{"id":55146,"date":"2020-01-13T00:00:00","date_gmt":"2020-01-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov"},"modified":"2020-02-18T14:03:13","modified_gmt":"2020-02-18T11:03:13","slug":"mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","title":{"rendered":"Mozilla implementon CRLite p\u00ebr verifikimin e certifikatave TLS problematike","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Mozilla njoftoi<\/a><\/noindex> \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 — CRLite<\/a><\/noindex>. CRLite mund\u00ebson organizimin e nj\u00eb verifikimi efektiv t\u00eb t\u00ebrheqjes s\u00eb certifikatave p\u00ebrmes nj\u00eb baze t\u00eb dh\u00ebnash t\u00eb vendosur n\u00eb sistemin e p\u00ebrdoruesit. Implementimi i CRLite q\u00eb zhvillohet n\u00eb Mozilla publikuar<\/a><\/noindex> n\u00ebn licenc\u00ebn e lir\u00eb MPL 2.0. Kodi p\u00ebr gjenerimin e DB dhe komponent\u00ebt server i \u00ebsht\u00eb shkruar n\u00eb Python<\/a><\/noindex> dhe Go. Pjes\u00ebt klientike t\u00eb shtuar n\u00eb Firefox p\u00ebr t\u00eb lexuar t\u00eb dh\u00ebnat nga DB jan\u00eb p\u00ebrgatitur<\/a><\/noindex> n\u00eb gjuh\u00ebn Rust.<\/p>\n

Verifikimi i certifikatave i aplikuar deri tani duke p\u00ebrfshir\u00eb sh\u00ebrbime t\u00eb jashtme mbi baz\u00ebn e protokollit OCSP<\/a><\/noindex> (Protokolli i Statusit t\u00eb Certifikatave n\u00eb Rrjet) k\u00ebrkon akses t\u00eb garantuar n\u00eb rrjet, \u00e7on n\u00eb vonesa t\u00eb ndjeshme n\u00eb p\u00ebrpunimin e k\u00ebrkes\u00ebs (n\u00eb mesatare 350ms) dhe ka probleme me sigurin\u00eb e privat\u00ebsis\u00eb (server\u00ebt q\u00eb p\u00ebrgjigjen n\u00eb k\u00ebrkesa OCSP marrin informata mbi certifikatat specifike, nga t\u00eb cilat mund t\u00eb gjykohet se cilat faqe po viziton p\u00ebrdoruesi). Ka gjithashtu mund\u00ebsi verifikimi lokal p\u00ebrmes listave CRL<\/a><\/noindex> (Certificate Revocation List), \u043d\u043e \u043c\u0438\u043d\u0443\u0441\u043e\u043c \u0442\u0430\u043a\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0430\u0437\u043c\u0435\u0440 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 — \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0411\u0414 \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 300 \u041c\u0411 \u0438 \u0435\u0451 \u0440\u043e\u0441\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.<\/p>\n

P\u00ebr bllokimin e certifikatave t\u00eb komprometuara dhe t\u00ebrhequra nga autoritetet e certifikimit, Firefox p\u00ebrdor q\u00eb nga viti 2015 nj\u00eb list\u00eb qendrore t\u00eb zez\u00eb OneCRL<\/a><\/noindex> bashk\u00eb me aksesin n\u00eb sh\u00ebrbimin Google Safe Browsing<\/a><\/noindex> p\u00ebr t\u00eb p\u00ebrcaktuar aktivitetin e mundsh\u00ebm t\u00eb d\u00ebmsh\u00ebm. OneCRL, si dhe CRLSets<\/a><\/noindex> n\u00eb Chrome, sh\u00ebrben si nj\u00eb lidhje nd\u00ebrmjet\u00ebse e cila grumbullon listat CRL nga autoritetet e certifikimit dhe ofron nj\u00eb sh\u00ebrbim OCSP qendror p\u00ebr verifikimin e certifikatave t\u00eb t\u00ebrhequra, duke ofruar mund\u00ebsin\u00eb q\u00eb t\u00eb mos d\u00ebrgohen k\u00ebrkesa drejtp\u00ebrdrejt tek autoritetet e certifikimit. Megjith\u00ebse \u00ebsht\u00eb b\u00ebr\u00eb nj\u00eb pun\u00eb e konsiderueshme p\u00ebr t\u00eb rritur besueshm\u00ebrin\u00eb e sh\u00ebrbimit online t\u00eb verifikimit t\u00eb certifikatave, t\u00eb dh\u00ebnat e telemetris\u00eb tregojn\u00eb se m\u00eb shum\u00eb se 7% e k\u00ebrkesave OCSP p\u00ebrfundojn\u00eb me skadimin e afatit (k\u00ebt\u00eb tregues disa vjet m\u00eb par\u00eb ishte 15%). <\/p>\n

