Tiyeni Tilembetse masinthidwe kuti atsimikizire pogwiritsa ntchito ma subnets osiyanasiyana

Non-profit certification center Tiyeni Tilembetse, yolamulidwa ndi anthu ammudzi ndikupereka ziphaso kwaulere kwa aliyense, adalengeza pakukhazikitsa dongosolo latsopano lotsimikizira kuti ali ndi chiphaso cha domain. Kulumikizana ndi seva yomwe imakhala ndi "/.well-known/acme-challenge/" directory yomwe imagwiritsidwa ntchito poyesa tsopano ichitika pogwiritsa ntchito zopempha zingapo za HTTP zotumizidwa kuchokera ku ma adilesi 4 a IP omwe ali m'malo osiyanasiyana a data komanso a machitidwe osiyanasiyana odziyimira pawokha. Chekeyo imawonedwa kuti ndi yopambana pokhapokha ngati zopempha zitatu mwa 3 kuchokera ku ma IP osiyanasiyana zapambana.

Kuyang'ana kuchokera kumagulu angapo ang'onoang'ono kukuthandizani kuti muchepetse kuopsa kopeza ziphaso zamayiko akunja pochita zigawenga zomwe zimawongolera magalimoto kudzera m'malo mwa njira zabodza pogwiritsa ntchito BGP. Mukamagwiritsa ntchito makina otsimikizira malo ambiri, wowukira adzafunikanso kukwaniritsa njira yolondolera njira zamakina angapo odziyimira pawokha okhala ndi ma uplink osiyanasiyana, omwe ndi ovuta kwambiri kuposa kulozera njira imodzi. Kutumiza zopempha kuchokera ku ma IP osiyanasiyana kudzawonjezeranso kudalirika kwa cheke ngati osakwatiwa Let's Encrypt makamu akuphatikizidwa pamndandanda wotsekereza (mwachitsanzo, ku Russian Federation, ma IP ena a letsencrypt.org adatsekedwa ndi Roskomnadzor).

Mpaka pa June 1, padzakhala nthawi yosinthika yololeza kutulutsidwa kwa ziphaso pakutsimikiziridwa bwino kuchokera ku malo oyambirira a data, ngati wolandirayo sangapezeke kuchokera kumagulu ena apansi (mwachitsanzo, izi zikhoza kuchitika ngati woyang'anira malo pa firewall alola zopempha kuchokera chachikulu Tiyeni Tilembetse data center kapena chifukwa chophwanya kalunzanitsidwe kagawo mu DNS). Kutengera ndi zipika, mndandanda woyera udzakonzedwa kwa madambwe omwe ali ndi vuto ndi kutsimikizika kuchokera ku 3 malo owonjezera a data. Madomeni okhawo omwe ali ndi zidziwitso zomaliza adzaphatikizidwa pamndandanda woyera. Ngati derali silinaphatikizidwe pamndandanda woyera, ntchito yofunsira malo imathanso kutumizidwa kudzera mawonekedwe apadera.

Pakadali pano, pulojekiti ya Let Encrypt yatulutsa ziphaso za 113 miliyoni, zokhala ndi madambwe pafupifupi 190 miliyoni (madera 150 miliyoni adapangidwa chaka chapitacho, ndi 61 miliyoni zaka ziwiri zapitazo). Malinga ndi ziwerengero za Firefox Telemetry service, gawo lapadziko lonse la zopempha zamasamba kudzera pa HTTPS ndi 81% (chaka chapitacho 77%, zaka ziwiri zapitazo 69%), ndipo ku US - 91%.

Kuphatikiza apo, zitha kuzindikirika cholinga apulosi
Lekani kudalira satifiketi mu msakatuli wa Safari yemwe moyo wake umaposa masiku 398 (miyezi 13). Zoletsazo zakonzedwa kuti zizingoperekedwa kwa ziphaso zoperekedwa kuyambira pa Seputembara 1, 2020. Kwa ziphaso zokhala ndi nthawi yayitali yovomerezeka yomwe idalandiridwa pa Seputembara 1 isanafike, chikhulupiliro chidzasungidwa, koma masiku 825 (zaka 2.2).

Kusinthaku kumatha kusokoneza bizinesi yama certification malo omwe amagulitsa ziphaso zotsika mtengo zokhala ndi nthawi yayitali yovomerezeka, mpaka zaka 5. Malinga ndi Apple, kutulutsidwa kwa ziphaso zotere kumapangitsa kuti ziwopsezo zowonjezera ziwonjezeke, zimasokoneza kukhazikitsidwa mwachangu kwa miyezo yatsopano ya crypto, ndipo zimalola oukirawo kuti aziwongolera kuchuluka kwa anthu omwe akuzunzidwa kwa nthawi yayitali kapena kuzigwiritsa ntchito ngati chinyengo ngati satifiketi yosadziwika itayikira. zotsatira za kuthyolako.

Source: opennet.ru