Vagadziri veChromium chirongwa akaita shanduko, iyo inoisa hupenyu hwepamusoro hwezvitupa zveTLS kumazuva makumi matatu nemakumi matatu nemasere (mwedzi gumi nematatu).

Mamiriro acho anoshanda kune ese eruzhinji server zvitupa zvakapihwa mushure meGunyana 1, 2020. Kana chitupa chisingaenderane nemutemo uyu, bhurawuza inochiramba sechisina basa uye chakanangana nekupindura chikanganiso ERR_CERT_VALIDITY_TOO_LONG.

Kune zvitupa zvakagamuchirwa pamberi paGunyana 1, 2020, kuvimba kuchachengetwa uye akaganhurirwa kumazuva 825 (2,2 makore), sezvanhasi.

Pakutanga, vagadziri veFirefox neSafari browser vakaunza zvirambidzo pahupamhi hwehupenyu hwezvitupa. Chinja futi inotanga kushanda musi waSeptember 1.

Izvi zvinoreva kuti mawebhusaiti anoshandisa hupenyu hwakareba SSL/TLS zvitupa zvakaburitswa mushure meiyo cutoff point inokanda zvikanganiso zvekuvanzika mumabhurawuza.

Apple yaive yekutanga kuzivisa mutemo mutsva pamusangano weCA/Browser forum muna Kukadzi 2020. Pakuunza mutemo mutsva, Apple yakavimbisa kuishandisa kune ese iOS uye macOS zvishandiso. Izvi zvinoisa kumanikidza kune vatariri vewebhusaiti uye vanogadzira kuti vaone kuti zvitupa zvavo zvinoenderana.

Kupfupisa hupenyu hwezvitupa kwakakurukurwa kwemwedzi neApple, Google, nedzimwe nhengo dzeCA/Browser. Iyi mutemo ine zvayakanakira nezvayakaipira.

Chinangwa chekufambisa uku ndechekuvandudza kuchengetedzwa kwewebhusaiti nekuona kuti vanogadzira vanoshandisa zvitupa neazvino cryptographic mwero, uye kuderedza huwandu hwekare, zvitupa zvakakanganwika zvinogona kubiwa uye kushandiswa zvakare mukubira uye kwakashata drive-nekurwiswa. Kana vanorwisa vakakwanisa kutyora cryptography muSSL/TLS chiyero, zvitupa zvenguva pfupi zvinova nechokwadi chekuti vanhu vanochinjira kuzvitupa zvakachengeteka mukati megore.

Kupfupisa nguva yechokwadi yezvitupa kune zvimwe zvazvakaipira. Izvo zvakacherechedzwa kuti nekuwedzera kuwanda kwekutsiva zvitupa, Apple nemamwe makambani ari kuitawo kuti hupenyu hunyanye kuoma kune varidzi vesaiti nemakambani anofanirwa kubata zvitupa uye kutevedzera.

Kune rimwe divi, Ngatinyorei uye zvimwe zviremera zvechitupa zvinokurudzira mawebhusaiti kuti aite otomatiki maitiro ekugadzirisa zvitupa. Izvi zvinoderedza pamusoro pemunhu uye njodzi yekukanganisa sezvo kuwanda kwekutsiviwa kwechitupa kunowedzera.

Sezvaunoziva, Let's Encrypt nyaya dzemahara HTTPS zvitupa zvinopera mushure memazuva makumi mapfumbamwe uye zvinopa maturusi ekugadzirisa otomatiki. Saka ikozvino zvitupa izvi zvinotokwana zvirinani mune zvese zvivakwa sezvo mabhurawuza anoisa yakanyanya kurongeka miganho.

Shanduko iyi yakavhoterwa nenhengo dzeCA/Browser Forum, asi sarudzo haina kubvumidzwa nekuda kwekusawirirana kwevakuru vezvitupa.

Mhinduro

Chitupa Chinopa Kuvhota

Kwe (11 mavhoti): Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (yaimbova Comodo CA), eMudhra, Kamu SM, Let's Encrypt, Logius, PKIoverheid, SHECA, SSL.com

Kurwisana (20): Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (yaimbova Trustwave)

Kurambidzwa (2): HARICA, TurkTrust

Kuvhota kwevatengi vezvitupa

Zve(7): Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360

Kupesana: 0

Abstained: 0

Mabhurawuza zvino anosimbisa mutemo uyu pasina mvumo yezvitupa zvitupa.

Source: www.habr.com