{"id":35582,"date":"2019-10-31T22:05:11","date_gmt":"2019-10-31T19:05:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya\/"},"modified":"2019-10-31T22:05:11","modified_gmt":"2019-10-31T19:05:11","slug":"periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","title":{"rendered":"Pogosta menjava gesel je zastarela praksa, \u010das je, da se je odpovemo.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V \u0161tevilnih IT-sistemih velja obvezno pravilo redne menjave gesel. To je verjetno najbolj nenavadna in najmanj koristna zahteva sistemov varnosti. Nekateri uporabniki kot nasvet preprosto spremenijo \u0161tevilko na koncu.<\/p>\n

Tak\u0161na praksa je povzro\u010dila veliko nev\u0161e\u010dnosti. Vendar so morali ljudje zdr\u017eati, saj je to zaradi varnosti<\/i>. Ta nasvet ni ve\u010d aktualen. Maja 2019 je tudi podjetje Microsoft kon\u010dno odstranilo zahtevo po redni menjavi gesel iz osnovnega nivoja varnostnih zahtev za osebne in stre\u017eni\u0161ke razli\u010dice sistema Windows 10: tukaj je uradna izjava na blogu<\/a><\/noindex> s seznamom sprememb za razli\u010dico Windows 10 v 1903 (opazite frazo Zmanj\u0161anje politik poteka gesel, ki zahtevajo redne spremembe gesel<\/i>). Sama pravila in sistemske politike Varnostna osnovna linija Windows 10 razli\u010dica 1903 in Windows Server 2019<\/i> so vklju\u010dena v paket Microsoft Security Compliance Toolkit 1.0<\/a><\/noindex>.<\/p>\n

Lahko pove\u010date te dokumente svojemu vodstvu in re\u010dete: \u010dasi so se spremenili. Obvezna menjava gesel je arhaizem, zdaj skoraj uradno. Tudi revizija varnosti ne bo preverjala te zahteve (\u010de temelji na uradnih pravilih o osnovni za\u0161\u010diti ra\u010dunalnikov pod Windows).
\n<\/a><\/noindex>
\n\"Pogosta
\nFragment seznama z osnovnimi politikami varnosti Windows 10 v1809 in spremembami v 1903, kjer ustrezne politike glede trajanja gesel \u017ee ne veljajo. Mimogrede, v novi razli\u010dici so privzeto tudi ukinjeni administratorski in gostinski ra\u010duni.<\/i><\/p>\n

Microsoft na svojem blogu enostavno pojasnjuje, zakaj se je odpovedal pravilu o obvezni menjavi gesla: \u201ePeriodi\u010dno potekanje gesla je za\u0161\u010dita le pred verjetnostjo, da bo geslo (ali njegov hash) ukradeno v \u010dasu njegove veljavnosti in bo uporabljeno s strani nepoobla\u0161\u010denih oseb. \u010ce geslo ni bilo ukradeno, ni smisla, da ga menjate. In \u010de imate dokaze, da je bilo geslo ukradeno, boste seveda \u017eeleli ukrepati takoj, ne da bi \u010dakali na potek veljavnosti, da odpravite te\u017eavo\u201c.<\/p>\n

Microsoft pojasnjuje, da je v dana\u0161njih razmerah napa\u010dno za\u0161\u010dititi se pred krajo gesel na tak na\u010din: \u201e\u010ce vemo, da bo geslo verjetno ukradeno, koliko dni je sprejemljivo obdobje, da dovolimo tatovi, da uporabi to ukradeno geslo? Privzeta vrednost je 42 dni. Se to ne zdi sme\u0161no dolgo obdobje? Povsem res je, da je to zelo dolgo, kljub temu pa je na\u0161a trenutna osnovna vrednost nastavljena na 60 dni \u2014 prej je bila celo 90 dni \u2014 ker pogostost poteka poteka prina\u0161a svoje te\u017eave. In \u010de geslo ne bo nujno ukradeno, pridobite te te\u017eave brez koristi. Poleg tega, \u010de so va\u0161i uporabniki pripravljeni zamenjati geslo za sladkarije, nobena politika poteka gesla ne bo pomagala.<\/p>\n

Alternativa<\/h1>\n

\nMicrosoft navaja, da so njene osnovne politike varnosti zasnovane za uporabo dobro upravljanih, varnostno osve\u0161\u010denih podjetij. Prav tako naj bi slu\u017eile kot vodilo za revizorje. \u010ce je taka organizacija uvedla sezname prepovedanih gesel, ve\u010dfaktorsko avtentikacijo, odkrivanje napadov z brute force in odkrivanje nenormalnih poskusov prijave, ali je potrebno obdobno potekanje gesla? In \u010de niso uvedli sodobnih za\u0161\u010ditnih sredstev, ali jim bo potekanje gesla koristilo?<\/p>\n

