Aan Encrypt, oo ah hay'ad aan faa'iido doon ahayn oo ay maamusho bulshada oo siisa shahaadooyin bilaash ah qof kasta, ayaa bilowday inay bixiso shahaadooyin bilaash ah oo loogu talagalay cinwaanada IP-ga waxayna sidoo kale ka dhigtay shahaadooyinka TLS kuwo la heli karo cimri xaddidan oo ah 160 saacadood (6 maalmood). Maajo 13, waxay qorsheynayaan inay ku daraan taageero loogu talagalay bixinta shahaadooyinka ikhtiyaariga ah oo ansax ah muddo 45 maalmood ah. Sida waafaqsan qorshaha hore loo shaaciyay, ansaxnimada ugu badan ee shahaadada waxaa laga dhimi doonaa 90 ilaa 64 maalmood Febraayo 10, 2027, iyo 45 maalmood Febraayo 16, 2028.
Laga bilaabo maanta, shahaadooyinka cinwaanada IP-ga waxaa la bixiyaa muddo 6 maalmood ah waxayna kuu oggolaanayaan inaad martigeliyaasha u dejiso marin sir ah oo ammaan ah, ma aha oo kaliya marka aad isticmaaleyso magacyada domainka, laakiin sidoo kale marka aad si toos ah u galayso iyada oo loo marayo Ciwaanka IP-gaHelitaanka la ilaaliyo ee server-ka shabakadda Helitaanka cinwaanka IP-ga waxay noqon kartaa mid waxtar leh marka lala falgalo aaladaha guriga; inta lagu jiro dejinta bilowga ah ama tijaabinta server-yada cusub; abaabulka isku xirka qarsoon ee u dhexeeya gadaal-gadaal ee kaabayaasha gudaha; abuurista bogag adag oo la soo bandhigo marka IP-ga la galo; marka la hawlgelinayo server-yada shaqsiga ah; si loogu abaabulo marin u helka server-yada DoH (DNS oo ka badan HTTPS) si toos ah IP-ga.
Shahaadooyinka Domain-ka oo leh muddo ansax ah oo 6 maalmood ah ayaa loo isticmaali karaa in lagu xoojiyo amniga kaabayaasha dhaqaalaha. Haddii ay dhacdo in shahaado daadanayso iyada oo aan la ogaan natiijada jabsiga, shahaadooyinka muddada gaaban waxay ka hor istaagi doonaan weeraryahannada inay la socdaan taraafikada dhibbanaha muddo dheer ama ay shahaadooyinka u isticmaalaan si ay u sameeyaan phishing.
Si aad u codsato shahaado muddo gaaban ah oo loogu talagalay domain ama shahaado loogu talagalay cinwaanka IP, macmiilka ACME waa inuu taageeraa kordhinta borotokoolka ee hirgelinta profiles-ka, iyo sidoo kale profile-ka "muddo gaaban". Kaliya hababka http-01 iyo tls-alpn-01 ayaa loo isticmaali karaa si loo xaqiijiyo lahaanshaha cinwaanka IP-ga (habka dns-01 waa mamnuuc).
Source: opennet.ru
