{"id":101817,"date":"2021-10-27T16:23:35","date_gmt":"2021-10-27T14:23:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https"},"modified":"2021-10-27T16:23:35","modified_gmt":"2021-10-27T14:23:37","slug":"kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kompaniya-intel-razvivaet-protokol-httpa-dopolnyayushhij-https","title":{"rendered":"Kompania Intel po zhvillon protokollin HTTPA, i cili plot\u00ebson HTTPS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Ingenier\u00ebt nga kompania Intel propozuan nj\u00eb protokoll t\u00eb ri HTTPA (HTTPS Attestable), i cili zgjeron HTTPS me garanci shtes\u00eb p\u00ebr sigurin\u00eb e llogaritjeve t\u00eb realizuara. HTTPA garanton integritetin e p\u00ebrpunimit t\u00eb k\u00ebrkes\u00ebs s\u00eb p\u00ebrdoruesit n\u00eb server dhe siguron se sh\u00ebrbimi n\u00eb internet \u00ebsht\u00eb i besuesh\u00ebm dhe se kodi q\u00eb punon n\u00eb nj\u00eb mjedis TEE (Trusted Execution Environment) n\u00eb server nuk \u00ebsht\u00eb ndryshuar p\u00ebr shkak t\u00eb nj\u00eb sulmi ose sabotazhi nga administratori. <\/p>\n
HTTPS mbron t\u00eb dh\u00ebnat e transmetuara gjat\u00eb kalimit p\u00ebrmes rrjetit, por nuk mund t\u00eb p\u00ebrjashtoj\u00eb shkeljen e integritetit t\u00eb tyre si rezultat i sulmeve ndaj serverit. Enklav\u00ebt e izoluara, q\u00eb krijohen me teknologji si Intel SGX (Software Guard Extension), ARM TrustZone dhe AMD PSP (Platform Security Processor), ofrojn\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb mbrojtur llogarit\u00eb e r\u00ebnd\u00ebsishme dhe p\u00ebr t\u00eb zvog\u00ebluar rrezikun e rrjedhjes ose ndryshimit t\u00eb informacionit t\u00eb ndjesh\u00ebm n\u00eb pik\u00ebn p\u00ebrfundimtare. <\/p>\n
HTTPA p\u00ebr t\u00eb garantuar sakt\u00ebsin\u00eb e informacionit t\u00eb kaluar lejon p\u00ebrdorimin e mjeteve t\u00eb vler\u00ebsimit t\u00eb siguruara n\u00eb Intel SGX, t\u00eb cilat konfirmojn\u00eb autentik\u00ebn e enklav\u00ebs n\u00eb t\u00eb cil\u00ebn kryhen llogaritjet. N\u00eb thelb, HTTPA zgjeron HTTPS me mund\u00ebsin\u00eb p\u00ebr vler\u00ebsim n\u00eb distanc\u00eb t\u00eb enklav\u00ebs dhe lejon konfirmimin q\u00eb po ekzekutohet n\u00eb nj\u00eb mjedis autentik Intel SGX, duke e b\u00ebr\u00eb sh\u00ebrbimin web t\u00eb besuesh\u00ebm. Protokolli fillimisht zhvillohet si nj\u00eb universale dhe p\u00ebrve\u00e7 Intel SGX mund t\u00eb implementohet edhe p\u00ebr sisteme t\u00eb tjera TEE.
<\/center> <\/p>\n
P\u00ebrve\u00e7 procesit standard t\u00eb krijimit t\u00eb nj\u00eb lidhjeje t\u00eb sigurt p\u00ebr HTTPS, HTTPA k\u00ebrkon gjithashtu nj\u00eb pajtim p\u00ebr \u00e7el\u00ebsin e sesionit q\u00eb meriton besim. Protokolli prezanton nj\u00eb metod\u00eb t\u00eb re HTTP t\u00eb quajtur \"ATTEST\", e cila lejon trajtimin e tre llojeve t\u00eb k\u00ebrkesave dhe p\u00ebrgjigjeve: <\/p>\n
\n
\"preflight\" p\u00ebr t\u00eb kontrolluar n\u00ebse pala e larg\u00ebt mb\u00ebshtet v\u00ebrtetimin e enklavave;\n
\"attest\" p\u00ebr t\u00eb r\u00ebn\u00eb dakord p\u00ebr parametrat e v\u00ebrtetimit (zgjedhja e algoritmit kriptografik, shk\u00ebmbimi i sekuencave t\u00eb rast\u00ebsishme unike p\u00ebr sesionin, gjenerimi i identifikuesit t\u00eb sesionit dhe d\u00ebrgimi i \u00e7el\u00ebsit publik t\u00eb enklav\u00ebs te klienti);\n
\"trusted session\" \u2014 formimi i nj\u00eb \u00e7el\u00ebsi sesioni p\u00ebr shk\u00ebmbimin e informacionit n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb besueshme. \u00c7el\u00ebsi i sesionit formohet mbi baz\u00ebn e nj\u00eb sekuence t\u00eb fsheht\u00eb paraprake (pre-session secret) q\u00eb \u00ebsht\u00eb formuar nga klienti duke p\u00ebrdorur at\u00eb q\u00eb mori nga serverit<\/a> TEE, dhe sekuencat rast\u00ebsore t\u00eb gjeneruara nga secila pal\u00eb. <\/ul>\n
![\"Kompania](\"\/wp-content\/uploads\/2021\/10\/c53a2701095cfb8166a4b25d4f97c772.jpg\")
<\/center> <\/p>\n![\"Kompania](\"\/wp-content\/uploads\/2021\/10\/ea155f297e7858015a5589e5989afe38.jpg\")
<\/center> <\/p>\n