26 ืืืื 2019 Google ืจืขืืืฆืืจื ืื ืืึทืงืกืืืื ืืืืืืงืืึทื ืฆืืื ืคืื SSL / TLS ืกืขืจืืืขืจ ืกืขืจืืืคืืงืึทืฅ ืคืื ืื ืงืจืึทื ื 825 ืืขื ืฆื 397 ืืขื (ืืืขืื 13 ืืืฉืื), ืืึธืก ืืื ืืขืขืจืขื ืืึทืื. ืืืื ืืืืืื ืึทื ืืืืื ืืึทื ืฅ ืึธืืึทืืืืฉืึทื ืคืื ืึทืงืฉืึทื ื ืืื ืกืขืจืืืคืืงืึทืฅ ืืืขื ืืึทืงืืืขื ืืึทืคืจืืึทืขื ืคืื ืื ืงืจืึทื ื ืืืืขืจืืืื ืคึผืจืึธืืืขืืก, ืืืึธืก ืืขื ืขื ืึธืคื ืึทืืจืืืืึทืืึทื ืฆื ืืขื ืืฉืืขื ืกืืืืช. ืืขืจืืืขืจ, ืืืืืื, ืืืื ืขืจ ืืึธื ืฉืืจืขืื ืคึฟืึทืจ ืึธืืึทืืืืืื ืืฉืืึทื ืก ืคืื ืงืืจืฅ-ืืขืืขืื ืกืขืจืืืคืืงืึทืฅ.
ืื ืึทืจืืืกืืขืื ืืื ืืขืืืขื ืฉืืขืื ืฆื ืฉืืืืขื ืืื ืื CA / ืืืขืืขืจืขืจ ืคืืจืื (CABF), ืืืึธืก ืฉืืขืื ืจืขืงืืืืจืขืืขื ืฅ ืคึฟืึทืจ SSL / TLS ืกืขืจืืืคืืงืึทืฅ, ืึทืจืืึทื ืืขืจืขืื ื ืื ืืึทืงืกืืืื ืืืืืืงืืึทื ืฆืืึทื.
ืืื ืืขืืึธืื 10 ืกืขืคืืขืืืขืจ : ืงืื ืกืึธืจืืืื ืืืืืืืืขืจ ืืืื ืืขืฉืืืื ะฟัะพัะธะฒ ืคึฟืืจืืืืื.
ืจืขืืืืืึทืื
ืกืขืจืืืคืืงืึทื ืืฉืืขืจ ืึธืคึผืฉืืืืื ื
ืคืืจ (11 ืฉืืืืขื): Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (ืึทืืึธื Comodo CA), eMudhra, Kamu SM, Let's Encrypt, Logius, PKIoverheid, SHECA, SSL.com
ืงืขืื (20): Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (formerly Trustwave)
ืืคืืขืืืื (2): HARICA, TurkTrust
ืกืขืจืืืคืืงืึทื ืงืึธื ืกืืืขืจืก ืึธืคึผืฉืืืืื ื
ืคึฟืึทืจ (7): ืขืคึผื, ืกืืกืงืึธ, ืืืื, ืืืืงืจืึธืกืึธืคึฟื, ืืึธืืืืืึท, ืึธืคึผืขืจืึท, 360
ืงืขืื: ืงืกื ืืืงืก
ืืคืืขืืืื: ืงืกื ืืืงืก
ืืืื CA / ืืืขืืขืจืขืจ ืคืึธืจืื ืึผืืืื, ืึท ืืึทืืืืึทืื ืืืื ืืืื ืืืืืืืืงื ืืืจื ืฆืืืื-ืืขืจืื ืคืื ืืึทืืืืึทืื ืืฉืืขืจื ืืื 50% ืคึผืืืก ืืืื ืฉืืืืขื ืฆืืืืฉื ืงืึธื ืกืืืขืจืก.