\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 OCSP, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c. \u0421\u0435\u0440\u0432\u0438\u0441 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043a\u0430\u043a \u0438\u0437-\u0437\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445, \u0442\u0430\u043a \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 — \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 OCSP \u0432 \u0445\u043e\u0434\u0435 MITM-\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u0427\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 Must-Staple<\/a><\/noindex>, e cila lejon q\u00eb gabimi n\u00eb k\u00ebrkes\u00ebn p\u00ebr OCSP ose pamund\u00ebsia p\u00ebr qasje n\u00eb OCSP t\u00eb interpretohet si nj\u00eb problem me certifikat\u00ebn, por kjo mund\u00ebsi \u00ebsht\u00eb opsionale dhe k\u00ebrkon nj\u00eb formatizim t\u00eb ve\u00e7ant\u00eb t\u00eb certifikat\u00ebs. <\/p>\n

CRLite lejon mund\u00ebsi p\u00ebr t\u00eb grumbulluar t\u00eb dh\u00ebna t\u00eb plota p\u00ebr t\u00eb gjitha certifikatat e t\u00ebrhequra n\u00eb nj\u00eb struktur\u00eb q\u00eb mund t\u00eb p\u00ebrdit\u00ebsohet leht\u00ebsisht, me nj\u00eb madh\u00ebsi prej vet\u00ebm 1 MB, duke ofruar mund\u00ebsin\u00eb p\u00ebr t\u00eb ruajtur nj\u00eb baz\u00eb t\u00eb plot\u00eb CRL n\u00eb an\u00ebn e klientit.
\nShfletuesi do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb sinkronizoj\u00eb p\u00ebrditshm\u00ebrish kopjen e tij t\u00eb t\u00eb dh\u00ebnave mbi certifikatat e t\u00ebrhequra, dhe kjo baz\u00eb t\u00eb dh\u00ebnash do t\u00eb jet\u00eb e aksesueshme n\u00ebn \u00e7do rrethana. <\/p>\n

CRLite bashkon t\u00eb dh\u00ebnat nga Transparenca e Certifikatave<\/a><\/noindex>, regjistri publik i t\u00eb gjitha certifikatave t\u00eb l\u00ebshuara dhe t\u00ebrhequra, dhe rezultatet e skanimeve t\u00eb certifikatave n\u00eb internet (grupohen lista t\u00eb ndryshme CRL nga autoritetet e certifikimit dhe informacioni mbi t\u00eb gjitha certifikatat e njohura). T\u00eb dh\u00ebnat mblidhen duke p\u00ebrdorur struktur\u00eb kaskadike filtra Bloom<\/a><\/noindex>, nj\u00eb struktur\u00eb probabilistike q\u00eb lejon identifikimin e gabuar t\u00eb elementeve t\u00eb munguar, por p\u00ebrjashton humbjen e elementeve ekzistuese (dmth. me nj\u00eb probabilitet t\u00eb caktuar, mund t\u00eb ndodhin identifikime t\u00eb gabuara mbi certifikatat e sakta, por certifikatat e t\u00ebrhequra do t\u00eb identifikohen me siguri). <\/p>\n

P\u00ebr t\u00eb p\u00ebrjashtuar identifikimet e gabuara n\u00eb CRLite, jan\u00eb p\u00ebrfshir\u00eb nivele shtes\u00eb korrigjuese filtri. Pas gjenerimit t\u00eb struktur\u00ebs, b\u00ebhet nj\u00eb rishikim i t\u00eb gjitha t\u00eb dh\u00ebnave t\u00eb origjin\u00ebs dhe identifikimi i identifikimeve t\u00eb gabuara q\u00eb kan\u00eb ndodhur. Nga rezultatet e k\u00ebtij kontrolli krijohet nj\u00eb struktur\u00eb shtes\u00eb, e cila kaskad\u00eb vendoset mbi t\u00eb par\u00ebn dhe korrigjon identifikimet e gabuara q\u00eb kan\u00eb ndodhur. Operacioni p\u00ebrs\u00ebritet derisa identifikimet e gabuara gjat\u00eb kontrollit t\u00eb mos jen\u00eb plot\u00ebsisht t\u00eb eliminuara. N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebr t\u00eb mbuluar t\u00eb dh\u00ebnat e gjitha, \u00ebsht\u00eb e mjaftueshme t\u00eb krijohen 7-10 nivele. Duke qen\u00eb se gjendja e baz\u00ebs s\u00eb t\u00eb dh\u00ebnave p\u00ebr shkak t\u00eb sinkronizimit periodik vonon paksa nga gjendja aktuale e CRL, kontrolli i certifikatave t\u00eb reja, t\u00eb l\u00ebshuara pas p\u00ebrdit\u00ebsimit t\u00eb fundit t\u00eb baz\u00ebs s\u00eb t\u00eb dh\u00ebnave CRLite, b\u00ebhet p\u00ebrmes protokollit OCSP, duke p\u00ebrfshir\u00eb p\u00ebrdorimin e teknik\u00ebs OCSP Stapling<\/a><\/noindex> (p\u00ebrgjigja OCSP e verifikuar nga autoriteti i certifikimit d\u00ebrgohet nga serveri q\u00eb sh\u00ebrben faqen gjat\u00eb negociat\u00ebs s\u00eb lidhjes TLS).<\/p>\n

