r\u00e1kattintanak a lakat szimb\u00f3lumra.<\/p>\n

\"A<\/center><\/p>\n

A Chrome 80, amely febru\u00e1r 4-\u00e9n v\u00e1rhat\u00f3, l\u00e1gy hang- \u00e9s videof\u00e1jlblokkol\u00e1si s\u00e9m\u00e1t alkalmaz, ami automatikus v\u00e1lt\u00e1st jelent a http:\/\/ linkekr\u0151l https:\/\/ -ra, ezzel biztos\u00edtva, hogy a probl\u00e9m\u00e1s forr\u00e1s is m\u0171k\u00f6dj\u00f6n, ha el\u00e9rhet\u0151 HTTPS-en kereszt\u00fcl. A k\u00e9pek v\u00e1ltozatlanul t\u00f6lt\u0151dnek be, de ha http:\/\/ -n kereszt\u00fcl t\u00f6ltik be az https:\/\/ oldalakon, az eg\u00e9sz oldalon megjelenik a nem biztons\u00e1gos kapcsolat jelz\u0151je. Az automatikus https -re v\u00e1lt\u00e1shoz vagy a k\u00e9pek blokkol\u00e1s\u00e1hoz a weboldalak fejleszt\u0151i felhaszn\u00e1lhatj\u00e1k a CSP upgrade-insecure-requests \u00e9s block-all-mixed-content tulajdons\u00e1gokat. A Chrome 81 kiad\u00e1s\u00e1ban, amely m\u00e1rcius 17-\u00e9n v\u00e1rhat\u00f3, a kevert tartalm\u00fa k\u00e9pek automatikus v\u00e1lt\u00e1sa t\u00f6rt\u00e9nik a http:\/\/ -r\u00f3l https:\/\/ -ra.<\/p>\n

\"A<\/a><\/noindex><\/center><\/p>\n

Emellett a Google bejelentette<\/a><\/noindex> az \u00faj Password Checkup komponens integr\u00e1ci\u00f3j\u00e1t tervez m\u00e1r a k\u00f6vetkez\u0151 Chrome verzi\u00f3k egyik\u00e9be, amely kor\u00e1bban fejl\u0151d\u00f6tt<\/a><\/noindex> kieg\u00e9sz\u00edt\u0151 form\u00e1j\u00e1ban k\u00fcls\u0151<\/a><\/noindex>Az integr\u00e1ci\u00f3 azt eredm\u00e9nyezi, hogy a Chrome be\u00e9p\u00edtett jelsz\u00f3kezel\u0151j\u00e9ben megjelennek az elemz\u00e9si eszk\u00f6z\u00f6k, amelyek a felhaszn\u00e1l\u00f3 \u00e1ltal haszn\u00e1lt jelszavak megb\u00edzhat\u00f3s\u00e1g\u00e1t ellen\u0151rzik. B\u00e1rmely weboldalra val\u00f3 bel\u00e9p\u00e9skor a bejelentkez\u00e9si n\u00e9v \u00e9s jelsz\u00f3 ellen\u0151rz\u00e9se t\u00f6rt\u00e9nik a kompromitt\u00e1lt fi\u00f3kok adatb\u00e1zis\u00e1ban, \u00e9s figyelmeztet\u00e9s jelenik meg, ha probl\u00e9ma mer\u00fcl fel. Az ellen\u0151rz\u00e9s t\u00f6bb mint 4 milli\u00e1rd kompromitt\u00e1lt fi\u00f3kot tartalmaz\u00f3 adatb\u00e1zison alapul, amelyek felhaszn\u00e1l\u00f3i adatb\u00e1zisokban fordultak el\u0151. Figyelmeztet\u00e9s ad\u00f3dik, ha a felhaszn\u00e1l\u00f3 trivi\u00e1lis jelszavakat pr\u00f3b\u00e1l haszn\u00e1lni, mint p\u00e9ld\u00e1ul az \"abc123\" (az statisztika<\/a><\/noindex> . A k\u00fcls\u0151 API-ra val\u00f3 hivatkoz\u00e1s sor\u00e1n a felhaszn\u00e1l\u00f3i n\u00e9v \u00e9s a jelsz\u00f3 p\u00e1ros\u00e1b\u00f3l csup\u00e1n az els\u0151 k\u00e9t b\u00e1jt hash-t k\u00fcldik el a mag\u00e1n\u00e9let v\u00e9delme \u00e9rdek\u00e9ben (a hash-el\u00e9shez<\/p>\n

