{"id":55146,"date":"2020-01-13T00:00:00","date_gmt":"2020-01-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov"},"modified":"2020-02-18T14:03:13","modified_gmt":"2020-02-18T11:03:13","slug":"mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","title":{"rendered":"Mozilla implementon CRLite p\u00ebr verifikimin e certifikatave TLS problematike","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Mozilla njoftoi<\/a><\/noindex> n\u00eb fillim t\u00eb testimeve n\u00eb nd\u00ebrtimet nocturne t\u00eb Firefox p\u00ebr mekanizmin e ri t\u00eb p\u00ebrcaktimit t\u00eb certifikative t\u00eb t\u00ebrhequra \u2014 CRLite<\/a><\/noindex>. CRLite lejon organizimin e nj\u00eb verifikimi efektiv t\u00eb anulimit t\u00eb certifikatave p\u00ebrmes nj\u00eb baze t\u00eb dh\u00ebnash q\u00eb ruhet n\u00eb sistemin e p\u00ebrdoruesit. Nj\u00eb implementim i CRLite q\u00eb po zhvillohet n\u00eb Mozilla u publikua<\/a><\/noindex> n\u00ebn licenc\u00ebn e lir\u00eb MPL 2.0. Kodi p\u00ebr gjenerimin e DB dhe komponentet serverike jan\u00eb shkruar n\u00eb Python<\/a><\/noindex> dhe Go. Pjes\u00ebt klienti t\u00eb shtyra n\u00eb Firefox p\u00ebr t\u00eb lexuar t\u00eb dh\u00ebnat nga DB jan\u00eb p\u00ebrgatitur<\/a><\/noindex> jan\u00eb shkruar n\u00eb Rust.<\/p>\n

Verifikimi i certifikatave q\u00eb p\u00ebrdoret ende duke bashk\u00ebpunuar me sh\u00ebrbime t\u00eb jashtme mbi baz\u00ebn e protokollit OCSP<\/a><\/noindex> (Online Certificate Status Protocol) k\u00ebrkon qasje t\u00eb garantuar n\u00eb rrjet, sjell vonesa t\u00eb ndjeshme n\u00eb p\u00ebrpunimin e k\u00ebrkesave (mesatarisht 350ms) dhe ka probleme me ruajtjen e privat\u00ebsis\u00eb (server\u00ebt q\u00eb p\u00ebrgjigjen n\u00eb k\u00ebrkesat OCSP marrin informacione rreth certifikatave specifike, nga t\u00eb cilat mund t\u00eb gjykohet se cilat faqe po viziton p\u00ebrdoruesi). Ka gjithashtu mund\u00ebsin\u00eb e verifikimit lokal p\u00ebrmes listave CRL<\/a><\/noindex> (Lista e T\u00ebrheqjes s\u00eb Certifikatave), por disavantazhi i k\u00ebtij metodi \u00ebsht\u00eb madh\u00ebsia shum\u00eb e madhe e t\u00eb dh\u00ebnave q\u00eb ngarkohen \u2014 aktualisht, baza e t\u00eb dh\u00ebnave t\u00eb certifikatave t\u00eb t\u00ebrhequra z\u00eb rreth 300 MB dhe rritja e saj vazhdon.<\/p>\n

P\u00ebr t\u00eb bllokuar certifikatat e komprometuar dhe t\u00eb anuluara nga qendrat e sertifikimit, Firefox prej vitit 2015 p\u00ebrdor nj\u00eb list\u00eb t\u00eb zez\u00eb t\u00eb centralizuar OneCRL<\/a><\/noindex> n\u00eb kombinim me sh\u00ebrbimin Google Safe Browsing<\/a><\/noindex> p\u00ebr t\u00eb p\u00ebrcaktuar aktivitetin e mundsh\u00ebm t\u00eb d\u00ebmsh\u00ebm. OneCRL, ashtu si dhe CRLSets<\/a><\/noindex> n\u00eb Chrome, sh\u00ebrben si nj\u00eb lidhje nd\u00ebrmjet\u00ebse q\u00eb agregon listat CRL nga qendrat e sertifikimit dhe ofron nj\u00eb sh\u00ebrbim OCSP t\u00eb centralizuar p\u00ebr verifikimin e certifikatave t\u00eb anuluara, duke e b\u00ebr\u00eb t\u00eb mundur q\u00eb t\u00eb mos d\u00ebrgohen k\u00ebrkesa drejtp\u00ebrdrejt n\u00eb qendrat e sertifikimit. Pavar\u00ebsisht pun\u00ebs s\u00eb madhe p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar besueshm\u00ebrin\u00eb e sh\u00ebrbimit t\u00eb verifikimit online t\u00eb certifikatave, t\u00eb dh\u00ebnat e telemetris\u00eb tregojn\u00eb se m\u00eb shum\u00eb se 7% e k\u00ebrkesave OCSP p\u00ebrfundojn\u00eb me skadim t\u00eb koh\u00ebs (disa vjet m\u00eb par\u00eb ky tregues ishte 15%). <\/p>\n

