Nga Kaihanga o te kaupapa Chromium hanga he huringa, e whakatakoto ana i te roanga roa mō ngā tiwhikete TLS ki te 398 rā (13 marama).

E pā ana tēnei tikanga ki ngā tiwhikete tūmau tūmatanui katoa i tukuna i muri i te 1 o Hepetema, 2020. Mēnā kāore tētahi tiwhikete e tutuki i tēnei ture, ka whakakahoretia e te pūtirotiro he kore mana, ā, ka puta he hapa. ERR_CERT_VALIDITY_TOO_LONG.

Mō ngā tiwhikete i whiwhihia i mua i te 1 o Hepetema, 2020, ka mau tonu te whakawhirinakitanga, ā, he iti noa iho ki te 825 ngā rā (2,2 tau), pērā i tēnei rā.

I mua, i whakaurua e ngā kaiwhakawhanake o ngā pūtirotiro Firefox me Safari he rohe mō te roanga o te ora o ngā tiwhikete. I hangaia anō hoki te huringa ka whai mana i te 1 o Hepetema.

Ko te tikanga o tēnei, mā ngā paetukutuku e whakamahi ana i ngā tiwhikete SSL/TLS roa-ora i tukuna i muri i te wā kati ka puta ngā hapa tūmataitinga ki ngā pūtirotiro.

Ko Apple te tuatahi ki te whakapuaki i te kaupapa here hou i te hui a te CA/Browser. i te Hui-tanguru 2020I te whakatinanatanga o te ture hou, i oati a Apple ki te whakamahi i tēnei ture ki ngā taputapu iOS katoa, ā, macOSKa pēhia ngā kaiwhakahaere paetukutuku me ngā kaiwhakawhanake kia whakarite kia tutuki ā rātou tiwhikete i ngā whakaritenga.

Kua maha ngā marama e kōrero ana a Apple, Google, me ētahi atu kaiuru o CA/Browser mō te whakapoto i te roanga o te ora o ngā tiwhikete. He painga, he ngoikoretanga hoki tō tēnei kaupapa here.

Ko te whāinga o tēnei mahi he whakapai ake i te haumarutanga o te paetukutuku mā te whakarite kia whakamahia e ngā kaiwhakawhanake ngā tiwhikete me ngā paerewa whakamunatanga hou, me te whakaiti i te maha o ngā tiwhikete tawhito kua warewarehia, ka taea pea te tahae me te whakamahi anō mō ngā whakaeke hītinihanga me ngā whakaeke taraiwa-mai. Mena ka taea e ngā kaiwhakaeke te wawahi i te whakamunatanga i roto i te paerewa SSL/TLS, mā ngā tiwhikete poto-ora ka whakarite kia neke te tangata ki ngā tiwhikete haumaru ake i roto i te tau.

He ngoikoretanga anō hoki te whakapoto i ngā wā whai mana o te tiwhikete. Kua kitea mā te whakanui ake i te auau o ngā whakakapinga tiwhikete, kei te whakauaua ake hoki a Apple me ētahi atu kamupene i te oranga mō ngā kaipupuri paetukutuku me ngā kamupene e hiahia ana ki te whakahaere i ngā tiwhikete me te whakatutuki i ngā whakaritenga.

I tētahi atu taha, ka akiaki a Let's Encrypt me ētahi atu mana tiwhikete i ngā kaiwhakahaere tukutuku ki te whakatinana i ngā tikanga whakahou tiwhikete aunoa. Ka whakaitihia e tēnei te utu mahi a te tangata me te mōrearea o ngā hapa i te mea ka piki haere te auau o ngā whakahoutanga tiwhikete.

E mōhio ana koe, ka tukuna e Let's Encrypt ngā tiwhikete HTTPS kore utu ka pau i muri i ngā rā 90, ā, ka whakaratohia hoki he taputapu hei aunoa i ngā whakahoutanga. Nō reira, kua pai ake te uru o ēnei tiwhikete ki roto i te hanganga whānui, nā te mea ka whakatakotoria e ngā pūtirotiro he wā mana mōrahi.

I tukuna tēnei panonitanga kia pōtitia e ngā mema o te CA/Browser Forum Association, engari ko te whakatau kāore i whakaaetia nā te kore whakaae a ngā mana whakahaere tiwhikete.

Результаты

Pooti Kaituku Tiwhikete

Mo (11 pooti): Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (comodo CA i mua), eMudhra, Kamu SM, Kia Whakamuna, Logius, PKIoverheid, SHECA, SSL.com
ki (20): Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (o mua Trustwave)
Karekau (2): HARICA, TurkTrust