IFirefox iqalile ukungenisa izatifikethi zeengcambu ukusuka Windows

iFirefox Certificate Store

Ngokukhutshwa kweMozilla Firefox 65 ngoFebruwari 2019, abanye abasebenzisi banamava waqala ukuqaphela iimpazamo njengokuthi “UQhakamshelwano Lwakho alukhuselekanga” okanye “SEC_ERROR_UNKNOWN_ISSUER”. Isizathu savela njenge-antiviruses ezifana ne-Avast, i-Bitdefender kunye ne-Kaspersky, efaka izatifikethi zabo zeengcambu kwikhompyutheni ukuphumeza i-MiTM kwi-traffic ye-HTTPS yomsebenzisi. Kwaye kuba iFirefox inevenkile yayo yesatifikethi, bazama ukuyingena nayo.

Abaphuhlisi bebhrawuza kudala ndifowuna abasebenzisi ukuba banqabe ukufaka ii-antivirus zomntu wesithathu eziphazamisa ukusebenza kweziphequluli kunye nezinye iinkqubo, kodwa abaphulaphuli abaninzi abakayithobeli iminxeba. Ngelishwa, ngokusebenza njenge-proxy ecacileyo, ezininzi ii-antiviruses zinciphisa umgangatho wokukhusela i-cryptographic kwiikhomputha zabaxhasi. Ngenxa yale njongo, siphuhlisa Izixhobo zokubona i-HTTPS, ethi kwicala lomncedisi ibone ubukho be-MiTM, njenge-antivirus, kwitshaneli phakathi komxhasi kunye nomncedisi.

Enye indlela okanye enye, kule meko, i-antivirus yaphinda yaphazamisa isikhangeli, kwaye iFirefox yayingenalo ukhetho ngaphandle kokusombulula ingxaki ngokwayo. Kukho isicwangciso kwisikhangeli sobumbeko security.enterprise_roots.enabledUkuba uvula le flegi, iFirefox iza kuqala ukusebenzisa ivenkile yesatifikethi. Windows ukuqinisekisa uqhagamshelo lwe-SSL. Ukuba umntu ufumana iimpazamo ezikhankanyiweyo apha ngasentla xa etyelela iiwebhusayithi ze-HTTPS, unokukhubaza ukuskena koqhagamshelo lwe-SSL kwisoftware yakhe ye-antivirus okanye avule le flegi ngesandla kwizicwangciso zesiphequluli sakhe.

Ingxaki kuxoxiwe kwiMozilla bug tracker. Abaphuhlisi bagqibe ekubeni benze iflegi isebenze ngeenjongo zokulinga security.enterprise_roots.enabled ngokuzenzekelayo, ukugcina izatifikethi Windows isetyenziswa ngaphandle kwesenzo esongezelelweyo esivela kumsebenzisi. Oku kuya kwenzeka kuqala ngeFirefox 66 kwiinkqubo Windows I-8 kunye Windows 10, apho kufakwa khona ii-antivirus zomntu wesithathu (i-API ikuvumela ukuba ubone ubukho be-antivirus kwinkqubo kuphela kwinguqulelo Windows 8).

umthombo: www.habr.com