D\u00eb m\u00eb teper, n\u00eb rast se verifikimi p\u00ebrmes OCSP nuk \u00ebsht\u00eb i mundur, shfletuesi e konsideron certifikat\u00ebn si t\u00eb sakt\u00eb. Sh\u00ebrbimi mund t\u00eb mos jet\u00eb i qassh\u00ebm p\u00ebr shkak t\u00eb problemeve rrjetore dhe kufizimeve n\u00eb rrjeta t\u00eb brendshme, ashtu si\u00e7 mund t\u00eb bllokohet nga sulmuesit \u2014 p\u00ebr t\u00eb anashkaluar verifikimin OCSP gjat\u00eb nj\u00eb sulmi MITM, mjafton thjesht t\u00eb bllokohet qasja n\u00eb sh\u00ebrbimin e verifikimit. Pjes\u00ebrisht p\u00ebr t\u00eb parandaluar k\u00ebto sulme \u00ebsht\u00eb realizuar teknika Must-Staple<\/a><\/noindex>, e cila lejon interpretimin e gabimit t\u00eb k\u00ebrkes\u00ebs p\u00ebr OCSP ose t\u00eb pap\u00ebrfshirjes s\u00eb OCSP si nj\u00eb problem me \u00e7ertifikat\u00ebn, por kjo mund\u00ebsi \u00ebsht\u00eb opsionale dhe k\u00ebrkon nj\u00eb p\u00ebrgatitje t\u00eb ve\u00e7ant\u00eb t\u00eb \u00e7ertifikat\u00ebs. <\/p>\n

CRLite lejon t\u00eb reduktoj\u00eb informacionin e plot\u00eb p\u00ebr t\u00eb gjitha \u00e7ertifikatat e revokuara n\u00eb nj\u00eb struktur\u00eb t\u00eb leht\u00eb p\u00ebr t'u p\u00ebrdit\u00ebsuar, me nj\u00eb madh\u00ebsi prej vet\u00ebm 1 MB, e cila jep mund\u00ebsin\u00eb t\u00eb ruhet baza e plot\u00eb e CRL n\u00eb an\u00ebn e klientit.
\nShfletuesi mund t\u00eb sinkronizoj\u00eb \u00e7do dit\u00eb kopjen e tij t\u00eb t\u00eb dh\u00ebnave mbi \u00e7ertifikatat e revokuara, dhe kjo baz\u00eb do t\u00eb jet\u00eb e disponueshme n\u00eb \u00e7do kusht. <\/p>\n

CRLite bashkon informacionin nga Certificate Transparency<\/a><\/noindex>, regjistri publik i t\u00eb gjitha \u00e7ertifikatave t\u00eb l\u00ebshuar dhe t\u00eb revokuara, dhe rezultatet e skanimit t\u00eb \u00e7ertifikatave n\u00eb internet (mblidhen lista t\u00eb ndryshme CRL t\u00eb qendrave t\u00eb besueshm\u00ebris\u00eb dhe aggregohet informacioni mbi t\u00eb gjitha \u00e7ertifikatat e njohura). T\u00eb dh\u00ebnat paketohen duke p\u00ebrdorur struktura kaskad\u00eb Bloom.<\/a><\/noindex>, nj\u00eb struktur\u00eb probabilistike, e cila lejon p\u00ebrcaktimin e gabuar t\u00eb elementeve t\u00eb munguar, por p\u00ebrjashton humbjen e nj\u00eb elementi ekzistues (dmth. me nj\u00eb probabilitet t\u00eb caktuar \u00ebsht\u00eb e mundur nj\u00eb alarm i rrem\u00eb p\u00ebr nj\u00eb \u00e7ertifikat t\u00eb sakt\u00eb, por \u00e7ertifikatat e revokuara garantohen t\u00eb identifikohen). <\/p>\n

P\u00ebr t\u00eb eliminuar alarmin e rrem\u00eb n\u00eb CRLite, jan\u00eb futur nivele t\u00eb reja korrigjuese t\u00eb filtrit. Pas gjenerimit t\u00eb struktur\u00ebs, kryhet nj\u00eb cik\u00ebl p\u00ebr t\u00eb gjitha regjistrimet fillestare dhe p\u00ebr t\u00eb p\u00ebrcaktuar alarmin e rrem\u00eb q\u00eb ka ndodhur. Sipas rezultateve t\u00eb k\u00ebtij kontrolli krijohet nj\u00eb struktur\u00eb e re, e cila shtrihen n\u00eb m\u00ebnyr\u00eb kaskad\u00eb mbi t\u00eb par\u00ebn dhe korrigjon alarmet e rreme q\u00eb kan\u00eb ndodhur. Operacioni p\u00ebrs\u00ebritet derisa alarmet e rreme n\u00eb kontrollin e verifikimit t\u00eb eliminohen plot\u00ebsisht. N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebr t\u00eb mbuluar t\u00eb dh\u00ebnat e plota, mjafton t\u00eb krijohen 7-10 shtresa. Duke qen\u00eb se gjendja e DB-s\u00eb p\u00ebr shkak t\u00eb sinkronizimit periodik vonohet paksa nga gjendja aktuale e CRL-s\u00eb, kontrolli i certifikatave t\u00eb reja, t\u00eb l\u00ebshuara pas azhurnimit t\u00eb fundit t\u00eb DB-s\u00eb CRLite, kryhet p\u00ebrmes protokollit OCSP, duke p\u00ebrfshir\u00eb edhe teknik\u00ebn OCSP Stapling<\/a><\/noindex> (p\u00ebrgjigjja OCSP e v\u00ebrtetuar nga autoriteti i certifikimit d\u00ebrgohet nga serveri q\u00eb sh\u00ebrben faqen gjat\u00eb negocimit t\u00eb lidhjes TLS).<\/p>\n