\"Mozilla<\/a><\/noindex><\/center><\/p>\n

Duke p\u00ebrdorur filtrat Bloom, e dh\u00ebna e muajit dhjetor nga WebPKI, q\u00eb mbulon 100 milion certifikata aktiv dhe 750 mij\u00eb certifikata t\u00ebrhequr, u mblodh n\u00eb nj\u00eb struktur\u00eb me madh\u00ebsi prej 1.3 MB. Procesi i gjenerimit t\u00eb struktur\u00ebs \u00ebsht\u00eb mjaft k\u00ebrkues p\u00ebr burime, por ai realizohet n\u00eb serverin e Mozilla-s dhe p\u00ebrdoruesit i ofrohet nj\u00eb p\u00ebrdit\u00ebsim i gatsh\u00ebm. P\u00ebr shembull, n\u00eb form\u00ebn binar, t\u00eb dh\u00ebnat e p\u00ebrdorura gjat\u00eb gjenerimit k\u00ebrkojn\u00eb rreth 16 GB memorie kur ruhen n\u00eb DB-n\u00eb Redis, nd\u00ebrsa n\u00eb form\u00ebn heksadecimale, daurimi i t\u00eb gjitha numrave t\u00eb seris\u00eb t\u00eb certifikatave z\u00eb rreth 6.7 GB. Procesi i agregimit t\u00eb t\u00eb gjitha certifikatave t\u00eb t\u00ebrhequra dhe aktive zgjat rreth 40 minuta, nd\u00ebrsa procesi i gjenerimit t\u00eb struktur\u00ebs t\u00eb paketuara mbi baz\u00ebn e filtrit Bloom k\u00ebrkon edhe 20 minuta.<\/p>\n

\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 Mozilla \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0411\u0414 CRLite \u0447\u0435\u0442\u044b\u0440\u0435 \u0440\u0430\u0437\u0430 \u0432 \u0434\u0435\u043d\u044c (\u043d\u0435 \u0432\u0441\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c). \u0413\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f delta-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 — \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 bsdiff4, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f delta-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0435\u043b\u0438\u0437\u043e\u0432, \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u0443\u044e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f CRLite \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043d\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438. \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0444\u043e\u0440\u043c\u0430\u0442 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043b\u0438\u0448\u043d\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u043e\u0451\u0432.<\/p>\n

CRLite aktualisht funksionon n\u00eb Firefox n\u00eb modalitet pasiv dhe p\u00ebrdoret paralelisht me OCSP p\u00ebr grumbullimin e statistikave mbi korrekt\u00ebsin\u00eb e funksionimit. CRLite mund t\u00eb kaloj\u00eb n\u00eb modalitetin e verifikimit t\u00eb par\u00eb; p\u00ebr k\u00ebt\u00eb, n\u00eb about:config duhet t\u00eb vendosni parametrin security.pki.crlite_mode = 2.<\/p>\n

\"Mozilla<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 — CRLite. CRLite \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u0432 Mozilla \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f CRLite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MPL 2.0. \u041a\u043e\u0434 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0411\u0414 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 Python \u0438 Go. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55146","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla implementon CRLite p\u00ebr t\u00eb verifikuar certificatat TLS problematike | ProHoster","description":"Kompania Mozilla shpalli fillimin e testimit n\u00eb nd\u00ebrtimet e nat\u00ebs t\u00eb Firefox.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55146","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:50:02","updated":"2022-10-10 06:24:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55146"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55146\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}