{"id":38175,"date":"2019-10-31T22:22:05","date_gmt":"2019-10-31T19:22:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej\/"},"modified":"2019-10-31T22:22:05","modified_gmt":"2019-10-31T19:22:05","slug":"forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","title":{"rendered":"Forum CA\/B a votat \u00eempotriva reducerii duratei de valabilitate a certificatelor SSL la 397 de zile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pe 26 iulie 2019, compania Google a propus<\/a><\/noindex> reducerea duratei maxime de valabilitate a certificatelor server SSL\/TLS de la actualele 825 de zile la 397 de zile (aproximativ 13 luni), adic\u0103 aproximativ jum\u0103tate. Google consider\u0103 c\u0103 doar automatizarea complet\u0103 a gestion\u0103rii certificatelor va ajuta la eliminarea problemelor de securitate actuale, care sunt adesea cauzate de factorul uman. Prin urmare, idealul ar fi s\u0103 ne \u00eendrept\u0103m spre emiterea automat\u0103 a certificatelor pe termen scurt.<\/p>\n

\u00centrebarea a fost supus\u0103 votului \u00een cadrul organiza\u021biei CA\/Browser Forum (CABF), care stabile\u0219te cerin\u021bele pentru certificatele SSL\/TLS, inclusiv pentru durata maxim\u0103 de valabilitate.<\/p>\n

\u0218i iat\u0103 c\u0103 pe 10 septembrie au fost anun\u021bate rezultatele<\/a><\/noindex>: membrii consor\u021biului au votat \u00eempotriva<\/b> propunerea.
\n<\/a><\/noindex><\/p>\n

Rezultate<\/h1>\n

<\/p>\n

Votul editorilor de certificate<\/h4>\n

Pentru (11 voturi)<\/b>: Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (fost Comodo CA), eMudhra, Kamu SM, Let’s Encrypt, Logius, PKIoverheid, SHECA, SSL.com<\/p>\n

\u00cempotriv\u0103 (20)<\/b>: Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (fosta Trustwave)<\/p>\n

Ab\u021binu\u021bi (2)<\/b>: HARICA, TurkTrust<\/p><\/blockquote>\n

<\/p>\n

Votul consumatorilor de certificate<\/h4>\n

Pentru (7)<\/b>: Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360<\/p>\n

\u00cempotriv\u0103<\/b>: 0<\/p>\n

Ab\u021binut<\/b>: 0<\/p><\/blockquote>\n

\nConform regulilor CA\/Browser Forum, pentru a adopta o decizie favorabil\u0103, dou\u0103 treimi dintre emiten\u021bii certificatelor \u0219i 50% plus un vot din r\u00e2ndul consumatorilor trebuie s\u0103 voteze pentru.<\/p>\n

Reprezentan\u021bii Digicert \u0219i-au cerut scuze<\/a><\/noindex> pentru lipsa lor de la votul \u00een care ar fi sprijinit reducerea duratei de valabilitate a certificatelor. Ace\u0219tia subliniaz\u0103 c\u0103, pentru unii clien\u021bi, reducerea duratei de valabilitate poate reprezenta o problem\u0103, dar pe termen lung, aceasta aduce beneficii pentru securitate.<\/p>\n

Oricum ar fi, industria nu este \u00eenc\u0103 preg\u0103tit\u0103 s\u0103 reduc\u0103 duratele de valabilitate ale certificatelor \u0219i s\u0103 treac\u0103 complet la solu\u021bii automate. Centrele de certificare pot oferi astfel de servicii, dar multor clien\u021bi le lipse\u0219te \u00eenc\u0103 implementarea automatiz\u0103rii. Prin urmare, reducerea duratelor la 397 de zile este am\u00e2nat\u0103 pentru moment. \u00cens\u0103 problema r\u0103m\u00e2ne deschis\u0103.<\/p>\n

Acum Google ar putea \u00eencerca s\u0103 impun\u0103 standardul \"for\u021bat\", a\u0219a cum s-a \u00eent\u00e2mplat cu protocolul Certificate Transparency<\/a><\/noindex>. Mai mult, acesta este sus\u021binut \u0219i de al\u021bi dezvoltatori: Apple, Microsoft, Mozilla \u0219i Opera.<\/p>\n

