{"id":72068,"date":"2020-03-01T14:51:16","date_gmt":"2020-03-01T11:51:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-vydal-milliard-sertifikatov"},"modified":"2020-03-03T16:14:01","modified_gmt":"2020-03-03T13:14:01","slug":"lets-encrypt-vydal-milliard-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","title":{"rendered":"Let’s Encrypt a emis un miliard de certificate","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Let's27 februarie 2020, centrul de certificare gratuit Let's Encrypt a emis certificatul cu num\u0103rul o sut\u0103 de milioane<\/a><\/noindex>.<\/p>\n

\u00cen comunicatul de pres\u0103 festiv, reprezentan\u021bii proiectului amintesc c\u0103 ultimul jubileu de 100 milioane de certificate emise a fost s\u0103rb\u0103torit \u00een iunie 2017<\/a><\/noindex>. Atunci, ponderea traficului HTTPS pe internet era de 58% (\u00een SUA - 64%). \u00cen cei doi ani \u0219i jum\u0103tate, indicatorii au crescut semnificativ: \u201eAst\u0103zi, 81% din paginile accesate la nivel mondial utilizeaz\u0103 HTTPS, iar \u00een Statele Unite suntem la un nivel de 91%! \u2014 se bucur\u0103 echipa proiectului. \u2014 O realizare incredibil\u0103. Acesta este un nivel mult mai \u00eenalt de confiden\u021bialitate \u0219i securitate pentru to\u021bi.\u201d <\/p>\n

Let's Encrypt a jucat un rol foarte important \u00een a face certificatele HTTPS un standard de utilizare, iar criptarea sigur\u0103 a traficului o norm\u0103 absolut\u0103 pe internet.
\n<\/a><\/noindex>
\nBeta-testarea centrului de certificare inovator Let's Encrypt a \u00eenceput \u00een decembrie 2015. O caracteristic\u0103 unic\u0103 a noului centru a fost c\u0103 procesul de emitere a certificatelor a fost ini\u021bial complet automatizat.<\/p>\n

Configurarea automat\u0103 a HTTPS pe server se desf\u0103\u0219oar\u0103 \u00een dou\u0103 etape. \u00cen prima etap\u0103, agentul notific\u0103 centrul de certificare despre drepturile administratorului serverului asupra numelui de domeniu. De exemplu, verificarea poate include crearea unui subdomeniu specific sau instalarea \u00een cadrul domeniului a unei resurse HTTP cu un anumit URI.<\/p>\n

\"Let's
\n
\nLet\u2019s Encrypt identific\u0103 serverul web cu agentul activat prin cheia public\u0103. Cheile publice \u0219i private sunt generate de agent \u00eenainte de prima conectare la centrul de certificare. \u00cen timpul verific\u0103rii automate, agentul efectueaz\u0103 o serie de teste: de exemplu, semneaz\u0103 cu cheia public\u0103 parola unic\u0103 ob\u021binut\u0103 \u0219i prezint\u0103 o resurs\u0103 HTTP cu un anumit URI. Dac\u0103 semn\u0103tura digital\u0103 este corect\u0103 \u0219i toate testele sunt aprobate, agentului \u00eei sunt acordate drepturi de gestionare a certificatelor pentru domeniu.<\/p>\n

\"Let's
\n
\n\u00cen etapa a doua, agentul poate solicita, actualiza \u0219i revoca certificatele. Pentru emiterea automat\u0103 a certificatului se utilizeaz\u0103 un protocol de autentificare de tip \u201echallenge-response\u201d (provocare-r\u0103spuns) numit Automated Certificate Management Environment (ACME). Toate manipul\u0103rile cu certificatul se realizeaz\u0103 f\u0103r\u0103 oprirea serverului web, prin intermediul clientului ACME. Certbot<\/a><\/noindex>. Este u\u0219or de utilizat, func\u021bioneaz\u0103 pe majoritatea sistemelor de operare \u0219i este bine documentat. Exist\u0103 un mod expert cu set\u0103ri avansate. Pe l\u00e2ng\u0103 Certbot, exist\u0103 multe alte clien\u021bi ACME<\/a><\/noindex>. <\/p>\n

Rolul important al Let's Encrypt<\/h1>\n

\nLet's Encrypt a revolu\u021bionat cu adev\u0103rat pia\u021ba, unde \u00eenainte dominau centrele de certificare comerciale. Acestea au ie\u0219it practic din afacerea de emitere a certificatelor DV (certificate cu validare a domeniului), de\u0219i continu\u0103 s\u0103 v\u00e2nd\u0103 certificate cu validare organiza\u021bional\u0103 (Organization Validation, OV) \u0219i certificate de \u00eenalt\u0103 fiabilitate (Extended Validation, EV), pe care Let's Encrypt nu le emite, deoarece nu pot fi automatizate. Totu\u0219i, acesta este un produs de ni\u0219\u0103, iar pe pia\u021ba de mas\u0103 domin\u0103 certificatele gratuite Let's Encrypt.<\/p>\n