Argon2 algoritmust haszn\u00e1lnak). A teljes hash titkos\u00edtva van a felhaszn\u00e1l\u00f3 \u00e1ltal gener\u00e1lt kulccsal. A Google adatb\u00e1zis\u00e1ban a kezdeti hash-ek szint\u00e9n tov\u00e1bbi titkos\u00edt\u00e1son mennek kereszt\u00fcl, \u00e9s csak az els\u0151 k\u00e9t b\u00e1jt hash marad az index\u00e1l\u00e1shoz. A hash-ek v\u00e9gs\u0151 ellen\u0151rz\u00e9se, amelyek beleesnek a k\u00fcld\u00f6tt k\u00e9t b\u00e1jtos prefixbe, a felhaszn\u00e1l\u00f3n\u00e1l t\u00f6rt\u00e9nik, kriptogr\u00e1fiai \u201e<\/a><\/noindex>). A teljes hashelt titkos\u00edtja egy felhaszn\u00e1l\u00f3 \u00e1ltal gener\u00e1lt kulcs. A Google adatb\u00e1zis\u00e1ban tal\u00e1lhat\u00f3 eredeti hash-eket tov\u00e1bbi titkos\u00edt\u00e1ssal l\u00e1tj\u00e1k el, \u00e9s csak az els\u0151 k\u00e9t b\u00e1jt hash-t indexelik. A hash-ek v\u00e9gs\u0151 \u00f6sszehasonl\u00edt\u00e1sa, amely a megadott k\u00e9t b\u00e1jtos prefix al\u00e1 esik, a felhaszn\u00e1l\u00f3n\u00e1l a \"technik\u00e1val.<\/a><\/noindex>\", amelyn\u00e9l egyetlen f\u00e9l sem ismeri a vizsg\u00e1lt adatok tartalm\u00e1t. A kompromitt\u00e1lt fi\u00f3kok adatb\u00e1zis\u00e1nak tartalm\u00e1nak meghat\u00e1roz\u00e1s\u00e1val szembeni v\u00e9delem \u00e9rdek\u00e9ben a lek\u00e9rdezett adatokat a bejelentkez\u00e9si n\u00e9v \u00e9s jelsz\u00f3 vizsg\u00e1lt p\u00e1rj\u00e1ra alapozva gener\u00e1lt kulcshoz k\u00f6t\u0151d\u0151en titkos\u00edtj\u00e1k. <\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS. \u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441 \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 http:\/\/), \u0432\u044b\u0432\u043e\u0434\u0438\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440. \u0412 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u043e «https:\/\/», \u0431\u0443\u0434\u0443\u0442 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28995,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Chrome blokkolni fogja a HTTP-er\u0151forr\u00e1sokat a HTTPS-oldalakon, \u00e9s ellen\u0151rzi a jelszavak megb\u00edzhat\u00f3s\u00e1g\u00e1t | ProHoster","description":"A Google figyelmeztette a felhaszn\u00e1l\u00f3kat a kevert tartalom feldolgoz\u00e1s\u00e1nak megv\u00e1ltozott megk\u00f6zel\u00edt\u00e9s\u00e9re.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u043d\u0430\u0447\u043d\u0451\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c HTTP-\u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043d\u0430 HTTPS-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:05+00:00","article:modified_time":"2019-10-31T19:25:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:05:22","updated":"2026-01-23 22:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=38655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/28995"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=38655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=38655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=38655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}