{"id":123497,"date":"2025-04-14T15:05:08","date_gmt":"2025-04-14T13:05:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej"},"modified":"2025-04-14T15:05:08","modified_gmt":"2025-04-14T13:05:08","slug":"maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","title":{"rendered":"Maksymalny czas wa\u017cno\u015bci certyfikat\u00f3w TLS zostanie skr\u00f3cony z 398 do 47 dni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cz\u0142onkowie stowarzyszenia CA\/Browser Forum, b\u0119d\u0105cego platform\u0105 do koordynacji wsp\u00f3\u0142pracy producent\u00f3w przegl\u0105darek i centr\u00f3w certyfikacji, zag\u0142osowali za skr\u00f3ceniem maksymalnego czasu \u017cycia certyfikat\u00f3w TLS. Maksymalny czas wa\u017cno\u015bci certyfikat\u00f3w TLS zostanie skr\u00f3cony z 398 do 47 dni, o ile w przysz\u0142o\u015bci CA\/Browser Forum nie zmieni podj\u0119tej decyzji. Opr\u00f3cz czasu wa\u017cno\u015bci certyfikat\u00f3w postanowiono r\u00f3wnie\u017c znacznie skr\u00f3ci\u0107 czas ponownego wykorzystania danych weryfikacyjnych obiekt\u00f3w: dla SAN (Subject Alternative Name, kiedy jeden certyfikat obejmuje kilka zasob\u00f3w, na przyk\u0142ad dzia\u0142a od razu dla kilku domen) czas zostanie skr\u00f3cony z 398 do 10 dni, a dla nie-SAN \u2014 z 825 do 398 dni. <\/p>\n

Zmiana ma by\u0107 wprowadzana stopniowo: od 15 marca 2026 roku maksymalny okres obowi\u0105zywania certyfikat\u00f3w TLS<\/a> zostanie zmniejszony do 250 dni, od 15 marca 2027 roku \u2014 do 100 dni, a od marca 2029 roku \u2014 do 47 dni. Po ka\u017cdym etapie przetwarzanie nowych certyfikat\u00f3w, kt\u00f3re nie spe\u0142niaj\u0105 wymienionych kryteri\u00f3w, b\u0119dzie skutkowa\u0107 wy\u015bwietlaniem b\u0142\u0119d\u00f3w \u201eERR_CERT_VALIDITY_TOO_LONG\u201d w przegl\u0105darkach. Wcze\u015bniej producentom przegl\u0105darek uda\u0142o si\u0119 obroni\u0107 stopniowe skracanie czasu \u017cycia certyfikat\u00f3w z 8 lat do 398 dni (13 miesi\u0119cy). <\/p>\n

Za nowym skr\u00f3ceniem czasu \u017cycia certyfikat\u00f3w TLS g\u0142osowa\u0142o 29 uczestnik\u00f3w, 6 wstrzyma\u0142o si\u0119 od g\u0142osu, a nikt nie by\u0142 przeciw. Uczestnicy, kt\u00f3rzy zag\u0142osowali \u201eza\u201d: Apple, Google, Microsoft, Mozilla, Amazon, Asseco Data Systems SA (Certum), Buypass AS, Certigna (DHIMYOTIS), Certinomis, DigiCert, Disig, D-TRUST, eMudhra, Fastly, GlobalSign, GoDaddy, HARICA, iTrusChina, Izenpe, NAVER Cloud Trust Services, Fundacja OISTE, Sectigo, SHECA, SSL.com, SwissSign, Telia Company, TrustAsia, VikingCloud, Visa. Uczestnicy, kt\u00f3rzy si\u0119 wstrzymali: Entrust, IdenTrust, Japan Registry Services, SECOM Trust Systems, TWCA. <\/p>\n