Let's Encrypt a standardizat re\u00eennoirea automat\u0103 a certificatelor. De\u0219i durata lor de via\u021b\u0103 este scurt\u0103 (90 de zile), procedura automat\u0103 elimin\u0103 \u201efactorul uman\u201d, care reprezint\u0103 \u00een mod tradi\u021bional principala vulnerabilitate \u00een securitate. Administratorii domeniilor adesea uit\u0103 s\u0103 re\u00eennoiasc\u0103 certificatele, ceea ce cauzeaz\u0103 \u00eentreruperi ale serviciilor. Ultimul astfel de incident a avut loc cu Microsoft Teams. Pe 3 februarie 2020, acest serviciu de colaborare a ie\u0219it offline. din cauza unui certificat expirat<\/a><\/noindex>.<\/p>\n

\u00cenlocuirea automat\u0103 a certificatelor prin protocolul ACME elimin\u0103 posibilitatea unor incidente de acest tip.<\/p>\n

De\u0219i proiectul Let's Encrypt deserve\u0219te jum\u0103tate din internet, \u00een lumea fizic\u0103 este o mic\u0103 organiza\u021bie non-profit: \u201e\u00cen ace\u0219ti doi ani \u0219i jum\u0103tate, organiza\u021bia noastr\u0103 a crescut, dar foarte pu\u021bin! - scriu ei. - \u00cen iunie 2017, am deservit aproximativ 46 milioane de site-uri web cu 11 angaja\u021bi permanen\u021bi \u0219i un buget anual de 2,61 milioane de dolari. Ast\u0103zi, deservim aproape 192 milioane de site-uri web cu 13 angaja\u021bi permanen\u021bi \u0219i un buget anual de aproximativ 3,35 milioane de dolari. Acest lucru \u00eenseamn\u0103 c\u0103 deservim de mai bine de patru ori mai multe site-uri cu doar doi angaja\u021bi suplimentari \u0219i o cre\u0219tere bugetar\u0103 de 28%.<\/p>\n

Sprijinul pentru proiect are loc prin donatii<\/a><\/noindex> \u0219i sponsorizare<\/a><\/noindex>.<\/p>\n

P\u00e2n\u0103 \u00een prezent, HTTPS a devenit standardul de facto pe internet. De anul trecut, principalele browsere avertizeaz\u0103 utilizatorii cu privire la pericolele conect\u0103rii la site-uri care nu cripteaz\u0103 traficul prin HTTPS. \u00cen aceast\u0103 schimbare a peisajului de securitate, Let\u2019s Encrypt joac\u0103 un rol important.<\/p>\n

\u00cen plus, Let\u2019s Encrypt a devenit literalmente revitalizat infrastructura serverelor publice XMPP<\/a><\/noindex>. Acum Jabber func\u021bioneaz\u0103 cu criptare solid\u0103 at\u00e2t la nivelul client-server, c\u00e2t \u0219i la nivelul server-server, iar aproape toate certificatele au fost emise de Let\u2019s Encrypt.<\/p>\n

\"Let's
\n
\n\"Ca \u0219i comunitate, am realizat lucruri incredibile pentru a proteja oameni pe internet, - se men\u021bioneaz\u0103 \u00een comunicatul de pres\u0103<\/a><\/noindex>. - Emisia unui miliard de certificate este o dovad\u0103 a \u00eentregului progres pe care l-am realizat ca comunitate.\"
\n
Sursa: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442. \u0412 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u043c \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u044e\u0431\u0438\u043b\u0435\u0439 \u0432 100\u00a0\u043c\u043b\u043d \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438 \u0432 \u0438\u044e\u043d\u0435 2017 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0434\u043e\u043b\u044f HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 58% (\u0432 \u0421\u0428\u0410\u00a0\u2014 64%). \u0417\u0430 \u0434\u0432\u0430 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u0433\u043e\u0434\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0438: \u00ab\u0421\u0435\u0433\u043e\u0434\u043d\u044f 81% \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72069,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72068","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let\u2019s Encrypt a emis un miliard de certificate | ProHoster","description":"Pe 27 februarie 2020, centrul de certificare gratuit.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let\u2019s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:16+00:00","article:modified_time":"2020-03-03T13:14:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72068","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-09-30 13:26:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/72068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=72068"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/72068\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/72069"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=72068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=72068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=72068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}