{"id":38655,"date":"2019-10-31T22:25:05","date_gmt":"2019-10-31T19:25:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej\/"},"modified":"2019-10-31T22:25:05","modified_gmt":"2019-10-31T19:25:05","slug":"chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","title":{"rendered":"O Chrome come\u00e7ar\u00e1 a bloquear recursos HTTP em p\u00e1ginas HTTPS e a verificar a confiabilidade das senhas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A empresa Google avisou<\/a><\/noindex> sobre a mudan\u00e7a na abordagem de processamento de conte\u00fado misto em p\u00e1ginas acessadas via HTTPS. Anteriormente, quando havia componentes em p\u00e1ginas abertas por HTTPS carregados sem criptografia (via http:\/\/), um indicador especial era exibido. No futuro, decidiu-se bloquear o carregamento de tais recursos por padr\u00e3o. Assim, p\u00e1ginas abertas em 'https:\/\/' garantir\u00e3o que contenham apenas recursos carregados por meio de um canal de comunica\u00e7\u00e3o seguro.<\/p>\n

Observa-se que atualmente mais de 90% dos sites s\u00e3o acessados pelos usu\u00e1rios do Chrome usando HTTPS. A presen\u00e7a de elementos carregados sem criptografia cria riscos de viola\u00e7\u00e3o de seguran\u00e7a atrav\u00e9s da modifica\u00e7\u00e3o de conte\u00fado n\u00e3o seguro quando h\u00e1 controle sobre o canal de comunica\u00e7\u00e3o (por exemplo, quando se conecta a redes Wi-Fi abertas). O indicador de conte\u00fado misto \u00e9 considerado ineficaz e enganoso para o usu\u00e1rio, pois n\u00e3o fornece uma avalia\u00e7\u00e3o clara da seguran\u00e7a da p\u00e1gina.<\/p>\n

Atualmente, os tipos de conte\u00fado misto mais perigosos, como scripts e iframes, j\u00e1 s\u00e3o bloqueados por padr\u00e3o, mas imagens, arquivos de \u00e1udio e v\u00eddeos ainda podem ser carregados via http:\/\/. Atrav\u00e9s da substitui\u00e7\u00e3o de imagens, um atacante pode inserir Cookies de rastreamento das a\u00e7\u00f5es do usu\u00e1rio, tentar explorar vulnerabilidades em processadores de imagem ou realizar fraudes substituindo as informa\u00e7\u00f5es apresentadas na imagem.<\/p>\n

A introdu\u00e7\u00e3o do bloqueio \u00e9 dividida em v\u00e1rias etapas. No Chrome 79, programado para 10 de dezembro, haver\u00e1 uma nova configura\u00e7\u00e3o que permitir\u00e1 desabilitar o bloqueio para sites espec\u00edficos. A configura\u00e7\u00e3o mencionada se aplicar\u00e1 ao conte\u00fado misto j\u00e1 bloqueado, como scripts e iframes, e poder\u00e1 ser acessada atrav\u00e9s do menu que aparece ao clicar no \u00edcone do cadeado, substituindo o indicador anteriormente oferecido para desabilitar o bloqueio.<\/p>\n

\"O<\/center><\/p>\n

No Chrome 80, que ser\u00e1 lan\u00e7ado em 4 de fevereiro, ser\u00e1 aplicada uma leve esquema de bloqueio para arquivos de \u00e1udio e v\u00eddeo, implicando a substitui\u00e7\u00e3o autom\u00e1tica nos links http:\/\/ para https:\/\/, o que permitir\u00e1 manter a funcionalidade, caso o recurso problem\u00e1tico tamb\u00e9m esteja dispon\u00edvel via HTTPS. As imagens continuar\u00e3o a ser carregadas sem altera\u00e7\u00f5es, mas, ao carregar via http:\/\/ nas p\u00e1ginas https:\/\/, um indicador de conex\u00e3o n\u00e3o segura ser\u00e1 exibido em toda a p\u00e1gina. Para a substitui\u00e7\u00e3o autom\u00e1tica para https ou bloqueio de imagens, os desenvolvedores de sites poder\u00e3o usar as propriedades CSP upgrade-insecure-requests e block-all-mixed-content. No lan\u00e7amento do Chrome 81, programado para 17 de mar\u00e7o, a substitui\u00e7\u00e3o autom\u00e1tica de http:\/\/ para https:\/\/ ser\u00e1 aplicada ao carregar imagens de forma mista.<\/p>\n