Logika Microsofta je presenetljivo prepri\u010dljiva. Imamo dve mo\u017enosti:<\/p>\n

    \n
  1. Podjetje je uvedlo sodobne za\u0161\u010ditne ukrepe.\n<\/li>\n
  2. Podjetje ne<\/i> uvedlo sodobne za\u0161\u010ditne ukrepe.<\/li>\n<\/ol>\n

    \nV prvem primeru obdobna menjava gesla ne prina\u0161a dodatnih prednosti.<\/p>\n

    V drugem primeru obdobna menjava gesla ni koristna.<\/p>\n

    Tako bi morali namesto poteka gesla uporabljati predvsem ve\u010dfaktorsko avtentikacijo<\/b>. Dodatni za\u0161\u010ditni ukrepi so navedeni zgoraj: seznami prepovedanih gesel, odkrivanje brute force napadov in drugih nenormalnih poskusov prijave.<\/p>\n

    \u00abObdobno potekanje gesla je star in zastarel ukrep za\u0161\u010dite.<\/i>, \u2014 zaklju\u010duje Microsoft, \u2014 in ne menimo, da je za na\u0161 osnovni nivo za\u0161\u010dite smiselno uporabljati kakr\u0161no koli specifi\u010dno vrednost. Z njegovo odstranitvijo iz na\u0161ega osnovnega nivoja lahko organizacije izberejo tisto, kar najbolje ustreza njihovim predvidenim potrebam, ne da bi kr\u0161ile na\u0161e priporo\u010dila.<\/p>\n

    Izlaz<\/h1>\n

    \n\u010ce danes podjetje prisili uporabnike, da ob\u010dasno spreminjajo gesla, kaj bi si o tem mislil zunanji opazovalec?<\/p>\n

      \n
    1. Dano:<\/b> podjetje uporablja zastarelo za\u0161\u010ditno metodo.\n<\/li>\n
    2. Predpostavka:<\/b> podjetje ni uvedlo sodobnih za\u0161\u010ditnih mehanizmov.\n<\/li>\n
    3. Izvajanje:<\/b> ta gesla je la\u017eje pridobiti in uporabiti.<\/li>\n<\/ol>\n

      \nTorej, ob\u010dasna menjava gesel podjetje naredi bolj privla\u010dno tar\u010do za napade.<\/p>\n

      \n\"Pogosta
      \n<\/a><\/noindex>
      \n
      Izvor:       habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

      \u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0430\u0439\u0444\u0445\u0430\u043a\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043c\u0435\u043d\u044f\u044e\u0442 \u0446\u0438\u0444\u0440\u0443 \u0432 \u043a\u043e\u043d\u0446\u0435. \u0422\u0430\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0430 \u043c\u0430\u0441\u0441\u0443 \u043d\u0435\u0443\u0434\u043e\u0431\u0441\u0442\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u043b\u044e\u0434\u044f\u043c \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0442\u0435\u0440\u043f\u0435\u0442\u044c, \u0432\u0435\u0434\u044c \u044d\u0442\u043e \u0440\u0430\u0434\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0422\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u043e\u0442 \u0441\u043e\u0432\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u0435\u043d. \u0412 \u043c\u0430\u0435 2019 \u0433\u043e\u0434\u0430 \u0434\u0430\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35582","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ob\u010dasna menjava gesel je zastarela praksa, \u010das je, da se je odpovemo | ProHoster","description":"V mnogih IT-sistemih velja obvezno pravilo ob\u010dasne menjave gesel. To je verjetno najomrznenej\u0161a in najbolj nepomembna zahteva varnostnih sistemov.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043c\u0435\u043d\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u2014 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430, \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0442 \u043d\u0435\u0451 \u043e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f | ProHoster","og:description":"\u0412\u043e \u043c\u043d\u043e\u0433\u0438\u0445 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u042d\u0442\u043e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0435 \u043d\u0435\u043d\u0430\u0432\u0438\u0441\u0442\u043d\u043e\u0435 \u0438 \u0441\u0430\u043c\u043e\u0435 \u0431\u0435\u0441\u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/periodicheskaya-smena-parolej-ustarevshaya-praktika-prishlo-vremya-ot-neyo-otkazatsya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:05:11+00:00","article:modified_time":"2019-10-31T19:05:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35582","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 23:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:11:37","updated":"2026-01-21 23:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/35582","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=35582"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/35582\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=35582"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=35582"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=35582"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}