IFirefox iqalile ukungenisa izatifikethi zengcambu kwiWindows

iFirefox Certificate Store

Ngokukhutshwa kweMozilla Firefox 65 ngoFebruwari 2019, abanye abasebenzisi banamava waqala ukuqaphela iimpazamo njengokuthi “UQhakamshelwano Lwakho alukhuselekanga” okanye “SEC_ERROR_UNKNOWN_ISSUER”. Isizathu savela njenge-antiviruses ezifana ne-Avast, i-Bitdefender kunye ne-Kaspersky, efaka izatifikethi zabo zeengcambu kwikhompyutheni ukuphumeza i-MiTM kwi-traffic ye-HTTPS yomsebenzisi. Kwaye kuba iFirefox inevenkile yayo yesatifikethi, bazama ukuyingena nayo.

Abaphuhlisi bebhrawuza kudala ndifowuna abasebenzisi ukuba banqabe ukufaka ii-antivirus zomntu wesithathu eziphazamisa ukusebenza kweziphequluli kunye nezinye iinkqubo, kodwa abaphulaphuli abaninzi abakayithobeli iminxeba. Ngelishwa, ngokusebenza njenge-proxy ecacileyo, ezininzi ii-antiviruses zinciphisa umgangatho wokukhusela i-cryptographic kwiikhomputha zabaxhasi. Ngenxa yale njongo, siphuhlisa Izixhobo zokubona i-HTTPS, ethi kwicala lomncedisi ibone ubukho be-MiTM, njenge-antivirus, kwitshaneli phakathi komxhasi kunye nomncedisi.

Enye indlela okanye enye, kule meko, i-antivirus yaphinda yaphazamisa isikhangeli, kwaye iFirefox yayingenalo ukhetho ngaphandle kokusombulula ingxaki ngokwayo. Kukho isicwangciso kwisikhangeli sobumbeko security.enterprise_roots.enabled. Ukuba uyenza le flegi, iFirefox iya kuqalisa ukusebenzisa ivenkile yesatifikethi yeWindows ukuze iqinisekise imidibaniso ye-SSL. Ukuba umntu ufumana ezi mpazamo zikhankanywe ngasentla xa undwendwela iisayithi ze-HTTPS, ngoko unokuvala ukuskena koqhagamshelo lwe-SSL kwi-antivirus yakho, okanye usete le flegi ngesandla kwiisetingi zesikhangeli sakho.

Ingxaki kuxoxiwe kwiMozilla bug tracker. Abaphuhlisi bagqibe ekubeni benze iflegi isebenze ngeenjongo zokulinga security.enterprise_roots.enabled ngokungagqibekanga ukuze ivenkile yesatifikethi yeWindows isetyenziswe ngaphandle kwesenzo esongezelelweyo somsebenzisi. Oku kuya kwenzeka kuguqulelo lweFirefox 66 kwiWindows 8 kunye neWindows 10 iinkqubo apho ii-antivirus zomntu wesithathu zifakelwe (i-API ikuvumela ukuba ubone ubukho be-antivirus kwisistim kuphela kwinguqulelo ye-Windows 8).

umthombo: www.habr.com