{"id":86929,"date":"2020-07-01T19:42:02","date_gmt":"2020-07-01T17:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami"},"modified":"2020-07-01T19:42:02","modified_gmt":"2020-07-01T17:42:02","slug":"chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","title":{"rendered":"Chrome begr\u00e4nsar ocks\u00e5 livsl\u00e4ngden f\u00f6r TLS-certifikat till 13 m\u00e5nader.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"ChromeUtvecklarna av projektet Chromium har gjort en \u00e4ndring<\/a><\/noindex>, som fastst\u00e4ller den maximala livsl\u00e4ngden f\u00f6r TLS-certifikat till 398 dagar (13 m\u00e5nader).<\/p>\n

Villkoret g\u00e4ller f\u00f6r alla offentliga serversertifikat utf\u00e4rdade efter den 1 september 2020. Om certifikatet inte f\u00f6ljer denna regel kommer webbl\u00e4saren att avvisa det som ogiltigt och specifikt ge felmeddelandet ERR_CERT_VALIDITY_TOO_LONG<\/code>.<\/p>\n

F\u00f6r certifikat som erh\u00f6lls f\u00f6re den 1 september 2020 kommer f\u00f6rtroendet att uppr\u00e4tth\u00e5llas och begr\u00e4nsas till 825 dagar<\/a><\/noindex> (2,2 \u00e5r), precis som idag.
\n<\/a><\/noindex>
\nTidigare inf\u00f6rde utvecklarna av webbl\u00e4sarna Firefox och Safari en begr\u00e4nsning f\u00f6r den maximala livsl\u00e4ngden f\u00f6r certifikat. \u00c4ndringen tr\u00e4der ocks\u00e5 i kraft den 1 september<\/a><\/noindex>.<\/p>\n

Det inneb\u00e4r att webbplatser som anv\u00e4nder SSL\/TLS-certifikat med l\u00e5ng livsl\u00e4ngd, utf\u00e4rdade efter gr\u00e4nsdato, kommer att ge sekretessfel i webbl\u00e4sarna.<\/p>\n

\"Chrome
\n
\nDen nya policyn tillk\u00e4nnagavs f\u00f6rst av Apple under ett m\u00f6te p\u00e5 CA\/Browser-forumet i februari 2020<\/a><\/noindex>. Genom att inf\u00f6ra den nya regeln har Apple lovat att till\u00e4mpa den p\u00e5 alla enheter med iOS och macOS. Det kommer att s\u00e4tta press p\u00e5 webbplatsadministrat\u00f6rer och utvecklare att deras certifikat uppfyller kraven.<\/p>\n

F\u00f6rkortningen av certifikatens livsl\u00e4ngd har diskuterats i flera m\u00e5nader av Apple, Google och andra deltagare i CA\/Browser. Denna policy har sina f\u00f6rdelar och nackdelar.<\/p>\n

Syftet med detta steg \u00e4r att \u00f6ka s\u00e4kerheten p\u00e5 webbplatsen, genom att s\u00e4kerst\u00e4lla att utvecklarna anv\u00e4nder certifikat med de senaste kryptografiska standarderna och minska antalet gamla, bortgl\u00f6mda certifikat som potentiellt kan stj\u00e4las och \u00e5teranv\u00e4ndas f\u00f6r phishing och drive-by skadliga attacker. Om angripare skulle lyckas bryta kryptografin i SSL\/TLS-standarden kommer kortlivade certifikat att m\u00f6jligg\u00f6ra f\u00f6r folk att byta till s\u00e4krare certifikat ungef\u00e4r ett \u00e5r senare.<\/p>\n

F\u00f6rkortningen av certifikatens giltighet har vissa nackdelar. Det har noterats att genom att \u00f6ka frekvensen av certifikatbyten g\u00f6r Apple och andra f\u00f6retag ocks\u00e5 livet lite mer komplicerat f\u00f6r webbplats\u00e4gare och f\u00f6retag som m\u00e5ste hantera certifikat och efterlevnad av krav.<\/p>\n

\u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, Let’s Encrypt \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0446\u0435\u043d\u0442\u0440\u044b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0441\u0442\u0438\u043c\u0443\u043b\u0438\u0440\u0443\u044e\u0442 \u0432\u0435\u0431-\u043c\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u042d\u0442\u043e \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442 \u0447\u0435\u043b\u043e\u0432\u0435\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0430\u043a\u043b\u0430\u0434\u043d\u044b\u0435 \u0440\u0430\u0441\u0445\u043e\u0434\u044b \u0438 \u0440\u0438\u0441\u043a \u043e\u0448\u0438\u0431\u043e\u043a \u043f\u043e \u043c\u0435\u0440\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u044f \u0447\u0430\u0441\u0442\u043e\u0442\u044b \u0437\u0430\u043c\u0435\u043d\u044b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.<\/p>\n

\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, Let’s Encrypt \u0432\u044b\u0434\u0430\u0451\u0442 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0435 HTTPS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0435\u043a\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 90 \u0434\u043d\u0435\u0439, \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0434\u043b\u0435\u043d\u0438\u044f. \u0422\u0430\u043a \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u044d\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0435\u0449\u0451 \u043b\u0443\u0447\u0448\u0435 \u0432\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u043e\u0431\u0449\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u2014 \u043f\u043e \u043c\u0435\u0440\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.<\/p>\n

Denna f\u00f6r\u00e4ndring r\u00f6stades fram av medlemmarna i CA\/Browser Forum, men beslutet godk\u00e4ndes inte p\u00e5 grund av oenighet bland certifikatutf\u00e4rdarna.<\/a><\/noindex>.<\/p>\n

Resultat<\/h1>\n

<\/p>\n

R\u00f6stning av certifikatutf\u00e4rdare<\/h4>\n

F\u00f6r (11 r\u00f6ster)<\/b>: Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (\u0431\u044b\u0432\u0448\u0438\u0439 Comodo CA), eMudhra, Kamu SM, Let’s Encrypt, Logius, PKIoverheid, SHECA, SSL.com<\/p>\n

Emot (20)<\/b>: Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (fd Trustwave)<\/p>\n

Nedlade (2)<\/b>: HARICA, TurkTrust<\/p><\/blockquote>\n

<\/p>\n

R\u00f6stning av certifikatkonsumenter<\/h4>\n

F\u00f6r (7)<\/b>: Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360<\/p>\n

Emot<\/b>: 0<\/p>\n

Nedlade<\/b>: 0<\/p><\/blockquote>\n

\nNu genomf\u00f6r webbl\u00e4sare denna policy utan certifikatutf\u00e4rdarnas samtycke.
\n
K\u00e4lla: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium \u0432\u043d\u0435\u0441\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 398 \u0434\u043d\u0435\u0439 (13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432). \u0423\u0441\u043b\u043e\u0432\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0430\u0432\u0438\u043b\u0443, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u0432\u0435\u0440\u0433\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u043e\u0439 ERR_CERT_VALIDITY_TOO_LONG. \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043e 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e\u0432\u0435\u0440\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86930,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86929","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome begr\u00e4nsar ocks\u00e5 livsl\u00e4ngden f\u00f6r TLS-certifikat till 13 m\u00e5nader | ProHoster","description":"Utvecklarna av Chromium-projektet.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u0442\u043e\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 13 \u043c\u0435\u0441\u044f\u0446\u0430\u043c\u0438 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-01T17:42:02+00:00","article:modified_time":"2020-07-01T17:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86929","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:02:56","updated":"2022-10-03 00:14:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/86929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=86929"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/86929\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/86930"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=86929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=86929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=86929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}