{"id":183672,"date":"2026-10-07T22:54:13","date_gmt":"2026-10-07T20:54:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/komprometacziya-registratorov-3-domennyh-zon-pozvolila-poluchit-tls-sertifikaty-k-servisam-google"},"modified":"2026-10-07T22:54:20","modified_gmt":"2026-10-07T20:54:20","slug":"compromise-of-registrars-for-three-domain-zones-enabled-tls-certificate-issuance-for-google-services","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/compromise-of-registrars-for-three-domain-zones-enabled-tls-certificate-issuance-for-google-services","title":{"rendered":"Kompromitimi i regjistruesve t\u00eb 3 zonave t\u00eb domainit ka lejuar marrjen e certifikatave TLS p\u00ebr sh\u00ebrbimet e Google","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Google njoftoi p\u00ebr nj\u00eb incident, gjat\u00eb t\u00eb cilit sulmuesit arrit\u00ebn t\u00eb merrnin \u00e7ertifikata TLS p\u00ebr disa domene Google (si p.sh., google.as), sh\u00ebrbime online dhe kompani t\u00eb m\u00ebdha n\u00eb zonat «.gh», «.sl» dhe «.as». Sulmi u realizua p\u00ebrmes kompromitimit t\u00eb regjistruesve t\u00eb zonave komb\u00ebtare t\u00eb nivelit t\u00eb lart\u00eb t\u00eb domeneve \u2014 «.gh» (Ghana), «.sl» (Sierra Leone) dhe «.as» (Samoa Amerikane), \u00e7ka lejoi z\u00ebvend\u00ebsimin e server\u00ebve DNS p\u00ebr domenet n\u00eb k\u00ebto zona dhe ridrejtp\u00ebrdorimin e k\u00ebrkesave n\u00eb server\u00ebt e sulmuesve. Duke ridrejtuar trafikun, sulmuesit arrit\u00ebn t\u00eb konfirmonin pron\u00ebsin\u00eb e domeneve dhe t\u00eb merrnin \u00e7ertifikata TLS, pasi pas ndryshimit t\u00eb t\u00eb dh\u00ebnave n\u00eb DNS, k\u00ebrkesat verifikuese nga autoritetet \u00e7ertifikuese u d\u00ebrguan jo n\u00eb hostet reale, por n\u00eb ato t\u00eb falsifikuara dhe u p\u00ebrpunuan atje. <\/p>\n

Marrja e paautorizuar e certifikatave u identifikua si rezultat i analiz\u00ebs s\u00eb regjistrave t\u00eb Transparency t\u00eb Certifikat\u00ebs, n\u00eb t\u00eb cilat autoritetet e certifikimit pasqyrojn\u00eb t\u00eb gjitha certifikatat e l\u00ebshuara dhe t\u00eb t\u00ebrhequra. Kompania Google bllokoi certifikatat ilegale t\u00eb marra gjat\u00eb sulmit me ndihm\u00ebn e mekanizmit CRLSets n\u00eb shfletuesin Chrome, si dhe arriti t\u00eb detyroj\u00eb t\u00ebrheqjen e k\u00ebtyre certifikatave nga autoritetet e certifikimit. Deri tani nuk \u00ebsht\u00eb zbuluar p\u00ebr cilat domene specifike jan\u00eb l\u00ebshuar certifikatat mashtruese dhe cilat kompani jan\u00eb ndikuar nga sulmi. <\/p>\n

P\u00ebr t\u00eb minimizuar rrezikun nga p\u00ebrs\u00ebritja e incidenteve t\u00eb tilla, pronar\u00ebve t\u00eb domeve u rekomandohet t\u00eb organizojn\u00eb monitorimin e vazhduar t\u00eb regjistrave publik\u00eb CT (Transparency e Certifikatave) p\u00ebr identifikimin e l\u00ebshimeve t\u00eb certifikatave paautorizuara. N\u00eb DNS, rekomandohet t\u00eb shtohen regjistrat CAA (Authorization e Autoritetit t\u00eb Certifikat\u00ebs), q\u00eb p\u00ebrcaktojn\u00eb list\u00ebn e autoriteteve t\u00eb certifikimit q\u00eb kan\u00eb leje p\u00ebr t\u00eb l\u00ebshuar certifikata p\u00ebr domenin e caktuar. Vendosja e regjistrit CAA n\u00eb DNS nuk do t\u00eb mbroj\u00eb nga k\u00ebrkesa p\u00ebr certifikat\u00ebn pas manipulimit t\u00eb DNS, por pas rikthimit t\u00eb kontrollit mbi DNS do t\u00eb parandaloj\u00eb l\u00ebshimin e p\u00ebrs\u00ebritur t\u00eb certifikatave nga keqb\u00ebr\u00ebsit, duke p\u00ebrdorur t\u00eb dh\u00ebnat e keqcache-uar p\u00ebr verifikimin e pron\u00ebsis\u00eb s\u00eb domain-it.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 Google (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, google.as), \u043e\u043d\u043b\u0430\u0439\u043d-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0437\u043e\u043d\u0430\u0445 «.gh», «.sl» \u0438 «.as». \u0410\u0442\u0430\u043a\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0437\u043e\u043d \u0432\u0435\u0440\u0445\u043d\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f — «.gh» (\u0413\u0430\u043d\u0430), «.sl» (\u0421\u044c\u0435\u0440\u0440\u0430-\u041b\u0435\u043e\u043d\u0435) \u0438 «.as» (\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0421\u0430\u043c\u043e\u0430), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0432 \u044d\u0442\u0438\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183672","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Komprometimi i regjistrator\u00ebve t\u00eb 3 zonave t\u00eb domenit lejoj q\u00eb t\u00eb merren certifikata TLS p\u00ebr sh\u00ebrbimet e Google | ProHoster","description":"Kompania Google njoftoi p\u00ebr nj\u00eb incident ku sulmuesit arrit\u00ebn t\u00eb merrnin certifikata TLS p\u00ebr disa domene t\u00eb Google (p.sh., google.as), sh\u00ebrbime online dhe kompani t\u00eb m\u00ebdha n\u00eb zonat \".gh\", \".sl\".","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/compromise-of-registrars-for-three-domain-zones-enabled-tls-certificate-issuance-for-google-services","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 3 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0437\u043e\u043d \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Google | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0434\u043b\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 Google (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, google.as), \u043e\u043d\u043b\u0430\u0439\u043d-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0437\u043e\u043d\u0430\u0445 ".gh", ".sl" \u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/compromise-of-registrars-for-three-domain-zones-enabled-tls-certificate-issuance-for-google-services","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-07T20:54:13+00:00","article:modified_time":"2026-10-07T20:54:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/183672","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=183672"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/183672\/revisions"}],"predecessor-version":[{"id":183673,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/183672\/revisions\/183673"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=183672"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=183672"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=183672"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}