{"id":55146,"date":"2020-01-13T00:00:00","date_gmt":"2020-01-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov"},"modified":"2020-02-18T14:03:13","modified_gmt":"2020-02-18T11:03:13","slug":"mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","title":{"rendered":"Mozilla implementerar CRLite f\u00f6r att kontrollera problematiska TLS-certifikat","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>F\u00f6retaget Mozilla <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2020\/01\/09\/crlite-part-1-all-web-pki-revocations-compressed\/\">tillk\u00e4nnagav<\/a><\/noindex> \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f  \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 &#8212; <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2020\/01\/09\/crlite-part-2-end-to-end-design\/\">CRLite<\/a><\/noindex>. CRLite m\u00f6jligg\u00f6r effektiv kontroll av certifikat\u00e5terkallande via en databas som placeras p\u00e5 anv\u00e4ndarens system. Den implementation av CRLite som utvecklas av Mozilla <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/crlite\/\">i sin helhet i \"Vladikavkaz Mathematical Journal\".<\/a><\/noindex> \u00e4r licensierad under den fria licensen MPL 2.0. Koden f\u00f6r att generera databasen och serverkomponenter \u00e4r skrivna i <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/filter-cascade\">Python<\/a><\/noindex> och Go. De klientdelar som lagts till i Firefox f\u00f6r att l\u00e4sa data fr\u00e5n databasen <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/rust-cascade\">\u00e4r f\u00f6rberedda<\/a><\/noindex> \u00e4r skrivna i Rust.<\/p>\n<p>Den verifiering av certifikat som fortfarande till\u00e4mpas med hj\u00e4lp av externa tj\u00e4nster baserat p\u00e5 protokollet <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/OCSP\">OCSP<\/a><\/noindex> (Online Certificate Status Protocol) kr\u00e4ver garanterad n\u00e4tverks\u00e5tkomst, vilket leder till en m\u00e4rkbar f\u00f6rdr\u00f6jning vid beg\u00e4ran (i genomsnitt 350 ms) och har problem med att s\u00e4kerst\u00e4lla sekretess (servrar som svarar p\u00e5 beg\u00e4rningar f\u00e5r information om specifika certifikat, vilket kan indikera vilka webbplatser anv\u00e4ndaren bes\u00f6ker). Det finns ocks\u00e5 en m\u00f6jlighet f\u00f6r lokal kontroll via listor <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Certificate_revocation_list\">CRL<\/a><\/noindex> (Certificate Revocation List), \u043d\u043e \u043c\u0438\u043d\u0443\u0441\u043e\u043c \u0442\u0430\u043a\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430  \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f  \u043e\u0447\u0435\u043d\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0430\u0437\u043c\u0435\u0440 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 &#8212; \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0411\u0414 \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 300 \u041c\u0411 \u0438 \u0435\u0451 \u0440\u043e\u0441\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.<\/p>\n<p>F\u00f6r att blockera komprometterade och \u00e5terkallade certifikat fr\u00e5n certifikatutf\u00e4rdare har Firefox anv\u00e4nt en centraliserad svart lista sedan 2015 <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/CA:RevocationPlan#OneCRL\">OneCRL<\/a><\/noindex> i kombination med att anv\u00e4nda tj\u00e4nsten <noindex><a rel=\"nofollow\" href=\"https:\/\/safebrowsing.google.com\/\">Google Safe Browsing<\/a><\/noindex> f\u00f6r att identifiera m\u00f6jlig skadlig aktivitet. OneCRL, liksom <noindex><a rel=\"nofollow\" href=\"https:\/\/dev.chromium.org\/Home\/chromium-security\/crlsets\">CRLSets<\/a><\/noindex> i Chrome, fungerar som ett mellanled som aggregerar CRL-listor fr\u00e5n certifikatutf\u00e4rdare och tillhandah\u00e5ller en centraliserad OCSP-tj\u00e4nst f\u00f6r verifiering av \u00e5terkallade certifikat, vilket g\u00f6r det m\u00f6jligt att inte skicka f\u00f6rfr\u00e5gningar direkt till certifikatutf\u00e4rdarna. Trots det stora arbetet f\u00f6r att \u00f6ka tillf\u00f6rlitligheten hos tj\u00e4nsten f\u00f6r onlineverifiering av certifikat visar telemetridata att mer \u00e4n 7 % av OCSP-f\u00f6rfr\u00e5gningarna