Reamintim c\u0103 automatizarea complet\u0103 este unul dintre principiile pe care se bazeaz\u0103 activitatea centrului de certificare non-profit Let’s Encrypt. Acesta emite certificate gratuite tuturor doritorilor, dar durata maxim\u0103 de via\u021b\u0103 a certificatului este limitat\u0103 la 90 de zile. Timpurile scurte de via\u021b\u0103 ale certificatelor au dou\u0103 avantaje principale<\/a><\/noindex>:<\/p>\n

    \n
  1. limitarea daunelor cauzate de cheile compromise \u0219i de certificatele emise eronat, deoarece acestea sunt utilizate pe o perioad\u0103 mai scurt\u0103 de timp;\n<\/li>\n
  2. Certificatee scurt\u0103 durat\u0103 sus\u021bin \u0219i \u00eencurajeaz\u0103 automatizarea, care este absolut necesar\u0103 pentru a simplifica utilizarea HTTPS. Dac\u0103 dorim s\u0103 migram \u00eentreaga re\u021bea mondial\u0103 pe HTTPS, nu putem a\u0219tepta deloc actualiz\u0103ri manuale de certificat de la administratorii fiec\u0103rui site existent. Odat\u0103 ce emisiunea \u0219i actualiz\u0103rile certificatelor devin complet automatizate, timpii mai scur\u021bi de via\u021b\u0103 ai certificatelor vor deveni mai convenabili \u0219i practici. <\/li>\n<\/ol>\n

    \nSondajul GlobalSign de pe Habr<\/a><\/noindex> a ar\u0103tat c\u0103 73,7% dintre responden\u021bi \u201esus\u021bin mai degrab\u0103\u201d scurtarea duratei de valabilitate a certificatelor.<\/p>\n

    \u00cen ceea ce prive\u0219te ascunderea siglei EV pentru certificatele SSL \u00een bara de adrese, consor\u021biul nu a votat pe aceast\u0103 tem\u0103, deoarece problema UI-ului browserelor se afl\u0103 complet \u00een competen\u021ba dezvoltatorilor. \u00cen septembrie-octombrie vor fi lansate noi versiuni ale Chrome 77 \u0219i Firefox 70, care vor elimina locul special al certificatelor EV \u00een bara de adrese a browserului. Iat\u0103 cum arat\u0103 modificarea \u00een exemplul Versiunii desktop Firefox 70:<\/p>\n

    A fost:<\/p>\n

    \"Forum
    \n
    \nVa fi:<\/p>\n

    \"Forum
    \n
    \nPotrivit specialistului \u00een securitate Troy Hunt, eliminarea informa\u021biilor EV din bara de adrese a browserelor     \u00eengrop\u0103 de fapt acest tip de certificate<\/a><\/noindex>.
    \n
    Sursa:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    26 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 SSL\/TLS \u0441 \u043d\u044b\u043d\u0435\u0448\u043d\u0438\u0445 825 \u0434\u043d\u0435\u0439 \u0434\u043e 397 \u0434\u043d\u0435\u0439 (\u043e\u043a\u043e\u043b\u043e 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432), \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432\u0434\u0432\u043e\u0435. Google \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u044b\u043d\u0435\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0430\u0441\u0442\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u043a\u0438\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432 \u0438\u0434\u0435\u0430\u043b\u0435 \u043d\u0443\u0436\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28658,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38175","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Forumul CA\/B a votat \u00eempotriva scurt\u0103rii duratei de valabilitate a certificatelor SSL la 397 de zile | ProHoster","description":"Pe 26 iulie 2019, Google a propus reducerea duratei maxime de valabilitate a certificatelor de server.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u043e\u0440\u0443\u043c CA\/B \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0442\u0438\u0432 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 397 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"26 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:05+00:00","article:modified_time":"2019-10-31T19:22:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38175","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:47:03","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:29:57","updated":"2026-01-23 20:47:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=38175"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38175\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/28658"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=38175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=38175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=38175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}