{"id":38175,"date":"2019-10-31T22:22:05","date_gmt":"2019-10-31T19:22:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej\/"},"modified":"2019-10-31T22:22:05","modified_gmt":"2019-10-31T19:22:05","slug":"forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","title":{"rendered":"Forum CA\/B zag\u0142osowa\u0142o przeciwko skr\u00f3ceniu terminu wa\u017cno\u015bci certyfikat\u00f3w SSL do 397 dni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

26 lipca 2019 roku firma Google przedstawi\u0142a propozycj\u0119<\/a><\/noindex> zmniejszenia maksymalnego okresu wa\u017cno\u015bci serwerowych certyfikat\u00f3w SSL\/TLS z obecnych 825 dni do 397 dni (oko\u0142o 13 miesi\u0119cy), czyli prawie o po\u0142ow\u0119. Google uwa\u017ca, \u017ce jedynie pe\u0142na automatyzacja czynno\u015bci zwi\u0105zanych z certyfikatami pozwoli pozby\u0107 si\u0119 obecnych problem\u00f3w z bezpiecze\u0144stwem, kt\u00f3re cz\u0119sto t\u0142umaczone s\u0105 czynnikiem ludzkim. Dlatego w idealnym \u015bwiecie nale\u017cy d\u0105\u017cy\u0107 do automatycznego wydawania kr\u00f3tkoterminowych certyfikat\u00f3w.<\/p>\n

Pytanie poddano g\u0142osowaniu w organizacji CA\/Browser Forum (CABF), kt\u00f3ra ustala wymagania dotycz\u0105ce certyfikat\u00f3w SSL\/TLS, w tym maksymalnego okresu wa\u017cno\u015bci.<\/p>\n

I tak 10 wrze\u015bnia og\u0142oszono wyniki<\/a><\/noindex>: cz\u0142onkowie konsorcjum g\u0142osowali przeciwko<\/b> propozycji.
\n<\/a><\/noindex><\/p>\n

Wyniki<\/h1>\n

<\/p>\n

G\u0142osowanie wydawc\u00f3w certyfikat\u00f3w<\/h4>\n

Za (11 g\u0142os\u00f3w)<\/b>: Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (dawniej Comodo CA), eMudhra, Kamu SM, Let’s Encrypt, Logius, PKIoverheid, SHECA, SSL.com<\/p>\n

Przeciw (20)<\/b>: Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (by\u0142a Trustwave)<\/p>\n

Wstrzymali si\u0119 (2)<\/b>: HARICA, TurkTrust<\/p><\/blockquote>\n

<\/p>\n

G\u0142osowanie konsument\u00f3w certyfikat\u00f3w<\/h4>\n

Za (7)<\/b>: Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360<\/p>\n

Przeciw<\/b>: 0<\/p>\n

Wstrzyma\u0142o si\u0119<\/b>: 0<\/p><\/blockquote>\n

\nZgodnie z zasadami CA\/Browser Forum, aby podj\u0105\u0107 pozytywn\u0105 decyzj\u0119, musi za ni\u0105 zag\u0142osowa\u0107 dwie trzecie wydawc\u00f3w certyfikat\u00f3w i 50% plus jeden g\u0142os w\u015br\u00f3d konsument\u00f3w.<\/p>\n

Przedstawiciele Digicert przeprosili<\/a><\/noindex> za brak g\u0142os\u00f3w, kt\u00f3re mog\u0142yby by\u0107 oddane na rzecz skr\u00f3cenia okresu wa\u017cno\u015bci certyfikat\u00f3w. Zaznaczaj\u0105, \u017ce dla niekt\u00f3rych klient\u00f3w skr\u00f3cenie okresu wa\u017cno\u015bci mo\u017ce stanowi\u0107 problem, ale w d\u0142ugofalowej perspektywie przynosi korzy\u015bci bezpiecze\u0144stwa.<\/p>\n

Tak czy inaczej, bran\u017ca na razie nie jest gotowa do skr\u00f3cenia okres\u00f3w wa\u017cno\u015bci certyfikat\u00f3w i ca\u0142kowitego przej\u015bcia na rozwi\u0105zania automatyczne. Same centra certyfikacji mog\u0105 oferowa\u0107 takie us\u0142ugi, ale wielu klient\u00f3w do tej pory nie wdro\u017cy\u0142o automatyzacji. Dlatego skr\u00f3cenie okresu do 397 dni zostaje na razie wstrzymane. Jednak pytanie pozostaje otwarte.<\/p>\n