slutar med tidsgr\u00e4ns (f\u00f6r n\u00e5gra \u00e5r sedan var denna siffra 15 %). <\/p>\n<p>\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 OCSP, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c. \u0421\u0435\u0440\u0432\u0438\u0441  \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043a\u0430\u043a \u0438\u0437-\u0437\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445, \u0442\u0430\u043a \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 &#8212;  \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 OCSP  \u0432 \u0445\u043e\u0434\u0435 MITM-\u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438. \u0427\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2015\/11\/23\/improving-revocation-ocsp-must-staple-and-short-lived-certificates\/\">Must-Staple<\/a><\/noindex>, vilket g\u00f6r det m\u00f6jligt att tolka ett fel vid beg\u00e4ran om OCSP eller otillg\u00e4nglighet av OCSP som ett problem med certifikatet, men denna m\u00f6jlighet \u00e4r valfri och kr\u00e4ver en speciell utf\u00e4rdande av certifikatet. <\/p>\n<p>CRLite g\u00f6r det m\u00f6jligt att komprimera fullst\u00e4ndig information om alla \u00e5terkallade certifikat i en l\u00e4ttuppdaterad struktur som endast \u00e4r 1 MB stor, vilket g\u00f6r det m\u00f6jligt att lagra hela CRL-databasen p\u00e5 klientsidan.<br \/>\nWebbl\u00e4saren kommer att kunna synkronisera sin kopia av data om \u00e5terkallade certifikat dagligen, och denna databas kommer att vara tillg\u00e4nglig under alla omst\u00e4ndigheter. <\/p>\n<p>CRLite sammanst\u00e4ller information fr\u00e5n <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48159\">Certificate Transparency<\/a><\/noindex>, den offentliga loggen \u00f6ver alla utf\u00e4rdade och \u00e5terkallade certifikat, samt resultaten av certifikatgranskningar p\u00e5 internet (olika CRL-listor fr\u00e5n certifikatutf\u00e4rdare samlas in och information om alla k\u00e4nda certifikat aggregeras). Uppgifterna paketeras med hj\u00e4lp av kaskad <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A4%D0%B8%D0%BB%D1%8C%D1%82%D1%80_%D0%91%D0%BB%D1%83%D0%BC%D0%B0\">N\u00e4r det g\u00e4ller TLS-certifikat som utf\u00e4rdats fr\u00e5n och med den 1 september 2020,<\/a><\/noindex>, en probabilistisk struktur som medger falska positiva, men utesluter att ett befintligt element missas (det vill s\u00e4ga, med viss sannolikhet kan det h\u00e4nda att ett korrekt certifikat felaktigt identifieras, men \u00e5terkallade certifikat kommer garanterat att uppt\u00e4ckas). <\/p>\n<p>F\u00f6r att undvika falska larm i CRLite har ytterligare justeringsniv\u00e5er inf\u00f6rts. Efter genereringen av strukturen g\u00f6rs en genomg\u00e5ng av alla ursprungliga poster f\u00f6r att identifiera uppkomna falska larm. Baserat p\u00e5 detta genomf\u00f6rs en ytterligare struktur som kaskadm\u00e4ssigt l\u00e4ggs ovanp\u00e5 den f\u00f6rsta och justerar de uppkomna falska larmen. Denna operation upprepas tills alla falska larm \u00e4r helt uteslutna vid kontrollgranskningen. Vanligtvis r\u00e4cker det med att skapa 7-10 lager f\u00f6r att t\u00e4cka alla data. Eftersom tillst\u00e5ndet i databasen p\u00e5 grund av periodisk synkronisering \u00e4r n\u00e5got f\u00f6rdr\u00f6jd fr\u00e5n det aktuella tillst\u00e5ndet f\u00f6r CRL, kontrolleras nya certifikat som utf\u00e4rdats efter den senaste uppdateringen av databasen CRLite med hj\u00e4lp av OCSP-protokollet, inklusive att anv\u00e4nda tekniken <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/OCSP_stapling\">OCSP Stapling<\/a><\/noindex> (evidens fr\u00e5n certifikatutf\u00e4rdaren \u00f6verf\u00f6rs av servern som betj\u00e4nar webbplatsen vid f\u00f6rhandlingen av TLS-anslutningen).<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/ffp4g1ylyit3jdyti1hqcvtb-wpengine.netdna-ssl.com\/security\/files\/2020\/01\/figure3-filter-structure.png\"><img decoding=\"async\" alt=\"Mozilla implementerar CRLite f\u00f6r att kontrollera problematiska TLS-certifikat\" src=\"\/wp-content\/uploads\/2020\/01\/3c95db6392aa8f2170a7c6e2697c4043.