\"Mozilla<\/a><\/noindex><\/center><\/p>\n

Me ndihm\u00ebn e filtreve Bloom, prurja e dh\u00ebnave nga WebPKI n\u00eb dhjetor, e cila mbulon 100 milion certifikata aktiv\u00eb dhe 750 mij\u00eb certifikata t\u00eb t\u00ebrhequr, \u00ebsht\u00eb arritur t\u00eb paketohen n\u00eb nj\u00eb struktur\u00eb prej 1.3 MB. Procesi i gjenerimit t\u00eb struktur\u00ebs \u00ebsht\u00eb mjaft i r\u00ebnd\u00eb p\u00ebr burimet, por ai kryhet n\u00eb serverin Mozilla dhe p\u00ebrdoruesit iu dor\u00ebzohet tashm\u00eb azhurnimi i gatsh\u00ebm. P\u00ebr shembull, n\u00eb form\u00ebn binar\u00eb, t\u00eb dh\u00ebnat e p\u00ebrdorura p\u00ebr gjenerimin k\u00ebrkojn\u00eb rreth 16 GB memorie kur ruhet n\u00eb DB-n\u00eb Redis, dhe n\u00eb form\u00ebn heksadecimale, dump-i i numrave serial t\u00eb certifikatave z\u00eb rreth 6.7 GB. Procesi i agregatimit t\u00eb t\u00eb gjith\u00eb certifikatave t\u00eb t\u00ebrhequra dhe aktiv\u00eb zgjat rreth 40 minuta, nd\u00ebrsa procesi i gjenerimit t\u00eb struktur\u00ebs t\u00eb paketuar mbi baz\u00ebn e filtrit Bloom k\u00ebrkon 20 minuta m\u00eb shum\u00eb.<\/p>\n

Aktualisht, Mozilla siguron p\u00ebrdit\u00ebsimin e baz\u00ebs s\u00eb t\u00eb dh\u00ebnave CRLite kat\u00ebr her\u00eb n\u00eb dit\u00eb (jo t\u00eb gjitha p\u00ebrdit\u00ebsimet d\u00ebrgohen te klient\u00ebt). Generimi i p\u00ebrdit\u00ebsimeve delta ende nuk \u00ebsht\u00eb realizuar \u2014 p\u00ebrdorimi i bsdiff4, i p\u00ebrdorur p\u00ebr krijimin e p\u00ebrdit\u00ebsimeve delta t\u00eb l\u00ebshimeve, nuk siguron efikasitet t\u00eb duhur p\u00ebr CRLite dhe p\u00ebrdit\u00ebsimet rezultojn\u00eb t\u00eb jen\u00eb t\u00eb tepruara. P\u00ebr t\u00eb eliminuar k\u00ebt\u00eb mang\u00ebsi, planifikohet rip\u00ebrpunimi i formatit t\u00eb struktur\u00ebs s\u00eb ruajtjes p\u00ebr t\u00eb shmangur rind\u00ebrtimet e panevojshme dhe heqjen e shtresave.<\/p>\n

CRLite tani po punon n\u00eb Firefox n\u00eb modalitet pasiv dhe p\u00ebrdoret paralelisht me OCSP p\u00ebr t\u00eb grumbulluar statistika mbi sakt\u00ebsin\u00eb e funksionimit. CRLite mund t\u00eb kaloj\u00eb n\u00eb modalitetin e kontrollit kryesor, p\u00ebr k\u00ebt\u00eb, n\u00eb about:config duhet t\u00eb vendosni parametrin security.pki.crlite_mode = 2.<\/p>\n

\"Mozilla<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 — CRLite. CRLite \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u0432 Mozilla \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f CRLite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MPL 2.0. \u041a\u043e\u0434 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0411\u0414 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 Python \u0438 Go. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55146","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla implementon CRLite p\u00ebr t\u00eb kontrolluar certifikatat TLS problematike | ProHoster","description":"Kompania Mozilla shpalli fillimin e testimeve n\u00eb nd\u00ebrtimet nocturne t\u00eb Firefox.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55146","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:50:02","updated":"2022-10-10 06:24:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=55146"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/55146\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=55146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=55146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=55146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}