{"id":38175,"date":"2019-10-31T22:22:05","date_gmt":"2019-10-31T19:22:05","guid":{"rendered":"https:\/\/prohoster.info\/blog\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej\/"},"modified":"2019-10-31T22:22:05","modified_gmt":"2019-10-31T19:22:05","slug":"forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","title":{"rendered":"Forumet CA\/B r\u00f6stade mot att f\u00f6rkorta giltighetstiden f\u00f6r SSL-certifikat till 397 dagar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Den 26 juli 2019 presenterade Google ett f\u00f6rslag<\/a><\/noindex> om att minska den maximala giltighetstiden f\u00f6r servercertifikat SSL\/TLS fr\u00e5n nuvarande 825 dagar till 397 dagar (ungef\u00e4r 13 m\u00e5nader), vilket \u00e4r ungef\u00e4r h\u00e4lften. Google anser att endast fullst\u00e4ndig automatisering av certifikat\u00e5tg\u00e4rder kan l\u00f6sa de nuvarande s\u00e4kerhetsproblemen, som ofta f\u00f6rklaras med m\u00e4nskliga faktorer. D\u00e4rf\u00f6r b\u00f6r str\u00e4van i idealfallet vara att automatiskt utf\u00e4rda kortlivade certifikat.<\/p>\n

Fr\u00e5gan lades p\u00e5 omr\u00f6stning i CA\/Browser Forum (CABF), som s\u00e4tter krav p\u00e5 SSL\/TLS-certifikat, inklusive den maximala giltighetstiden.<\/p>\n

Och den 10 september tillk\u00e4nnagavs resultaten<\/a><\/noindex>: medlemmarna i konsortiet r\u00f6stade mot<\/b> om f\u00f6rslagen.
\n<\/a><\/noindex><\/p>\n

Resultat<\/h1>\n

<\/p>\n

R\u00f6stning av certifikatutf\u00e4rdare<\/h4>\n

F\u00f6r (11 r\u00f6ster)<\/b>: Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (\u0431\u044b\u0432\u0448\u0438\u0439 Comodo CA), eMudhra, Kamu SM, Let’s Encrypt, Logius, PKIoverheid, SHECA, SSL.com<\/p>\n

Emot (20)<\/b>: Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (fd Trustwave)<\/p>\n

Nedlade (2)<\/b>: HARICA, TurkTrust<\/p><\/blockquote>\n

<\/p>\n

R\u00f6stning av certifikatkonsumenter<\/h4>\n

F\u00f6r (7)<\/b>: Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360<\/p>\n

Emot<\/b>: 0<\/p>\n

Nedlade<\/b>: 0<\/p><\/blockquote>\n

\nEnligt reglerna i CA\/Browser Forum m\u00e5ste tv\u00e5 tredjedelar av certifikatutf\u00e4rdarna r\u00f6sta ja och 50 % plus en r\u00f6st bland konsumenterna f\u00f6r att en positiv beslut ska fattas.<\/p>\n

Representanter f\u00f6r Digicert ber om urs\u00e4kt<\/a><\/noindex> f\u00f6r att de missade omr\u00f6stningen, d\u00e4r de skulle ha r\u00f6stat f\u00f6r att f\u00f6rkorta giltighetstiden f\u00f6r certifikat. De p\u00e5pekar att f\u00f6r vissa kunder kan en f\u00f6rkortning av giltighetstiden utg\u00f6ra ett problem, men p\u00e5 l\u00e5ng sikt ger det f\u00f6rdelar f\u00f6r s\u00e4kerheten.<\/p>\n

Hur som helst, men branschen \u00e4r \u00e4nnu inte redo att f\u00f6rkorta giltighetstider och helt g\u00e5 \u00f6ver till automatiserade l\u00f6sningar. Certifieringscenter kan erbjuda s\u00e5dana tj\u00e4nster, men m\u00e5nga kunder har \u00e4nnu inte implementerat automatisering. D\u00e4rf\u00f6r skjuts f\u00f6rkortningen till 397 dagar upp. Men fr\u00e5gan f\u00f6rblir \u00f6ppen.<\/p>\n

Nu kan Google f\u00f6rs\u00f6ka att inf\u00f6ra standarden \"tv\u00e5ngsm\u00e4ssigt\", som det var med protokollet Certificate Transparency<\/a><\/noindex>. Dessutom st\u00f6ds det av andra utvecklare: Apple, Microsoft, Mozilla och Opera.<\/p>\n

