TLS 1.0 ndi 1.1 adachotsedwa ntchito

Internet Engineering Task Force (IETF), yomwe imapanga ma protocol ndi kamangidwe ka intaneti, yasindikiza RFC 8996, kuchotseratu TLS 1.0 ndi 1.1.

Mafotokozedwe a TLS 1.0 adasindikizidwa mu Januware 1999. Zaka zisanu ndi ziwiri pambuyo pake, zosintha za TLS 1.1 zidatulutsidwa ndikusintha kwachitetezo kokhudzana ndi m'badwo wa ma vector oyambitsa ndi padding. Malinga ndi SSL Pulse service, kuyambira Januware 16, protocol ya TLS 1.2 imathandizidwa ndi 95.2% yamasamba omwe amalola kukhazikitsidwa kwa maulumikizidwe otetezeka, ndi TLS 1.3 - ndi 14.2%. Malumikizidwe a TLS 1.1 amavomerezedwa ndi 77.4% ya masamba a HTTPS, pomwe ma TLS 1.0 amavomerezedwa ndi 68%. Pafupifupi 21% yamasamba 100 oyambilira omwe akuwonetsedwa mu Alexa ranking sagwiritsabe ntchito HTTPS.

Mavuto akuluakulu a TLS 1.0 / 1.1 ndi kusowa kwa chithandizo cha ma ciphers amakono (mwachitsanzo, ECDHE ndi AEAD) komanso kukhalapo mwachidziwitso chofunikira chothandizira zilembo zakale, kudalirika komwe kumakayikiridwa pakali pano. zaukadaulo wamakompyuta (mwachitsanzo, kuthandizira kwa TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA kumafunikira pakuwunika ndi kutsimikizira MD5 ndi SHA-1 zimagwiritsidwa ntchito). Kuthandizira ma algorithms akale kwadzetsa kale kuukira monga ROBOT, DROWN, BEAST, Logjam ndi FREAK. Komabe, mavutowa sanali kuonedwa mwachindunji chiwopsezo protocol ndipo anathetsedwa pa mlingo wa kukhazikitsa kwake. Ma protocol a TLS 1.0/1.1 pawokha alibe zovuta zomwe zingagwiritsidwe ntchito pochita ziwonetsero.

Source: opennet.ru

Kuwonjezera ndemanga