Sitolo ya Satifiketi ya Firefox
Ndi kutulutsidwa kwa Mozilla Firefox 65 mu February 2019, ogwiritsa ntchito ena adakumana monga "Kulumikizana kwanu sikuli kotetezeka" kapena "SEC_ERROR_UNKNOWN_ISSUER". Chifukwa chake chidakhala ma antivayirasi monga Avast, Bitdefender ndi Kaspersky, omwe amayika ziphaso zawo pakompyuta kuti agwiritse ntchito MiTM mumayendedwe a HTTPS a wosuta. Ndipo popeza Firefox ili ndi sitolo yake ya satifiketi, amayesanso kulowamo.
Opanga osatsegula ogwiritsa ntchito kukana kukhazikitsa ma antivayirasi a chipani chachitatu omwe amasokoneza magwiridwe antchito a asakatuli ndi mapulogalamu ena, koma omvera ambiri sanamvere mafoni. Tsoka ilo, pogwira ntchito ngati proxy yowonekera, ma antivayirasi ambiri amachepetsa chitetezo chachinsinsi pamakompyuta a kasitomala. Pachifukwa ichi, tikupanga , yomwe kumbali ya seva imazindikira kukhalapo kwa MiTM, monga antivayirasi, panjira pakati pa kasitomala ndi seva.
Mwanjira ina, munkhaniyi, ma antivayirasi adasokonezanso osatsegula, ndipo Firefox inalibe chochita koma kuthetsa vutoli palokha. Pali zoikamo mu msakatuli configs security.enterprise_roots.enabled. Mukatsegula mbendera iyi, Firefox iyamba kugwiritsa ntchito sitolo ya satifiketi ya Windows kuti itsimikizire kulumikizana kwa SSL. Ngati wina akumana ndi zolakwika zomwe tazitchula pamwambapa poyendera masamba a HTTPS, mutha kuletsa kusanja maulumikizidwe a SSL mu antivayirasi yanu, kapena kuyika mbendera iyi pamanja pa msakatuli wanu.
vuto mu Mozilla bug tracker. Madivelopa adaganiza zoyambitsa mbendera kuti ayese kuyesa security.enterprise_roots.enabled mwachisawawa kuti sitolo ya satifiketi ya Windows igwiritsidwe ntchito popanda zowonjezera za ogwiritsa ntchito. Izi zichitika kuchokera ku mtundu wa Firefox 66 pa Windows 8 ndi Windows 10 machitidwe omwe ma antivayirasi amtundu wina amayikidwa (API imakulolani kuti muwone kupezeka kwa antivayirasi mudongosolo kokha kuchokera mu mtundu wa Windows 8).
Source: www.habr.com