{"id":86929,"date":"2020-07-01T19:42:02","date_gmt":"2020-07-01T17:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami"},"modified":"2020-07-01T19:42:02","modified_gmt":"2020-07-01T17:42:02","slug":"chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","title":{"rendered":"Chrome limiteaz\u0103, de asemenea, durata de via\u021b\u0103 a certificatelor TLS la 13 luni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"ChromeDezvoltatorii proiectului Chromium a fost efectuat\u0103 o modificare<\/a><\/noindex>, care stabile\u0219te durata maxim\u0103 de valabilitate a certificatelor TLS la 398 de zile (13 luni).<\/p>\n

Condi\u021bia se aplic\u0103 tuturor certificatelor serverului public emis dup\u0103 1 septembrie 2020. Dac\u0103 un certificat nu respect\u0103 aceast\u0103 regul\u0103, browserul \u00eel va respinge ca fiind invalid, r\u0103spunz\u00e2nd \u00een mod specific cu eroarea ERR_CERT_VALIDITY_TOO_LONG<\/code>.<\/p>\n

Pentru certificatele ob\u021binute p\u00e2n\u0103 la 1 septembrie 2020, \u00eencrederea va fi p\u0103strat\u0103 \u0219i limitata la 825 de zile<\/a><\/noindex> (2,2 ani), ca \u0219i p\u00e2n\u0103 acum.
\n<\/a><\/noindex>
\nAnterior, limitarea duratei maxime de valabilitate a certificatelor a fost introdus\u0103 de dezvoltatorii browserelor Firefox \u0219i Safari. Modificarea va intra \u00een vigoare pe 1 septembrie<\/a><\/noindex>.<\/p>\n

Aceasta \u00eenseamn\u0103 c\u0103 site-urile web care utilizeaz\u0103 certificate SSL\/TLS cu durat\u0103 lung\u0103 de valabilitate, emise dup\u0103 data limit\u0103, vor genera erori de confiden\u021bialitate \u00een browsere.<\/p>\n

\"Chrome
\n
\nNoua politic\u0103 a fost anun\u021bat\u0103 pentru prima dat\u0103 de Apple la o \u00eent\u00e2lnire a forumului CA\/Browser \u00een februarie 2020<\/a><\/noindex>. Implement\u00e2nd noua regul\u0103, Apple a promis c\u0103 o va aplica pe toate dispozitivele iOS \u0219i macOS. Aceasta va crea presiuni asupra administratorilor de websiteuri \u0219i dezvoltatorilor pentru ca certificatul lor s\u0103 respecte cerin\u021bele.<\/p>\n

Reducerea duratei de valabilitate a certificatelor a fost discutat\u0103 de c\u00e2teva luni de Apple, Google \u0219i al\u021bi participan\u021bi la CA\/Browser. Aceast\u0103 politic\u0103 are at\u00e2t avantaje, c\u00e2t \u0219i dezavantaje.<\/p>\n

Scopul acestei m\u0103suri este de a cre\u0219te securitatea website-ului, asigur\u00e2ndu-se c\u0103 dezvoltatorii utilizeaz\u0103 certificate cu cele mai recente standarde criptografice \u0219i de a reduce num\u0103rul certificatului vechi, abandonat, care ar putea fi poten\u021bial furat \u0219i reutilizat pentru atacuri de phishing \u0219i atacuri malware drive-by. Dac\u0103 infractorii reu\u0219esc s\u0103 compromise criptografia din standardul SSL\/TLS, certificatele de scurt\u0103 valabilitate vor oferi oamenilor trecerea la certificate mai sigure \u00een aproximativ un an.<\/p>\n

Reducerea duratei de valabilitate a certificatelor are unele dezavantaje. S-a observat c\u0103, prin cre\u0219terea frecven\u021bei de \u00eenlocuire a certificatelor, Apple \u0219i alte companii complic\u0103 pu\u021bin via\u021ba de\u021bin\u0103torilor de siteuri \u0219i companiilor care trebuie s\u0103 gestioneze certificatele \u0219i conformitatea.<\/p>\n

Pe de alt\u0103 parte, Let’s Encrypt \u0219i alte centre de certificare \u00eencurajeaz\u0103 webmasterii s\u0103 implementeze proceduri automatizate pentru actualizarea certificatelor. Acest lucru reduce costurile administrative \u0219i riscul de erori pe m\u0103sur\u0103 ce frecven\u021ba \u00eenlocuirii certificatelor cre\u0219te.<\/p>\n

Dup\u0103 cum se \u0219tie, Let’s Encrypt emite certificate HTTPS gratuite, cu o valabilitate de 90 de zile, \u0219i ofer\u0103 instrumente pentru automatizarea re\u00eennoirii. Astfel, aceste certificate se integreaz\u0103 \u0219i mai bine \u00een infrastructura general\u0103 \u2014 pe m\u0103sur\u0103 ce browserele impun o limitare a duratei maxime de valabilitate.<\/p>\n

Aceast\u0103 modificare a fost supus\u0103 votului membrilor asocia\u021biei CA\/Browser Forum, dar decizia nu a fost aprobat\u0103 din cauza dezacordului autorit\u0103\u021bilor de certificare.<\/a><\/noindex>.<\/p>\n

Rezultate<\/h1>\n

<\/p>\n

Votul editorilor de certificate<\/h4>\n

Pentru (11 voturi)<\/b>: Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (fost Comodo CA), eMudhra, Kamu SM, Let’s Encrypt, Logius, PKIoverheid, SHECA, SSL.com<\/p>\n

\u00cempotriv\u0103 (20)<\/b>: Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (fosta Trustwave)<\/p>\n

Ab\u021binu\u021bi (2)<\/b>: HARICA, TurkTrust<\/p><\/blockquote>\n

<\/p>\n

Votul consumatorilor de certificate<\/h4>\n

Pentru (7)<\/b>: Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360<\/p>\n

\u00cempotriv\u0103<\/b>: 0<\/p>\n

Ab\u021binut<\/b>: 0<\/p><\/blockquote>\n

\nAcum browserele implementeaz\u0103 for\u021bat aceast\u0103 politic\u0103 f\u0103r\u0103 acordul autorit\u0103\u021bilor de certificare.
\n
Sursa: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium \u0432\u043d\u0435\u0441\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 398 \u0434\u043d\u0435\u0439 (13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432). \u0423\u0441\u043b\u043e\u0432\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0430\u0432\u0438\u043b\u0443, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u0432\u0435\u0440\u0433\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u043e\u0439 ERR_CERT_VALIDITY_TOO_LONG. \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043e 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e\u0432\u0435\u0440\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86930,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86929","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome limiteaz\u0103 \u0219i timpul de via\u021b\u0103 al certificatelor TLS la 13 luni | ProHoster","description":"Dezvoltatorii proiectului Chromium.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u0442\u043e\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 13 \u043c\u0435\u0441\u044f\u0446\u0430\u043c\u0438 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-01T17:42:02+00:00","article:modified_time":"2020-07-01T17:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86929","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:02:56","updated":"2022-10-03 00:14:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/86929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=86929"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/86929\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/86930"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=86929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=86929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=86929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}