ืคืืจืืจืขืืข ืจ ืคื ื ืืืืืฆืืจื ืคืืจื ืืืืขืจืฉืคืืจื ืื ืฉืืืืขื, ืืืื ืืื ืืืืืื ืืขืฉืืืื ืคืืจ ืคืืจืืื ืขืจื ืื ืืืืืืงืืื-ืคืขืจืืื ืคืื ืื ืกืขืจืืืคืืงืืื. ืืื ืืึธื ืึทื ืคึฟืึทืจ ืขืืืขืืข ืงืึทืกืืึทืืขืจื, ืื ืงืืจืฆืขืจ ืืขืืืืขืจ ืงืขื ืืืื ืึท ืคึผืจืึธืืืขื, ืึธืืขืจ ืขืก ืืขื ืขื ืืึทื ื-ืืขืจืืื ืืืืขืจืืืื ืืขื ืขืคืืฅ.
ืืืื ืืืขื ืึธืืขืจ ืื ืืขืจื, ืื ืืื ืืืกืืจืืข ืืื ื ืึธื ื ืืฉื ืืจืืื ืฆื ืคืึทืจืงืืจืฆื ืื ืืืืืืงืืึทื ืฆืืึทื ืคืื ืกืขืจืืืคืืงืึทืฅ ืืื ืืึธืจ ืืึทืฉืืืืขื ืฆื ืึธืืึทืืืืืื ืกืึทืืืฉืึทื ื. ืกืขืจืืืคืืงืึทื ืืืืืืจืืืขืื ืืื ืงืขื ืขื ืคืึธืจืฉืืึธืื ืึทืืึท ืืึทืืื ืื ืืก, ืึธืืขืจ ืคืืืข ืงืืืืึทื ืฅ ืืึธืื ื ืึธื ื ืืฉื ืืืคึผืืึทืืขื ืึทื ืึธืืึทืืืืฉืึทื. ืืขืจืืืขืจ, ืื ืจืขืืืงืฆืืข ืคืื โโืื ืืขืจืืื ืฆื 397 ืืขื ืืื ืคึผืึธืืกืืคึผืึธืื ื ืคึฟืึทืจ ืืืฆื. ืืืขืจ ืื ืงืฉืื ืืืืืื ืึธืคึฟื.
ืืืฆื Google ืงืขื ืคึผืจืืืืจื ืฆื ืื ืกืืจืืืขื ื ืื ื ืึธืจืืึทื "ืคืึธืจืกืึทืืื", ืืื ืืื ืืขื ืคึผืจืึธืืึธืงืึธื . ืืขืจืฆื, ืขืก ืืื ืืืื ืืขืฉืืืฆื ืืืจื ืื ืืขืจืข ืืขืืืขืืึธืคึผืขืจืก: ืขืคึผื, ืืืืงืจืึธืกืึธืคึฟื, ืืึธืืืืืึท ืืื ืึธืคึผืขืจืึท.
ืืื ืก ืืขืืขื ืงืขื ืึทื ืคืื ืึธืืึทืืืืฉืึทื ืืื ืืืื ืขืจ ืคืื ืื ืคึผืจืื ืกืึทืคึผืึทืื ืืืืฃ ืืืึธืก ืื ืึทืจืืขื ืคืื ืื ื ืึทื-ื ืืฅ ืกืขืจืืึทืคืึทืงืืืฉืึทื ืฆืขื ืืขืจ Let's Encrypt ืืื ืืืืืจื. ืขืก ืืื ืคืจืื ืกืขืจืืืคืืงืึทืฅ ืฆื ืึทืืขืืขื, ืึธืืขืจ ืื ืืึทืงืกืืืื ืืขืื ืคืื ืึท ืืึทืืืืึทืื ืืื ืืืืืืขื ืฆื 90 ืืขื. ืกืขืจืืืคืืงืึทืฅ ืืึธืื ืงืืจืฅ ืืขืื :
- ืืืืืืื ื ืื ืฉืขืืืงื ืคืื ืงืึทืืคึผืจืึทืืืืื ืฉืืืกืืขื ืืื ืื ืงืขืจืขืงืืื ืืจืืืก ืกืขืจืืืคืืงืึทืฅ, ืืืืึทื ืืื ืืขื ืขื ืืขื ืืฆื ืืื ืึท ืงืืจืฆืขืจ ืฆืืื;
