{"id":101817,"date":"2021-10-27T16:23:35","date_gmt":"2021-10-27T14:23:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https"},"modified":"2021-10-27T16:23:35","modified_gmt":"2021-10-27T14:23:37","slug":"kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https","title":{"rendered":"Kompania Intel po zhvillon protokollin HTTPA, i cili plot\u00ebson HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Inxhinier\u00ebt nga kompania Intel propozuan nj\u00eb protokoll t\u00eb ri HTTPA (HTTPS Attestable), q\u00eb zgjerohet HTTPS me garanci shtes\u00eb t\u00eb siguris\u00eb p\u00ebr llogaritjet e kryera. HTTPA garanton integritetin e p\u00ebrpunimit t\u00eb k\u00ebrkes\u00ebs s\u00eb p\u00ebrdoruesit n\u00eb server dhe siguron q\u00eb sh\u00ebrbimi web \u00ebsht\u00eb i besuesh\u00ebm dhe q\u00eb kodi q\u00eb funksionon n\u00eb mjedisin TEE (Trusted Execution Environment) n\u00eb server nuk \u00ebsht\u00eb ndryshuar p\u00ebr shkak t\u00eb nd\u00ebrhyrjeve ose sabotazhit nga administratori. <\/p>\n
HTTPS mbron t\u00eb dh\u00ebnat q\u00eb transmetohen gjat\u00eb kalimit n\u00eb rrjet, por nuk mund t\u00eb p\u00ebrjashtoj\u00eb shkeljen e integritetit t\u00eb tyre p\u00ebr shkak t\u00eb sulmeve ndaj serverit. Enklavat izoluese, t\u00eb krijuara me teknologji si Intel SGX (Software Guard Extension), ARM TrustZone dhe AMD PSP (Platform Security Processor), ofrojn\u00eb mund\u00ebsi p\u00ebr t\u00eb mbrojtur llogaritjet e r\u00ebnd\u00ebsishme dhe p\u00ebr t\u00eb zvog\u00ebluar rrezikun e rrjedhjeve ose ndryshimeve t\u00eb informacionit konfidencial n\u00eb pik\u00ebn p\u00ebrfundimtare. <\/p>\n
HTTPA, p\u00ebr t\u00eb garantuar besueshm\u00ebrin\u00eb e informacionit t\u00eb d\u00ebrguar, lejon shfryt\u00ebzimin e mjeteve t\u00eb atestimit t\u00eb ofruara n\u00eb Intel SGX, t\u00eb cilat konfirmojn\u00eb autentikimin e enklav\u00ebs ku jan\u00eb kryer llogaritjet. N\u00eb thelb HTTPA zgjerohet mbi HTTPS me mund\u00ebsin\u00eb e atestimit t\u00eb larg\u00ebt t\u00eb enklav\u00ebs dhe lejon t\u00eb verifikohet se ajo funksionon n\u00eb nj\u00eb mjedis t\u00eb v\u00ebrtet\u00eb Intel SGX dhe sh\u00ebrbimi web \u00ebsht\u00eb i besuesh\u00ebm. Protokolli zhvillohet fillimisht si universale dhe p\u00ebrve\u00e7 Intel SGX mund t\u00eb implementohet edhe p\u00ebr sisteme t\u00eb tjera TEE.
<\/center> <\/p>\n
P\u00ebrve\u00e7 procesit standard t\u00eb HTTPS p\u00ebr krijimin e nj\u00eb lidhjeje t\u00eb sigurt, HTTPA k\u00ebrkon gjithashtu t\u00eb miratoj\u00eb nj\u00eb \u00e7el\u00ebs seancash t\u00eb besuesh\u00ebm. Protokolli sjell nj\u00eb metod\u00eb t\u00eb re HTTP 'ATTEST', e cila lejon p\u00ebrpunimin e tri llojeve t\u00eb k\u00ebrkesave dhe p\u00ebrgjigjeve: <\/p>\n
\n
'preflight' p\u00ebr t\u00eb verifikuar n\u00ebse pala e larg\u00ebt mb\u00ebshtet atestimin e enklavave;\n
'attest' p\u00ebr t\u00eb miratuar parametrat e atestimit (zgjedhja e algoritmit kriptografik, shk\u00ebmbimi i sekuencave rast\u00ebsore unike p\u00ebr seanc\u00ebn, gjenerimi i identifikuesit t\u00eb seanc\u00ebs dhe transferimi i \u00e7el\u00ebsit publik t\u00eb enklav\u00ebs te klienti);\n
![\"Kompania](\"\/wp-content\/uploads\/2021\/10\/c53a2701095cfb8166a4b25d4f97c772.jpg\")
<\/center> <\/p>\n![\"Kompania](\"\/wp-content\/uploads\/2021\/10\/ea155f297e7858015a5589e5989afe38.jpg\")
<\/center> <\/p>\n