{"id":96270,"date":"2020-10-10T01:42:13","date_gmt":"2020-10-09T23:42:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts"},"modified":"2020-10-10T01:42:13","modified_gmt":"2020-10-09T23:42:13","slug":"vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","title":{"rendered":"L\u00ebshimi i server\u00ebve NTP NTPsec 1.2.0 dhe Chrony 4.0 me mb\u00ebshtetje p\u00ebr protokollin e sigurt NTS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Komiteti IETF (Internet Engineering Task Force), q\u00eb merret me zhvillimin e protokollit dhe arkitektur\u00ebs s\u00eb internetit, p\u00ebrfundoi<\/a><\/noindex> formimi i RFC p\u00ebr protokollin NTS (Network Time Security) dhe publikimi i specifikimit t\u00eb lidhur me identifikim RFC 8915<\/a><\/noindex>. RFC mori statusin \"Standarti i Propozuar\", pas t\u00eb cilit do t\u00eb filloj\u00eb puna p\u00ebr t'i dh\u00ebn\u00eb RFC-s\u00eb statusin e standardit t\u00eb projektit (Draft Standard), q\u00eb n\u00eb t\u00eb v\u00ebrtet\u00eb do t\u00eb thot\u00eb stabilizimin e plot\u00eb t\u00eb protokollit dhe marrjen parasysh t\u00eb t\u00eb gjitha v\u00ebrejtjeve t\u00eb shprehura. <\/p>\n

Standardizimi i NTS \u00ebsht\u00eb nj\u00eb hap i r\u00ebnd\u00ebsish\u00ebm p\u00ebr rritjen e siguris\u00eb s\u00eb sh\u00ebrbimeve t\u00eb sinkronizimit t\u00eb koh\u00ebs s\u00eb sakt\u00eb dhe mbrojtjen e p\u00ebrdoruesve nga sulmet q\u00eb imitojn\u00eb serverin NTP, me t\u00eb cilin lidhet klienti. Manipulimet e t\u00eb keq\u00ebve q\u00eb lidhen me vendosjen e nj\u00eb kohe t\u00eb gabuar mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb kompromituar sigurin\u00eb e protokollave t\u00eb tjer\u00eb q\u00eb marrin parasysh koh\u00ebn, si TLS. P\u00ebr shembull, ndryshimi i koh\u00ebs mund t\u00eb \u00e7oj\u00eb n\u00eb interpretimin e gabuar t\u00eb t\u00eb dh\u00ebnave n\u00eb lidhje me veprimin e certifikatave TLS. Deri tani, NTP dhe enkriptimi simetrik i kanaleve t\u00eb komunikimit nuk kan\u00eb lejuar t\u00eb garantohet q\u00eb klienti i nd\u00ebrvepron me serverin NTP t\u00eb d\u00ebshiruar dhe jo me nj\u00eb server t\u00eb falsifikuar, nd\u00ebrsa autentikimi me \u00e7el\u00ebsa nuk \u00ebsht\u00eb b\u00ebr\u00eb i zakonsh\u00ebm, pasi \u00ebsht\u00eb shum\u00eb i komplikuar p\u00ebr t'u konfiguruar.<\/p>\n

NTS p\u00ebrdor elemente t\u00eb infrastruktur\u00ebs s\u00eb \u00e7el\u00ebsit publik (PKI) dhe lejon p\u00ebrdorimin e TLS dhe enkriptim t\u00eb autentikuar AEAD (Authenticated Encryption with Associated Data) p\u00ebr mbrojtjen kriptografike t\u00eb nd\u00ebrveprimit midis klientit dhe serverit p\u00ebrmes protokollit NTP (Network Time Protocol). NTS p\u00ebrfshin dy protokolle t\u00eb ve\u00e7anta: NTS-KE (NTS Key Establishment p\u00ebr trajtimin e autentifikimit fillestar dhe negociatave t\u00eb \u00e7el\u00ebsave mbi TLS) dhe NTS-EF (NTS Extension Fields, p\u00ebrgjegj\u00ebs p\u00ebr enkriptimin dhe autentikimin e seanc\u00ebs s\u00eb sinkronizimit t\u00eb koh\u00ebs). NTS shton disa fusha t\u00eb zgjeruara n\u00eb paketat NTP dhe ruan t\u00eb gjitha informacionet mbi gjendjen vet\u00ebm n\u00eb an\u00ebn e klientit, duke p\u00ebrdorur mekanizmin e transmetimit t\u00eb cookie-ve. P\u00ebr trajtimin e lidhjeve p\u00ebrmes protokollit NTS \u00ebsht\u00eb caktuar porta rrjet 4460.<\/p>\n

\"L\u00ebshimi<\/a><\/noindex><\/center><\/p>\n

Implementimet e para t\u00eb standardizuara t\u00eb NTS jan\u00eb propozuar n\u00eb l\u00ebshimet e fundit t\u00eb publikuara NTPsec 1.2.0<\/a><\/noindex> dhe \u0421hrony 4.0<\/a><\/noindex>. \u0421hrony<\/a><\/noindex> ofron nj\u00eb implementim t\u00eb pavarur t\u00eb klientit dhe serverit NTP, i cili p\u00ebrdoret p\u00ebr sinkronizimin e koh\u00ebs s\u00eb sakt\u00eb n\u00eb disa distribucione Linux, p\u00ebrfshir\u00eb Fedora, Ubuntu, SUSE\/openSUSE dhe RHEL\/CentOS. NTPsec<\/a><\/noindex> po zhvillohet<\/a><\/noindex> n\u00eb drejtimin e Eric Raymond dhe \u00ebsht\u00eb nj\u00eb fork i implementimit t\u00eb referenc\u00ebs p\u00ebr protokollin NTPv4 (NTP Classic 4.3.34), e fokusuar n\u00eb rishikimin e kodit p\u00ebr t\u00eb rritur sigurin\u00eb (\u00ebsht\u00eb kryer pastrimi i kodit t\u00eb vjet\u00ebruar, jan\u00eb p\u00ebrdorur metoda p\u00ebr parandalimin e sulmeve dhe funksione t\u00eb sigurta p\u00ebr pun\u00ebn me memorie dhe stringje).<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 RFC \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS (Network Time Security) \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0438\u043c \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c RFC 8915. RFC \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0442\u0430\u0442\u0443\u0441 «\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430», \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u043d\u0451\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u043e \u043f\u0440\u0438\u0434\u0430\u043d\u0438\u044e RFC \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u0447\u0435\u0440\u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 (Draft Standard), \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u043d\u0443\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0438 \u0443\u0447\u0451\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":96271,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-96270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47L\u00ebshimi i server\u00ebve NTP NTPsec 1.2.0 dhe Chrony 4.0 me mb\u00ebshtetje p\u00ebr protokollin e sigurt NTS | ProHoster","description":"Komiteti IETF (Internet Engineering Task Force), i cili merret me zhvillimin e protokolleve dhe arkitektur\u00ebs s\u00eb internetit, ka p\u00ebrfunduar.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a NTP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 NTPsec 1.2.0 \u0438 \u0421hrony 4.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS | ProHoster","og:description":"\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-09T23:42:13+00:00","article:modified_time":"2020-10-09T23:42:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96270","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:47:23","updated":"2022-10-01 20:34:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/96270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=96270"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/96270\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/96271"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=96270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=96270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=96270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}