Teraz Google mo\u017ce spr\u00f3bowa\u0107 wdro\u017cy\u0107 standard \u00abprzymusowo\u00bb, tak jak mia\u0142o to miejsce w przypadku protoko\u0142u Certificate Transparency<\/a><\/noindex>. Zw\u0142aszcza, \u017ce wspieraj\u0105 j\u0105 r\u00f3wnie\u017c inni deweloperzy: Apple, Microsoft, Mozilla i Opera.<\/p>\n

\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u043f\u043e\u043b\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u043e\u0432 \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0430 \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt. \u041e\u043d \u0432\u044b\u0434\u0430\u0451\u0442 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043d\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d 90 \u0434\u043d\u044f\u043c\u0438. \u041a\u043e\u0440\u043e\u0442\u043a\u0438\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0430 \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u043c\u0435\u044e\u0442 dwie g\u0142\u00f3wne zalety<\/a><\/noindex>:<\/p>\n

    \n
  1. ograniczenie szk\u00f3d wynikaj\u0105cych z kompromitacji kluczy i b\u0142\u0119dnie wydanych certyfikat\u00f3w, poniewa\u017c s\u0105 stosowane przez kr\u00f3tszy okres czasu.\n<\/li>\n
  2. Kr\u00f3tkoterminowe certyfikaty wspieraj\u0105 i promuj\u0105 automatyzacj\u0119, kt\u00f3ra jest absolutnie konieczna dla \u0142atwo\u015bci u\u017cycia HTTPS. Je\u015bli zamierzamy przekszta\u0142ci\u0107 ca\u0142y Internet na HTTPS, nie mo\u017cna oczekiwa\u0107 r\u0119cznej aktualizacji certyfikat\u00f3w od administratora ka\u017cdej istniej\u0105cej strony. Gdy wydanie i aktualizacja certyfikat\u00f3w stanie si\u0119 ca\u0142kowicie zautomatyzowane, kr\u00f3tsze czasy wa\u017cno\u015bci certyfikat\u00f3w stan\u0105 si\u0119 bardziej wygodne i praktyczne. <\/li>\n<\/ol>\n

    \nBadanie GlobalSign na Habrze<\/a><\/noindex> pokaza\u0142o, \u017ce 73,7% respondent\u00f3w \"raczej popiera\" skr\u00f3cenie okresu wa\u017cno\u015bci certyfikat\u00f3w.<\/p>\n

    Je\u015bli chodzi o ukrywanie ikony EV dla certyfikat\u00f3w SSL w pasku adresu, konsorcjum nie g\u0142osowa\u0142o w tej sprawie, poniewa\u017c kwestie UI przegl\u0105darek le\u017c\u0105 ca\u0142kowicie w gestii tw\u00f3rc\u00f3w. W wrze\u015bniu i pa\u017adzierniku uka\u017c\u0105 si\u0119 nowe wersje Chrome 77 i Firefox 70, kt\u00f3re odbior\u0105 certyfikatom EV szczeg\u00f3lne miejsce w pasku adresu przegl\u0105darki. Oto jak wygl\u0105da ta zmiana na przyk\u0142adzie wersji desktopowej Firefox 70:<\/p>\n

    By\u0142o:<\/p>\n

    \"Forum
    \n
    \nB\u0119dzie:<\/p>\n

    \"Forum
    \n
    \nWed\u0142ug specjalisty ds. bezpiecze\u0144stwa Troya Hanta, usuni\u0119cie informacji EV z paska adresu przegl\u0105darek     faktycznie pogrzebuje ten typ certyfikat\u00f3w.<\/a><\/noindex>.
    \n
    \u0179r\u00f3d\u0142o:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    26 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 SSL\/TLS \u0441 \u043d\u044b\u043d\u0435\u0448\u043d\u0438\u0445 825 \u0434\u043d\u0435\u0439 \u0434\u043e 397 \u0434\u043d\u0435\u0439 (\u043e\u043a\u043e\u043b\u043e 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432), \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432\u0434\u0432\u043e\u0435. Google \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u044b\u043d\u0435\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0430\u0441\u0442\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u043a\u0438\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432 \u0438\u0434\u0435\u0430\u043b\u0435 \u043d\u0443\u0436\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28658,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38175","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Forum CA\/B zag\u0142osowa\u0142o przeciwko skr\u00f3ceniu okresu wa\u017cno\u015bci certyfikat\u00f3w SSL do 397 dni | ProHoster","description":"26 lipca 2019 roku firma Google zaproponowa\u0142a zmniejszenie maksymalnego okresu wa\u017cno\u015bci certyfikat\u00f3w serwerowych.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u043e\u0440\u0443\u043c CA\/B \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0442\u0438\u0432 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 397 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"26 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:05+00:00","article:modified_time":"2019-10-31T19:22:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38175","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:47:03","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:29:57","updated":"2026-01-23 20:47:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/38175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=38175"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/38175\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/28658"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=38175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=38175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=38175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}