\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u043f\u043e\u043b\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u043e\u0432 \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0430 \u043d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt. \u041e\u043d \u0432\u044b\u0434\u0430\u0451\u0442 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043d\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d 90 \u0434\u043d\u044f\u043c\u0438. \u041a\u043e\u0440\u043e\u0442\u043a\u0438\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0430 \u0436\u0438\u0437\u043d\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u043c\u0435\u044e\u0442 tv\u00e5 huvudf\u00f6rdelar<\/a><\/noindex>:<\/p>\n

    \n
  1. begr\u00e4nsar skador fr\u00e5n komprometterade nycklar och felaktigt utf\u00e4rdade certifikat, eftersom de anv\u00e4nds under en kortare tidsperiod;\n<\/li>\n
  2. kortlivade certifikat st\u00f6djer och uppmuntrar automatisering, vilket \u00e4r absolut n\u00f6dv\u00e4ndigt f\u00f6r att f\u00f6renkla anv\u00e4ndningen av HTTPS. Om vi ska migrera hela v\u00e4rldsn\u00e4tet till HTTPS, kan vi p\u00e5 inget s\u00e4tt f\u00f6rv\u00e4nta oss att en administrat\u00f6r f\u00f6r varje befintlig webbplats ska uppdatera certifikaten manuellt. S\u00e5 snart utf\u00e4rdande och uppdatering av certifikat blir helt automatiserat, kommer kortare livsl\u00e4ngder f\u00f6r certifikat tv\u00e4rtom att bli mer praktiska och bekv\u00e4ma. <\/li>\n<\/ol>\n

    \nEn unders\u00f6kning fr\u00e5n GlobalSign p\u00e5 Habr<\/a><\/noindex> visade att 73,7 % av respondenterna \"snarare st\u00f6der\" en f\u00f6rkortning av certifikatens livsl\u00e4ngd.<\/p>\n

    N\u00e4r det g\u00e4ller d\u00f6lja EV-logotypen f\u00f6r SSL-certifikat i adressf\u00e4ltet, r\u00f6stade konsortiet inte i den fr\u00e5gan eftersom UI f\u00f6r webbl\u00e4sare helt faller inom utvecklarnas kompetens. Nya versioner av Chrome 77 och Firefox 70 kommer att sl\u00e4ppas i september-oktober, som kommer att ta bort den s\u00e4rskilda platsen f\u00f6r EV-certifikat i webbl\u00e4sarens adressf\u00e4lt. S\u00e5 h\u00e4r ser \u00e4ndringen ut f\u00f6r desktopversionen av Firefox 70:<\/p>\n

    F\u00f6rut:<\/p>\n

    \"Forumet
    \n
    \nDet kommer att bli:<\/p>\n

    \"Forumet
    \n
    \nEnligt s\u00e4kerhetsexperten Troy Hunt begraver avl\u00e4gsnande av EV-information fr\u00e5n webbl\u00e4sarens adressf\u00e4lt     faktiskt denna typ av certifikat<\/a><\/noindex>.
    \n
    K\u00e4lla:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    26 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 SSL\/TLS \u0441 \u043d\u044b\u043d\u0435\u0448\u043d\u0438\u0445 825 \u0434\u043d\u0435\u0439 \u0434\u043e 397 \u0434\u043d\u0435\u0439 (\u043e\u043a\u043e\u043b\u043e 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432), \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432\u0434\u0432\u043e\u0435. Google \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0441 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u044b\u043d\u0435\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0430\u0441\u0442\u043e \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442\u0441\u044f \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u043a\u0438\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432 \u0438\u0434\u0435\u0430\u043b\u0435 \u043d\u0443\u0436\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28658,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38175","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Forumet CA\/B r\u00f6stade emot att f\u00f6rkorta SSL-certifikatens livsl\u00e4ngd till 397 dagar | ProHoster","description":"Den 26 juli 2019 f\u00f6respr\u00e5kade Google att minska den maximala livsl\u00e4ngden f\u00f6r servercertifikat.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0424\u043e\u0440\u0443\u043c CA\/B \u043f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0442\u0438\u0432 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e 397 \u0434\u043d\u0435\u0439 | ProHoster","og:description":"26 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/forum-ca-b-progolosoval-protiv-sokrashheniya-sroka-dejstviya-ssl-sertifikatov-do-397-dnej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:05+00:00","article:modified_time":"2019-10-31T19:22:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38175","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:47:03","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:29:57","updated":"2026-01-23 20:47:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=38175"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38175\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/28658"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=38175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=38175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=38175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}