ื“ื™ NPM ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืื™ื– ื“ื™ืคึผืจื™ืฉื™ื™ื™ื˜ื™ื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ TLS 1.0 ืื•ืŸ 1.1

GitHub ื”ืื˜ ื‘ืึทืฉืœืึธืกืŸ ืฆื• ืึธืคึผืฉื˜ืขืœืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ TLS 1.0 ืื•ืŸ 1.1 ืื™ืŸ ื“ื™ NPM ืคึผืขืงืœ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ืื•ืŸ ืึทืœืข ื–ื™ื™ื˜ืœืขืš ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ื“ื™ NPM ืคึผืขืงืœ ืคืึทืจื•ื•ืึทืœื˜ืขืจ, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ npmjs.com. ืกื˜ืึทืจื˜ื™ื ื’ 4 ืืงื˜ืื‘ืขืจ, ืงืึทื ืขืงื˜ื™ื ื’ ืฆื• ื“ื™ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื™ื ืกื˜ืึธืœื™ื ื’ ืคึผืึทืงืึทื“ื–ืฉืึทื–, ื•ื•ืขื˜ ื“ืึทืจืคืŸ ืึท ืงืœื™ืขื ื˜ ื•ื•ืึธืก ืฉื˜ื™ืฆื˜ ืœืคึผื—ื•ืช TLS 1.2. ืื•ื™ืฃ GitHub ื–ื™ืš, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ TLS 1.0/1.1 ืื™ื– ืึธืคึผื’ืขืฉื˜ืขืœื˜ ืฆื•ืจื™ืง ืื™ืŸ ืคืขื‘ืจื•ืืจ 2018. ื“ืขืจ ืžืึธื˜ื™ื•ื• ืื™ื– ื’ืขื–ืื’ื˜ ืฆื• ื–ื™ื™ืŸ ื“ื™ื™ึทื’ืข ืคึฟืึทืจ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ื–ื™ื™ึทืŸ ื‘ืึทื“ื™ื ื•ื ื’ืก ืื•ืŸ ื“ื™ ืงืึทื ืคืึทื“ืขื ืฉื™ืึทืœืึทื˜ื™ ืคื•ืŸ ื‘ืึทื ื™ืฆืขืจ ื“ืึทื˜ืŸ. ืœื•ื™ื˜ GitHub, ื•ื•ืขื’ืŸ 99% ืคื•ืŸ ืจื™ืงื•ื•ืขืก ืฆื• ื“ื™ NPM ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ื–ืขื ืขืŸ ืฉื•ื™ืŸ ื’ืขืžืื›ื˜ ืžื™ื˜ TLS 1.2 ืึธื“ืขืจ 1.3, ืื•ืŸ Node.js ื”ืื˜ ื™ื ืงืœื•ื“ืขื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ TLS 1.2 ื–ื™ื ื˜ 2013 (ื–ื™ื ื˜ ืžืขืœื“ื•ื ื’ 0.10), ืึทื–ื•ื™ ื“ื™ ืขื ื“ืขืจื•ื ื’ ื•ื•ืขื˜ ื‘ืœื•ื™ื– ื•ื•ื™ืจืงืŸ ืึท ืงืœื™ื™ืŸ ื˜ื™ื™ืœ ืคื•ืŸ ื ื™ืฆืขืจืก.

ืœืึธืžื™ืจ ืฆื•ืจื™ืงืจื•ืคืŸ ืึทื– ื“ื™ TLS 1.0 ืื•ืŸ 1.1 ืคึผืจืึธื˜ืึธืงืึธืœืก ื–ืขื ืขืŸ ืึทืคื™ืฉืึทืœื™ ืงืœืึทืกืึทืคื™ื™ื“ ื•ื•ื™ ืคืึทืจืขืœื˜ืขืจื˜ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ื“ื•ืจืš ื“ื™ IETF (Internet Engineering Task Force). ื“ื™ TLS 1.0 ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’ ืื™ื– ืืจื•ื™ืก ืื™ืŸ ื™ืื ื•ืืจ 1999. ื–ื™ื‘ืŸ ื™ืึธืจ ืฉืคึผืขื˜ืขืจ, ื“ื™ TLS 1.1 ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืื™ื– ื‘ืืคืจื™ื™ื˜ ืžื™ื˜ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื™ืžืคึผืจื•ื•ื•ืžืึทื ืฅ ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ืขืจ ื“ื•ืจ ืคื•ืŸ ื™ื ื™ื˜ื™ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ื•ื•ืขืงื˜ืึธืจืก ืื•ืŸ ื•ื•ืึทื˜ืŸ. ืฆื•ื•ื™ืฉืŸ ื“ื™ ื”ื•ื™ืคึผื˜ ืคืจืื‘ืœืขืžืขืŸ ืคื•ืŸ TLS 1.0 / 1.1 ืื™ื– ื“ื™ ืคืขืœืŸ ืคื•ืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืžืึธื“ืขืจืŸ ืกื™ืคืขืจืก (ืœืžืฉืœ, ECDHE ืื•ืŸ AEAD) ืื•ืŸ ื“ื™ ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืื™ืŸ ื“ื™ ืกืคึผืขืกืึทืคืึทืงื™ื™ืฉืึทื ื– ืคื•ืŸ ืึท ืคืึธื“ืขืจื•ื ื’ ืฆื• ืฉื˜ื™ืฆืŸ ืึทืœื˜ ืกื™ืคืขืจืก, ื“ื™ ืจื™ืœื™ื™ืึทื‘ื™ืœืึทื˜ื™ ืคื•ืŸ ื•ื•ืึธืก ืื™ื– ืงื•ื•ืขืกื˜ืฉืึทื ื“ ืื™ืŸ ื“ื™ ืงืจืึทื ื˜ ื‘ื™ื ืข ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ืงืึทืžืคึผื™ื•ื˜ื™ื ื’ ื˜ืขื›ื ืึธืœืึธื’ื™ืข (ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA ืื™ื– ืคืืจืœืื ื’ื˜ ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืื•ืŸ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื ื™ืฆื˜ MD5 ืื•ืŸ SHA-1). ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืึทื•ื˜ื“ื™ื™ื˜ื™ื“ ืึทืœื’ืขืจื™ื“ืึทืžื– ื”ืื˜ ืฉื•ื™ืŸ ื’ืขืคึฟื™ืจื˜ ืฆื• ืึทื˜ืึทืงืก ืึทื–ืึท ื•ื•ื™ ROBOT, DROWN, BEAST, Logjam ืื•ืŸ FREAK. ืึธื‘ืขืจ, ื“ื™ ืคึผืจืึธื‘ืœืขืžืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ื’ืœื™ื™ืš ื’ืขืจืขื›ื ื˜ ื•ื•ื™ ืคึผืจืึธื˜ืึธืงืึธืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื•ืŸ ื–ืขื ืขืŸ ืจื™ื–ืึทืœื•ื•ื“ ืื•ื™ืฃ ื“ืขืจ ืžื“ืจื’ื” ืคื•ืŸ ื–ื™ื™ึทืŸ ื™ืžืคึผืœืึทืžืึทื ืฅ. ื“ื™ TLS 1.0/1.1 ืคึผืจืึธื˜ืึธืงืึธืœืก ื–ื™ืš ืคืขืœืŸ ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืคึผืจืึทืงื˜ื™ืฉ ืื ืคืืœืŸ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’