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Genom Bloom-filter kunde decemberbesk\u00e4rningen av information fr\u00e5n WebPKI, som omfattar 100 miljoner aktiva certifikat och 750 000 \u00e5terkallade certifikat, packas i en struktur som \u00e4r 1,3 MB stor. Processen f\u00f6r att generera strukturen \u00e4r ganska resurskr\u00e4vande, men den utf\u00f6rs p\u00e5 Mozillas server och levereras redan som en f\u00e4rdig uppdatering till anv\u00e4ndaren. Till exempel, i bin\u00e4r form kr\u00e4ver de ursprungliga data som anv\u00e4nds vid genereringen cirka 16 GB minne n\u00e4r de lagras i databasen Redis, medan dumpen av alla serienummer f\u00f6r certifikat i hexadecimalt format tar cirka 6,7 GB. Processen f\u00f6r aggregering av alla \u00e5terkallade och aktiva certifikat tar cirka 40 minuter, och processen f\u00f6r att generera den packade strukturen baserad p\u00e5 Bloom-filter kr\u00e4ver ytterligare 20 minuter.<\/p>\n<p>\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 Mozilla \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0411\u0414 CRLite \u0447\u0435\u0442\u044b\u0440\u0435 \u0440\u0430\u0437\u0430 \u0432 \u0434\u0435\u043d\u044c (\u043d\u0435 \u0432\u0441\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c). \u0413\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f  delta-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 &#8212; \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 bsdiff4, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f delta-\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0435\u043b\u0438\u0437\u043e\u0432, \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u0443\u044e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f CRLite \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u043e\u043f\u0440\u0430\u0432\u0434\u0430\u043d\u043d\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438. \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0444\u043e\u0440\u043c\u0430\u0442 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043b\u0438\u0448\u043d\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0441\u043b\u043e\u0451\u0432.<\/p>\n<p>CRLite fungerar f\u00f6r n\u00e4rvarande i Firefox i passivt l\u00e4ge och anv\u00e4nds parallellt med OCSP f\u00f6r att samla statistik om korrekt drift. CRLite kan v\u00e4xlas till aktiv kontroll, f\u00f6r detta m\u00e5ste parameter security.pki.crlite_mode = 2 s\u00e4ttas i about:config.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/ffp4g1ylyit3jdyti1hqcvtb-wpengine.netdna-ssl.com\/security\/files\/2020\/01\/figure2-filter-process.png\"><img decoding=\"async\" alt=\"Mozilla implementerar CRLite f\u00f6r att kontrollera problematiska TLS-certifikat\" src=\"\/wp-content\/uploads\/2020\/01\/004ea3876f93c92b2ca059eebd62d1ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>K\u00e4lla: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52175\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 &#8212; CRLite. CRLite \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u0432 Mozilla \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f CRLite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MPL 2.0. \u041a\u043e\u0434 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0411\u0414 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 Python \u0438 Go. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55146","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sv_SE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-12T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla implementerar CRLite f\u00f6r kontroll av problematiska TLS-certifikat | ProHoster","description":"Mozilla har tillk\u00e4nnagivit att de inleder tester i nattliga versioner av Firefox.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55146","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:50:02","updated":"2022-10-10 06:24:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/55146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=55146"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/55146\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=55146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=55146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=55146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}