{"id":71037,"date":"2020-02-23T14:45:41","date_gmt":"2020-02-23T11:45:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej"},"modified":"2020-03-03T16:10:57","modified_gmt":"2020-03-03T13:10:57","slug":"lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","title":{"rendered":"Let's Encrypt u kaloi n\u00eb verifikimin duke p\u00ebrdorur subnet t\u00eb ndrysh\u00ebm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Qendra e Certifikimit Jo Fitimprur\u00ebs Let’s Encrypt<\/a><\/noindex>, e kontrolluar nga komuniteti dhe ofron certifikata falas p\u00ebr \u00e7do t\u00eb interesuar, njoftoi<\/a><\/noindex> p\u00ebr implementimin e nj\u00eb skeme t\u00eb re t\u00eb konfirmimit t\u00eb kompetencave p\u00ebr marrjen e certifikat\u00ebs p\u00ebr domenin. K\u00ebrkesa drejt serverit, ku ndodhet katalogu i p\u00ebrdorur p\u00ebr verifikim «\/.well-known\/acme-challenge\/», tani do t\u00eb realizohet me p\u00ebrdorimin e disa k\u00ebrkesave HTTP, t\u00eb d\u00ebrguara nga 4 adresa IP t\u00eb ndryshme, t\u00eb vendosura n\u00eb qendra t\u00eb ndryshme t\u00eb t\u00eb dh\u00ebnave dhe t\u00eb p\u00ebrkasin n\u00eb sisteme autonome t\u00eb ndryshme. Verifikimi konsiderohet i suksessh\u00ebm vet\u00ebm n\u00ebse t\u00eb pakt\u00ebn 3 nga 4 k\u00ebrkesat nga adresa IP t\u00eb ndryshme ishin t\u00eb suksesshme. <\/p>\n

Verifikimi nga disa n\u00ebnrrjete do t\u00eb ndihmoj\u00eb n\u00eb minimizimin e riskut t\u00eb marrjes s\u00eb certifikatave p\u00ebr domenet e tjera p\u00ebrmes sulmeve t\u00eb synuara, q\u00eb redirectojn\u00eb trafikun p\u00ebrmes manipulimit t\u00eb rrug\u00ebve me an\u00eb t\u00eb BGP. Duke p\u00ebrdorur nj\u00eb sistem verifikimi multi-pozita, sulmuesi do t\u00eb ket\u00eb nevoj\u00eb q\u00eb t\u00eb arrij\u00eb t\u00eb redirectoj\u00eb rrug\u00ebt p\u00ebr disa sisteme autonome t\u00eb ofruesve me uplinks t\u00eb ndryshme, q\u00eb \u00ebsht\u00eb shum\u00eb m\u00eb e komplikuar sesa manipulimi i nj\u00eb rruge t\u00eb vetme. D\u00ebrgimi i k\u00ebrkesave nga adresa IP t\u00eb ndryshme gjithashtu do t\u00eb rris\u00eb besueshm\u00ebrin\u00eb e verifikimit n\u00eb rast se disa hoste t\u00eb Let’s Encrypt jan\u00eb n\u00eb listat e bllokimit (p\u00ebr shembull, n\u00eb RF disa IP t\u00eb letsencrypt.org kan\u00eb r\u00ebn\u00eb n\u00ebn bllokimin e Roskomnadzor). <\/p>\n

Derisa deri m\u00eb 1 qershor do t\u00eb jet\u00eb n\u00eb fuqi nj\u00eb periudh\u00eb kaluese, e cila lejon gjenerimin e certifikatave pas nj\u00eb verifikimi t\u00eb suksessh\u00ebm nga qendra e par\u00eb t\u00eb t\u00eb dh\u00ebnave, n\u00eb rast t\u00eb mos aksesit t\u00eb hostit nga n\u00ebnrrjetat e tjera (p\u00ebr shembull, kjo mund t\u00eb ndodh\u00eb n\u00ebse administratori i hostit n\u00eb firewall lejoi k\u00ebrkesat vet\u00ebm nga qendra kryesore e Let’s Encrypt ose p\u00ebr shkak t\u00eb problemeve n\u00eb sinkronizimin e zonave n\u00eb DNS). N\u00eb baz\u00eb t\u00eb regjistrave do t\u00eb p\u00ebrgatitet nj\u00eb list\u00eb t\u00eb bardh\u00eb p\u00ebr domenet q\u00eb kan\u00eb probleme me verifikimin nga 3 qendra t\u00eb tjera t\u00eb t\u00eb dh\u00ebnave. N\u00eb list\u00ebn e bardh\u00eb do t\u00eb p\u00ebrfshihen vet\u00ebm domenet me t\u00eb dh\u00ebna kontakti t\u00eb plota. N\u00eb rast se domene nuk arrin t\u00eb futet n\u00eb list\u00ebn e bardh\u00eb automatikisht, aplikimi p\u00ebr futur gjithashtu mund t\u00eb d\u00ebrgohet p\u00ebrmes nj\u00eb forme speciale<\/a><\/noindex>.<\/p>\n