\"O<\/a><\/noindex><\/center><\/p>\n

Al\u00e9m disso, a empresa Google anunciou<\/a><\/noindex> est\u00e1 integrando, em uma das pr\u00f3ximas vers\u00f5es do navegador Chrome, um novo componente chamado Password Checkup, que anteriormente foi desenvolvido<\/a><\/noindex> na forma de como um complemento externo<\/a><\/noindex>. A integra\u00e7\u00e3o levar\u00e1 \u00e0 inclus\u00e3o, no gerenciador de senhas padr\u00e3o do Chrome, de ferramentas para analisar a confiabilidade das senhas usadas pelos usu\u00e1rios. Ao tentar acessar qualquer site, haver\u00e1 uma verifica\u00e7\u00e3o do login e da senha em um banco de dados de contas comprometidas, com um aviso exibido em caso de problemas identificados. A verifica\u00e7\u00e3o \u00e9 feita em um banco de dados que abrange mais de 4 bilh\u00f5es de contas comprometidas que foram parte de vazamentos de dados de usu\u00e1rios. Um aviso tamb\u00e9m ser\u00e1 exibido ao tentar usar senhas triviais, como 'abc123' (de acordo com estat\u00edsticas<\/a><\/noindex> Google, 23% dos americanos usam senhas semelhantes), ou ao usar a mesma senha em v\u00e1rios sites.<\/p>\n

Para preservar a privacidade ao acessar uma API externa, apenas os primeiros dois bytes do hash da combina\u00e7\u00e3o de nome de usu\u00e1rio e senha s\u00e3o enviados (sendo que o algoritmo usado para hashing \u00e9 Argon2<\/a><\/noindex>). O hash completo \u00e9 criptografado com uma chave gerada no lado do usu\u00e1rio. Os hashes originais no banco de dados do Google tamb\u00e9m s\u00e3o criptografados adicionalmente e apenas os dois primeiros bytes do hash s\u00e3o deixados para indexa\u00e7\u00e3o. A verifica\u00e7\u00e3o final dos hashes que correspondem ao prefixo de dois bytes enviado \u00e9 realizada do lado do usu\u00e1rio usando t\u00e9cnica criptogr\u00e1fica 'ofusca\u00e7\u00e3o<\/a><\/noindex>', em que nenhuma das partes conhece o conte\u00fado dos dados verificados. Para proteger contra a determina\u00e7\u00e3o do conte\u00fado do banco de dados de contas comprometidas por meio da tentativa de adivinhar prefixos aleat\u00f3rios, os dados retornados s\u00e3o criptografados em conex\u00e3o com uma chave gerada com base na combina\u00e7\u00e3o de login e senha verificados. <\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS. \u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043d\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u043e HTTPS \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441 \u0431\u0435\u0437 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f (\u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 http:\/\/), \u0432\u044b\u0432\u043e\u0434\u0438\u043b\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440. \u0412 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u043e \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u043e «https:\/\/», \u0431\u0443\u0434\u0443\u0442 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28995,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38655","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47O Chrome come\u00e7ar\u00e1 a bloquear recursos HTTP em p\u00e1ginas HTTPS e a verificar a confiabilidade de senhas | ProHoster","description":"A empresa Google alertou sobre a mudan\u00e7a na abordagem de tratamento de conte\u00fado misto em.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u043d\u0430\u0447\u043d\u0451\u0442 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c HTTP-\u0440\u0435\u0441\u0443\u0440\u0441\u044b \u043d\u0430 HTTPS-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u0431 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043c\u0435\u0448\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/chrome-nachnyot-blokirovat-http-resursy-na-https-stranitsah-i-proveryat-nadyozhnost-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:05+00:00","article:modified_time":"2019-10-31T19:25:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38655","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:55:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:05:22","updated":"2026-01-23 22:55:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/38655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=38655"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/38655\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/28995"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=38655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=38655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=38655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}