- ืงืืจืฅ-ืืขืืขืื ืกืขืจืืืคืืงืึทืฅ ืฉืืืฆื ืืื ืืืืืงื ืึธืืึทืืืืฉืึทื, ืืืึธืก ืืื ืืขืืึทืืจืข ื ืืืืืง ืคึฟืึทืจ ืื ืื ืคืื ื ืืฆื ืคืื HTTPS. ืืืื ืืืจ ืืืขืื ืืืืืจืืื ืื ืืื ืฆืข ืืืขืื ืืืืืข ืืืขื ืฆื ืืืืคึผืก, ืืืจ ืงืขื ืขื ื ืืฉื ืืขืจืืืึทืจืื ืื ืึทืืืื ืืกืืจืึทืืึธืจ ืคืื ืืขืืขืจ ืืืืืกืืื ื ืคึผืืึทืฅ ืฆื ืืึทื ืืืึทืื ืืขืจืืืึทื ืืืงื ืกืขืจืืืคืืงืึทืฅ. ืึทืืึธื ืกืขืจืืืคืืงืึทื ืืฉืืึทื ืก ืืื ืจืื ืืึทืื ืืืขืจื ืืึธืจ ืึธืืึทืืืืืื, ืงืืจืฆืขืจ ืืึทืืืืึทืื ืืืืคืกืืืื ืืืขื ืืืขืจื ืืขืจ ืืึทืงืืืขื ืืื ืคึผืจืึทืงืืืฉ.
ืืขืืืืื ืึทื 73,7% ืคืื ืจืืกืคึผืึทื ืืึทื ืฅ "ืืื ืฉืืืฆื" ืคืึทืจืงืืจืฆื ืื ืืืืืืงืืึทื ืฆืืึทื ืคืื ืกืขืจืืืคืืงืึทืฅ.
ืืื ืคึฟืึทืจ ืืืืืื ื ืื EV ืืืงืึทื ืคึฟืึทืจ SSL ืกืขืจืืืคืืงืึทืฅ ืืื ืื ืึทืืจืขืก ืืึทืจ, ืื ืงืึธื ืกืึธืจืืืื ืืื ื ืืฉื ืฉืืืืขื ืืืืฃ ืืขื ืึทืจืืืกืืขืื, ืืืืึทื ืื ืึทืจืืืกืืขืื ืคืื ืืืขืืขืจืขืจ ืื ืืื ืืขืืึทืืจืข ืืื ืื ืงืึทืืคึผืึทืืื ืก ืคืื ืื ืืขืืืขืืึธืคึผืขืจืก. ืืื ืกืขืคืืขืืืขืจ-ืืงืืืืขืจ, ื ืืึท ืืืขืจืกืืขืก ืคืื ืงืจืึธืื 77 โโืืื ืคืืจืขืคืึธืงืก 70 ืืืขื ืืืื ืจืขืืขืึทืกืขื, ืืืึธืก ืืืขื ืฆืื ืขืืขื EV ืกืขืจืืืคืืงืึทืฅ ืคืื ืึท ืกืคึผืขืฆืืขื ืึธืจื ืืื ืื ืืืขืืขืจืขืจ ืึทืืจืขืก ืืึทืจ. ืืึธ ืก ืืื ืื ืขื ืืขืจืื ื ืงืืงื ืืื ื ืืฆื ืื ืืขืกืงืืึทืคึผ ืืืขืจืกืืข ืคืื โโFirefox 70 ืืื ืึท ืืืึทืฉืคึผืื:
ืืื ืืขืืืขื:
ืืืขื:
ืืืื ืฆื ืืืืขืจืืืื ืขืงืกืคึผืขืจื Troy Hunt, ืจืืืืืืื ื EV ืืื ืคึฟืึธืจืืึทืฆืืข ืคืื โโืื ืึทืืจืขืก ืืึทืจ ืคืื ืืจืึทืืืขืจื .
ืืงืืจ: www.habr.com