Kompania GitHub ka vendosur t\u00eb nd\u00ebrpres\u00eb mb\u00ebshtetje p\u00ebr protokollet TLS 1.0 dhe 1.1 n\u00eb depozit\u00ebn e paketave NPM dhe n\u00eb t\u00eb gjitha faqet e lidhura me menaxherin e paketave NPM, p\u00ebrfshir\u00eb npmjs.com. Duke filluar nga 4 tetori, p\u00ebr t'u lidhur me depozit\u00ebn, p\u00ebrfshir\u00eb instalimin e pakove, do t\u00eb nevojitet nj\u00eb klient q\u00eb mb\u00ebshtet s\u00eb paku TLS 1.2. N\u00eb vet\u00eb GitHub mb\u00ebshtetja p\u00ebr TLS 1.0\/1.1 u nd\u00ebrpre q\u00eb n\u00eb shkurt 2018. Si motivim p\u00ebr k\u00ebt\u00eb vendim p\u00ebrmendet sigurimi i sh\u00ebrbimeve t\u00eb saj dhe privat\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve. Sipas GitHub-it, rreth 99% e k\u00ebrkesave ndaj depozit\u00ebs NPM tashm\u00eb realizohen duke p\u00ebrdorur TLS 1.2 ose 1.3, nd\u00ebrsa Node.js ka p\u00ebrfshir\u00eb mb\u00ebshtetje p\u00ebr TLS 1.2 q\u00eb nga viti 2013 (duke filluar nga l\u00ebshimi 0.10), k\u00ebshtu q\u00eb ndryshimi do t\u00eb prek\u00eb vet\u00ebm nj\u00eb pjes\u00eb t\u00eb vog\u00ebl t\u00eb p\u00ebrdoruesve. <\/p>\n
Kujtojm\u00eb se protokollet TLS 1.0 dhe 1.1 jan\u00eb shpallur zyrtarisht nga komiteti IETF (Internet Engineering Task Force) si teknologji t\u00eb vjetra. Specifikimi TLS 1.0 u publikua n\u00eb janar 1999. Shtat\u00eb vjet m\u00eb von\u00eb u l\u00ebshua nj\u00eb p\u00ebrdit\u00ebsim TLS 1.1 me p\u00ebrmir\u00ebsime n\u00eb siguri q\u00eb lidhen me krijimin e vektor\u00ebve t\u00eb inicializimit dhe mbushjes. Nd\u00ebr problemet kryesore t\u00eb TLS 1.0\/1.1, p\u00ebrmendet mungesa e mb\u00ebshtetjes p\u00ebr algoritmet moderne (p\u00ebr shembull, ECDHE dhe AEAD) dhe k\u00ebrkesa n\u00eb specifikim p\u00ebr mb\u00ebshtetje t\u00eb algoritmeve t\u00eb vjetra, t\u00eb cilat aktualisht jan\u00eb t\u00eb dyshimta n\u00eb besueshm\u00ebrin\u00eb e tyre (p\u00ebr shembull, k\u00ebrkohet mb\u00ebshtetje p\u00ebr TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, p\u00ebr verifikimin e integritetit dhe autentifikimin p\u00ebrdoret MD5 dhe SHA-1). Mb\u00ebshtetja e algoritmeve t\u00eb vjetra ka sjell\u00eb tashm\u00eb sulme t\u00eb tilla si ROBOT, DROWN, BEAST, Logjam dhe FREAK. Megjithat\u00eb, k\u00ebto probleme nuk ishin drejtp\u00ebrdrejt vulnerabilitete t\u00eb protokollit dhe mbylleshin n\u00eb nivelin e implementimeve t\u00eb tij. N\u00eb protokollet vet\u00eb TLS 1.0\/1.1 nuk ka vulnerabilitete kritike q\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr realizimin e sulmeve praktike. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c TLS 1.2. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c GitHub \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 TLS 1.0\/1.1 \u0431\u044b\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101081","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Depozita NPM nd\u00ebrpret mb\u00ebshtetje p\u00ebr TLS 1.0 dhe 1.1 | ProHoster","description":"Kompania GitHub ka vendosur t\u00eb nd\u00ebrpres\u00eb mb\u00ebshtetje p\u00ebr protokollet TLS 1.0 dhe 1.1 n\u00eb depozit\u00ebn e paketave NPM dhe n\u00eb t\u00eb gjitha faqet e lidhura me menaxherin e paketave NPM, p\u00ebrfshir\u00eb npmjs.com.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 NPM \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 TLS 1.0 \u0438 1.1 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-24T08:22:37+00:00","article:modified_time":"2021-08-24T08:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101081","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-24 08:54:06","updated":"2022-10-04 00:49:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101081","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=101081"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101081\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=101081"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=101081"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=101081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"