February 27, 2020 Tiyeni Tibisire Ulamuliro Wa Satifiketi Yaulere adapereka satifiketi ya biliyoni.

M'mawu atolankhani okondwerera, oimira projekiti amakumbukira kuti chaka cham'mbuyo cha ziphaso 100 miliyoni zoperekedwa zidakondwerera. mu June 2017. Ndiye gawo la magalimoto a HTTPS pa intaneti anali 58% (ku US - 64%). M'zaka ziwiri ndi theka, ziwerengero zakula kwambiri: "Lero, 81% yamasamba odzaza padziko lonse lapansi amagwiritsa ntchito HTTPS, ndipo ku United States tili pa 91%! - anyamata ochokera ku polojekitiyi amasangalala. - Kupambana kodabwitsa. Uwu ndi mulingo wapamwamba kwambiri wachinsinsi komanso chitetezo kwa aliyense. ”

Let's Encrypt idachita gawo lofunikira kwambiri popanga ziphaso za HTTPS kukhala mulingo wothandiza, komanso kubisa kwamagalimoto mwamphamvu kukhala chizolowezi pa intaneti.

Kuyesa kwa beta kwa olamulira a satifiketi a Let's Encrypt adayamba mu Disembala 2015. Chinthu chapadera pa malo atsopanowa chinali chakuti njira yoperekera ziphaso poyamba inali yodzichitira yokha.

Kusintha kwachangu kwa HTTPS pa seva kumachitika mu magawo awiri. Pachiyambi choyamba, wothandizira amadziwitsa CA za ufulu wa woyang'anira seva ku dzina lachidziwitso. Mwachitsanzo, kutsimikizira kungaphatikizepo kupanga domeni inayake, kapena kukhazikitsa gwero la HTTP ndi URI inayake mkati mwa domeni.

Let's Encrypt imazindikiritsa seva yapaintaneti yomwe imayendetsa wothandizirayo ndi kiyi yake yapagulu. Makiyi apagulu ndi achinsinsi amapangidwa ndi wothandizira asanalumikizane koyamba ndi CA. Potsimikizira zokha, wothandizirayo amayesa zingapo: mwachitsanzo, amasaina mawu achinsinsi omwe adalandira nthawi imodzi ndi kiyi yapagulu ndikupereka gwero la HTTP lokhala ndi URI inayake. Ngati siginecha ya digito ndiyolondola ndipo mayeso onse adutsa, wothandizirayo amapatsidwa ufulu woyang'anira ziphaso za domain.

Mugawo lachiwiri, wothandizira atha kupempha, kukonzanso, ndikuchotsa ziphaso. Kuti mupereke chiphaso chokha, njira yotsimikizika ya kalasi yotsimikizika ya kalasi yotchedwa Automated Certificate Management Environment (ACME) imagwiritsidwa ntchito. Zosintha zonse zokhala ndi satifiketi zimachitika popanda kuyimitsa seva yapaintaneti pogwiritsa ntchito kasitomala wa ACME Certbot. Ndiosavuta kugwiritsa ntchito, imagwira ntchito pamakina ambiri ogwiritsira ntchito, ndipo imalembedwa bwino. Pali njira yaukadaulo yokhala ndi zoikamo zowonjezera. Kuphatikiza pa Certbot, palinso makasitomala ena ambiri a ACME.

Kufunika kwa Tiyeni Tilembetse

Let's Encrypt yasintha msika womwe kale unkalamulidwa ndi ma CA amalonda. Tsopano atsala pang'ono kutuluka mubizinesi ya satifiketi ya DV (Domain Validation), ngakhale akupitilizabe kugulitsa ziphaso za Organisation Validation (OV) ndi Extended Validation (EV) zomwe Let's Encrypt sizitulutsa chifukwa sizingakhale zokha. Komabe, ichi ndi chinthu chamtengo wapatali, ndipo satifiketi ya Let's Encrypt yaulere imalamulira kwambiri pamsika waukulu.

Let's Encrypt yapangitsa kuti ikhale muyezo woti tingotulutsanso ziphaso. Ngakhale atakhala ndi moyo waufupi (masiku 90), machitidwewa amachotsa "chinthu chamunthu" chomwe mwachizolowezi chimayimira chiwopsezo chachikulu chachitetezo. Oyang'anira ma domain nthawi zambiri amangoyiwala kukonzanso ziphaso, zomwe zimapangitsa kuti ntchito zilephereke. Chochitika chomaliza chotere chinachitika ndi Microsoft Teams. Pa February 3, 2020, ntchito yothandizanayi idakhala pa intaneti chifukwa cha satifiketi yomwe yatha.

Kusintha kwa ziphaso zodziwikiratu pogwiritsa ntchito protocol ya ACME kumachotsa kuthekera kwazochitika zotere.

Ngakhale kuti pulojekiti ya Let Encrypt imagwira ntchito theka la intaneti, padziko lapansi ndi gulu laling'ono lopanda phindu: "M'zaka ziwiri ndi theka izi, gulu lathu lakula, koma osati kwambiri! amalemba. “Mu June 2017, tidalandira mawebusayiti pafupifupi 46 miliyoni okhala ndi antchito anthawi zonse 11 komanso bajeti yapachaka ya $ 2,61 miliyoni. tikutumikira malo ochuluka kuwirikiza kanayi ndi antchito owonjezera aŵiri okha ndi chiwonjezeko cha 192 peresenti cha bajeti.”

Ntchitoyi imathandizidwa ndi zopereka и thandizo.

Pakadali pano, HTTPS yakhala muyeso wapa intaneti. Kuyambira chaka chatha, asakatuli akuluakulu akhala akuchenjeza ogwiritsa ntchito za kuopsa kolumikizana ndi masamba omwe samabisa kuchuluka kwa magalimoto pa HTTPS. Let's Encrypt amadziwika ndi kusintha kotere kwachitetezo.

Pamwamba pa izi, Tiyeni Encrypt ndi zenizeni adatsitsimutsanso makina a seva ya XMPP. Tsopano Jabber amagwira ntchito ndi kubisa kolimba pamlingo wa kasitomala-seva ndi seva, ndipo masatifiketi ambiri adaperekedwa ndi Let's Encrypt.

"Monga gulu, tachita zinthu zodabwitsa kuteteza anthu pa intaneti," akutero cholengeza munkhani. "Kuperekedwa kwa ziphaso biliyoni imodzi ndi umboni wa kupita patsogolo komwe tapanga monga gulu."

Source: www.habr.com