Zak\u0142ada si\u0119, \u017ce generacja certyfikat\u00f3w o kr\u00f3tkim okresie wa\u017cno\u015bci umo\u017cliwi szybsze wdra\u017canie nowych algorytm\u00f3w kryptograficznych w przypadku wykrycia luk w obecnie stosowanych oraz zmniejszy zagro\u017cenia bezpiecze\u0144stwa. Na przyk\u0142ad w przypadku nieumy\u015blnego wycieku certyfikatu wskutek w\u0142amania, certyfikaty o kr\u00f3tkim czasie wa\u017cno\u015bci uniemo\u017cliwi\u0105 napastnikom przez d\u0142ugi czas kontrolowanie ruchu ofiary lub wykorzystywanie certyfikat\u00f3w do phishingu. Cz\u0119stsza walidacja oraz skr\u00f3cenie okres\u00f3w wa\u017cno\u015bci certyfikat\u00f3w zmniejsz\u0105 r\u00f3wnie\u017c prawdopodobie\u0144stwo, \u017ce certyfikat nadal b\u0119dzie obowi\u0105zywa\u0142 po utracie aktualno\u015bci informacji w nim zawartych i zmniejsz\u0105 ryzyko rozpowszechniania niew\u0142a\u015bciwie wydanych certyfikat\u00f3w. <\/p>\n

Ponadto certyfikaty o kr\u00f3tkim okresie wa\u017cno\u015bci stan\u0105 si\u0119 impulsem do wprowadzania automatycznych system\u00f3w zarz\u0105dzania certyfikatami, wolnych od czynnika ludzkiego. Jednak\u017ce likwidacja praktyki r\u0119cznego odnawiania certyfikat\u00f3w mo\u017ce prowadzi\u0107 do negatywnych konsekwencji. Zauwa\u017cono, \u017ce niekt\u00f3re urz\u0105dzenia, kt\u00f3re pozwalaj\u0105 na \u0142adowanie certyfikat\u00f3w tylko w trybie r\u0119cznym, mog\u0105 pozostawa\u0107 z niewa\u017cnymi certyfikatami z powodu trudno\u015bci w organizacji r\u0119cznego odnawiania co p\u00f3\u0142tora miesi\u0105ca. Zmiana ta mo\u017ce r\u00f3wnie\u017c negatywnie wp\u0142yn\u0105\u0107 na dzia\u0142alno\u015b\u0107 centr\u00f3w certyfikacji, kt\u00f3re nie oferuj\u0105 API do automatycznego pozyskiwania certyfikat\u00f3w.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 CA\/Browser Forum, \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u043e\u0439 \u0434\u043b\u044f \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0438 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b\u0438 \u0437\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0441 398 \u0434\u043e 47 \u0434\u043d\u0435\u0439, \u0435\u0441\u043b\u0438 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c CA\/Browser Forum \u043d\u0435 \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0438\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435. \u041f\u043e\u043c\u0438\u043c\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0440\u0435\u0448\u0435\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438 \u0441\u0440\u043e\u043a\u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123497","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Maksymalny czas \u017cycia certyfikat\u00f3w TLS zostanie skr\u00f3cony z 398 do 47 dni | ProHoster","description":"Cz\u0142onkowie stowarzyszenia CA\/Browser Forum, pe\u0142ni\u0105cego rol\u0119 platformy do koordynacji wsp\u00f3\u0142pracy producent\u00f3w przegl\u0105darek i centr\u00f3w certyfikacji, g\u0142osowali za skr\u00f3ceniem maksymalnego czasu \u017cycia.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u043e\u043a\u0440\u0430\u0442\u044f\u0442 \u0441 398 \u0434\u043e 47 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 CA\/Browser Forum, \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u043e\u0439 \u0434\u043b\u044f \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0438 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432, \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b\u0438 \u0437\u0430 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0436\u0438\u0437\u043d\u0438.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/maksimalnoe-vremya-zhizni-tls-sertifikatov-sokratyat-s-398-do-47-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-14T13:05:08+00:00","article:modified_time":"2025-04-14T13:05:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123497","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 21:04:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:12:19","updated":"2026-02-08 21:04:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/123497","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=123497"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/123497\/revisions"}],"predecessor-version":[{"id":158146,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/123497\/revisions\/158146"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=123497"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=123497"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=123497"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}