{"id":71037,"date":"2020-02-23T14:45:41","date_gmt":"2020-02-23T11:45:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej"},"modified":"2020-03-03T16:10:57","modified_gmt":"2020-03-03T13:10:57","slug":"lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","title":{"rendered":"Let's Encrypt a trecut la verificarea utiliz\u00e2nd diverse subre\u021bele","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Autoritate de certificare non-profit Let’s Encrypt<\/a><\/noindex>, gestionat\u0103 de comunitate \u0219i oferind certificate gratuit tuturor doritorilor, a anun\u021bat<\/a><\/noindex> Despre implementarea unei noi scheme de verificare a autoriza\u021biilor pentru ob\u021binerea unui certificat pentru domeniu. Accesul la serverul pe care este g\u0103zduit catalogul utilizat \u00een verificare «\/.well-known\/acme-challenge\/» va fi realizat acum folosind mai multe cereri HTTP trimise de 4 adrese IP diferite, situate \u00een centre de date diferite \u0219i apar\u021bin\u00e2nd unor sisteme autonome diferite. Verificarea este considerat\u0103 reu\u0219it\u0103 doar dac\u0103 cel pu\u021bin 3 din cele 4 cereri de la adrese IP diferite au fost reu\u0219ite. <\/p>\n

Verificarea din mai multe subre\u021bele va minimiza riscurile ob\u021binerii certificatelor pentru domenii str\u0103ine prin desf\u0103\u0219urarea de atacuri direc\u021bionate, care redirec\u021bioneaz\u0103 traficul prin substituirea unor rute fictive utiliz\u00e2nd BGP. Atunci c\u00e2nd se folose\u0219te un sistem de verificare multipunct, atacatorul va trebui s\u0103 redirec\u021bioneze simultan rutele pentru mai multe sisteme autonome ale providerilor cu uplink-uri diferite, ceea ce este semnificativ mai complicat dec\u00e2t redirec\u021bionarea unei singure rute. Trimiterea cererilor de la adrese IP diferite va cre\u0219te, de asemenea, fiabilitatea verific\u0103rii \u00een cazul \u00een care anumite gazde Let’s Encrypt ajung pe listele de blocare (de exemplu, \u00een RF, unele IP-uri de la letsencrypt.org au fost blocate de Roskomnadzor). <\/p>\n

P\u00e2n\u0103 la 1 iunie va exista o perioad\u0103 de tranzi\u021bie care permite generarea certificatelor \u00een urma unei verific\u0103ri reu\u0219ite din centrul de date ini\u021bial, \u00een cazul \u00een care gazda nu este disponibil\u0103 din celelalte subre\u021bele (de exemplu, acest lucru se poate \u00eent\u00e2mpla dac\u0103 administratorul gazdei a permis cererile doar din centrul de date principal Let’s Encrypt sau din cauza unei sincope de sincronizare a zonelor \u00een DNS). Pe baza jurnalelor, va fi preg\u0103tit un tablou alb pentru domeniile care \u00eent\u00e2mpin\u0103 probleme \u00een verificarea din 3 centre de date suplimentare. Pe tabloul alb vor fi incluse numai domeniile cu datele de contact completate. \u00cen cazul \u00een care domeniul nu este inclus pe tabloul alb automat, solicitarea de includere poate fi trimis\u0103 \u0219i prin un formular special<\/a><\/noindex>.<\/p>\n

\u00cen prezent, proiectul Let’s Encrypt a emis 113 milioane de certificate, acoperind aproximativ 190 milioane de domenii (acum un an erau acoperite 150 milioane de domenii, iar acum doi ani - 61 milioane). Conform statisticilor serviciului Firefox Telemetry, cota global\u0103 a cererilor de pagini HTTPS este de 81% (acum un an 77%, acum doi ani 69%), iar \u00een SUA - 91%.<\/p>\n

De asemenea, se poate men\u021biona, inten\u021bia<\/a><\/noindex> compania Apple
\nva suspenda \u00een browserul Safari \u00eencrederea \u00een certificatele ale c\u0103ror durata de via\u021b\u0103 dep\u0103\u0219e\u0219te 398 de zile (13 luni). Restric\u021bia se va aplica doar pentru certificatele emise \u00eencep\u00e2nd cu 1 septembrie 2020. Pentru certificatele ob\u021binute \u00eenainte de 1 septembrie, cu o durat\u0103 lung\u0103 de valabilitate, \u00eencrederea va fi p\u0103strat\u0103, dar limitat\u0103 la 825 de zile (2,2 ani). <\/p>\n

Modificarea ar putea afecta negativ afacerea autorit\u0103\u021bilor de certificare care v\u00e2nd certificate ieftine cu o valabilitate de p\u00e2n\u0103 la 5 ani. Potrivit Apple, generarea acestor certificate creeaz\u0103 amenin\u021b\u0103ri suplimentare la adresa securit\u0103\u021bii, \u00eempiedic\u0103 implementarea rapid\u0103 a noilor standarde criptografice \u0219i permite atacatorilor s\u0103 controleze traficul victimei pentru o perioad\u0103 \u00eendelungat\u0103 sau s\u0103 \u00eel foloseasc\u0103 pentru phishing \u00een cazul unei scurgeri neobservate a certificatului din cauza unei bre\u0219e de securitate.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 \u0441\u0445\u0435\u043c\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430. \u041e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 «\/.well-known\/acme-challenge\/», \u0442\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u0434\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0441 4 \u0440\u0430\u0437\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u0445 \u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71037","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt a trecut la verificarea utiliz\u00e2nd subre\u021bele diferite | ProHoster","description":"Autoritatea de certificare non-profit Let\u2019s Encrypt, controlat\u0103 de comunitate, ofer\u0103 certificate gratuit tuturor doritorilor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u043a \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let\u2019s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-23T11:45:41+00:00","article:modified_time":"2020-03-03T13:10:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71037","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:09:24","updated":"2022-10-04 11:44:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/71037","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=71037"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/71037\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=71037"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=71037"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=71037"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}