{"id":101081,"date":"2021-08-24T10:22:37","date_gmt":"2021-08-24T08:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1"},"modified":"2021-08-24T10:22:37","modified_gmt":"2021-08-24T08:22:37","slug":"repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","title":{"rendered":"Repovitori NPM ndalon mb\u00ebshtetje p\u00ebr TLS 1.0 dhe 1.1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania GitHub vendosi t\u00eb nd\u00ebrpres\u00eb mb\u00ebshtetje p\u00ebr protokollet TLS 1.0 dhe 1.1 n\u00eb depozitat e paketave NPM dhe n\u00eb t\u00eb gjitha faqet e lidhura me menaxherin e paketave NPM, duke p\u00ebrfshir\u00eb npmjs.com. Nga 4 tetori, p\u00ebr t'u lidhur me depozit\u00ebn, duke p\u00ebrfshir\u00eb instalimin e paketave, do t\u00eb k\u00ebrkohet nj\u00eb klient q\u00eb mb\u00ebshtet t\u00eb pakt\u00ebn TLS 1.2. N\u00eb vet\u00eb GitHub mb\u00ebshtetja p\u00ebr TLS 1.0\/1.1 u nd\u00ebrpre q\u00eb n\u00eb shkurt 2018. Motivimi p\u00ebr k\u00ebt\u00eb \u00ebsht\u00eb shqet\u00ebsimi p\u00ebr sigurin\u00eb e sh\u00ebrbimeve dhe privat\u00ebsin\u00eb e t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve. Sipas t\u00eb dh\u00ebnave nga GitHub, rreth 99% e k\u00ebrkesave p\u00ebr depozit\u00ebn NPM tashm\u00eb b\u00ebhen duke p\u00ebrdorur TLS 1.2 ose 1.3, dhe Node.js p\u00ebrfshin mb\u00ebshtetje p\u00ebr TLS 1.2 q\u00eb nga viti 2013 (duke filluar nga versioni 0.10), prandaj ndryshimi do t\u00eb prek\u00eb vet\u00ebm nj\u00eb pjes\u00eb t\u00eb vog\u00ebl t\u00eb p\u00ebrdoruesve. <\/p>\n

Kujtojm\u00eb se protokollet TLS 1.0 dhe 1.1 jan\u00eb shpallur zyrtarisht nga komiteti IETF (Internet Engineering Task Force) si teknologji t\u00eb vjetruara. Specifikimi TLS 1.0 u publikua n\u00eb janar 1999. Shtat\u00eb vjet m\u00eb von\u00eb u l\u00ebshua nj\u00eb p\u00ebrdit\u00ebsim TLS 1.1 me p\u00ebrmir\u00ebsime t\u00eb siguris\u00eb q\u00eb lidhen me gjenerimin e vektor\u00ebve t\u00eb inicializimit dhe mbushjes. Disa nga problemet kryesore t\u00eb TLS 1.0\/1.1 p\u00ebrmenden mungesa e mb\u00ebshtetjes p\u00ebr algoritme moderne t\u00eb kodimit (si ECDHE dhe AEAD) dhe k\u00ebrkesa n\u00eb specifikim p\u00ebr mb\u00ebshtetje t\u00eb algoritmeve t\u00eb vjetra, t\u00eb cilat n\u00eb faz\u00ebn moderne t\u00eb zhvillimit t\u00eb teknologjis\u00eb informacionit jan\u00eb v\u00ebn\u00eb n\u00eb pik\u00ebpyetje (p.sh., k\u00ebrkohet mb\u00ebshtetje p\u00ebr TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA, p\u00ebr verifikimin e integritetit dhe autentikimit p\u00ebrdoret MD5 dhe SHA-1). Mb\u00ebshtetja p\u00ebr algoritme t\u00eb vjetruara tashm\u00eb ka \u00e7uar n\u00eb shfaqjen e sulmeve si ROBOT, DROWN, BEAST, Logjam dhe FREAK. Megjithat\u00eb, k\u00ebto probleme nuk ishin vulnerabilitete t\u00eb drejtp\u00ebrdrejta t\u00eb protokollit dhe u adresuan n\u00eb nivelin e implementimeve t\u00eb tij. N\u00eb vet\u00eb protokollet TLS 1.0\/1.1 nuk ka vulnerabilitete kritike q\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb kryer sulme praktike.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c TLS 1.2. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c GitHub \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 TLS 1.0\/1.1 \u0431\u044b\u043b\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101081","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Depozita NPM nd\u00ebrpret mb\u00ebshtetje p\u00ebr TLS 1.0 dhe 1.1 | ProHoster","description":"Kompania GitHub vendosi t\u00eb nd\u00ebrpres\u00eb mb\u00ebshtetje p\u00ebr protokollet TLS 1.0 dhe 1.1 n\u00eb depozitat e paketave NPM dhe n\u00eb t\u00eb gjitha faqet e lidhura me menaxherin e paketave NPM, duke p\u00ebrfshir\u00eb npmjs.com. Nga 4 tetori, p\u00ebr t'u lidhur me depozit\u00ebn, duke p\u00ebrfshir\u00eb instalimin e paketave, do t\u00eb k\u00ebrkohet nj\u00eb klient q\u00eb mb\u00ebshtet t\u00eb pakt\u00ebn TLS 1.2. N\u00eb vet\u00eb GitHub mb\u00ebshtetja p\u00ebr TLS 1.0\/1.1 u nd\u00ebrpre","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 NPM \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0430\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 TLS 1.0 \u0438 1.1 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS 1.0 \u0438 1.1 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 NPM \u0438 \u043d\u0430 \u0432\u0441\u0435\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u043c \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u043e\u043c NPM, \u0432\u043a\u043b\u044e\u0447\u0430\u044f npmjs.com. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 4 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044e, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c TLS 1.2. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c GitHub \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 TLS 1.0\/1.1 \u0431\u044b\u043b\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/repozitorij-npm-prekrashhaet-podderzhku-tls-1-0-i-1-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-24T08:22:37+00:00","article:modified_time":"2021-08-24T08:22:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101081","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-24 08:54:06","updated":"2022-10-04 00:49:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101081","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=101081"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101081\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=101081"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=101081"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=101081"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}