N\u00eb k\u00ebt\u00eb moment, projekti Let’s Encrypt ka liruar 113 milion certifikata, duke p\u00ebrfshir\u00eb rreth 190 milion domenesh (nj\u00eb vit m\u00eb par\u00eb ishin p\u00ebrfshir\u00eb 150 milion domen\u00eb, nd\u00ebrsa dy vite m\u00eb par\u00eb \u2014 61 milion). Sipas statistikave t\u00eb sh\u00ebrbimit Firefox Telemetry, pjesa globale e k\u00ebrkesave p\u00ebr faqe n\u00eb HTTPS arrin n\u00eb 81% (nj\u00eb vit m\u00eb par\u00eb ishte 77%, dy vite m\u00eb par\u00eb 69%), dhe n\u00eb SHBA \u2014 91%.<\/p>\n

N\u00eb m\u00ebnyr\u00eb shtes\u00eb, mund t\u00eb theksohet, n\u00eb mendje<\/a><\/noindex> kompanin\u00eb Apple
\np\u00ebr t\u00eb ndalur n\u00eb shfletuesin Safari besimin ndaj certifikatave, koha e jet\u00ebs s\u00eb t\u00eb cilave kalon 398 dit\u00eb (13 muaj). Kjo kufizim pritet t\u00eb hyj\u00eb n\u00eb fuqi vet\u00ebm p\u00ebr certifikatat e l\u00ebshuara q\u00eb nga 1 Shtatori 2020. P\u00ebr certifikatat e marra para 1 Shtatorit me nj\u00eb afat t\u00eb gjat\u00eb, besimi do t\u00eb ruhet, por i limituar n\u00eb 825 dit\u00eb (2.2 vite). <\/p>\n

Ky ndryshim mund t\u00eb ket\u00eb nj\u00eb ndikim negativ n\u00eb biznesin e autoriteteve t\u00eb certifikimit, t\u00eb cilat shesin certifikata t\u00eb lira me nj\u00eb afat t\u00eb gjat\u00eb, deri n\u00eb 5 vjet. Sipas Apple, krijimi i k\u00ebtyre certifikatave paraqet k\u00ebrc\u00ebnime t\u00eb jet\u00ebshme p\u00ebr sigurin\u00eb, pengon zbatimin e shpejt\u00eb t\u00eb standarteve t\u00eb reja t\u00eb kriptimit dhe lejon hakerat t\u00eb kontrollojn\u00eb p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb trafikun e viktim\u00ebs ose ta p\u00ebrdorin at\u00eb p\u00ebr phishing n\u00eb rastin e nj\u00eb shkeljeje t\u00eb padukshme t\u00eb certifikat\u00ebs si rezultat i nj\u00eb sulmi.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0439 \u0441\u0445\u0435\u043c\u044b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0438\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0434\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430. \u041e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 «\/.well-known\/acme-challenge\/», \u0442\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u0434\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0441 4 \u0440\u0430\u0437\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0434\u0430\u0442\u0430\u0446\u0435\u043d\u0442\u0440\u0430\u0445 \u0438 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71037","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt ka kaluar n\u00eb verifikimin duke p\u00ebrdorur n\u00ebnrrjeta t\u00eb ndryshme | ProHoster","description":"Let\u2019s Encrypt, nj\u00eb qend\u00ebr \u00e7ertifikimi jo-fitimprur\u00ebse e kontrolluar nga komuniteti, ofron \u00e7ertifikata pa pages\u00eb p\u00ebr t\u00eb gjith\u00eb ata q\u00eb d\u00ebshirojn\u00eb.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u043f\u0435\u0440\u0435\u0448\u0451\u043b \u043a \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let\u2019s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/lets-encrypt-pereshyol-k-proverke-s-ispolzovaniem-raznyh-podsetej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-23T11:45:41+00:00","article:modified_time":"2020-03-03T13:10:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71037","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:09:24","updated":"2022-10-04 11:44:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71037","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=71037"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71037\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=71037"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=71037"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=71037"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}