I-Firefox isiqalile ukungenisa izitifiketi zezimpande kusuka ku- Windows

Isitolo sesitifiketi seFirefox

Ngokukhishwa kweMozilla Firefox 65 ngoFebhuwari 2019, abanye abasebenzisi bahlangabezane nakho waqala ukuqaphela amaphutha njengokuthi “Ukuxhumeka kwakho akuvikelekile” noma “SEC_ERROR_UNKNOWN_ISSUER”. Isizathu siphenduke ama-antivirus afana ne-Avast, i-Bitdefender ne-Kaspersky, efaka izitifiketi zabo zezimpande kukhompyutha ukuze zisebenzise i-MiTM kuthrafikhi ye-HTTPS yomsebenzisi. Futhi njengoba iFirefox inesitolo sayo sezitifiketi, bayazama ukuyingena nayo.

Onjiniyela besiphequluli kudala befona abasebenzisi ukwenqaba ukufaka ama-antivirus enkampani yangaphandle aphazamisa ukusebenza kweziphequluli nezinye izinhlelo, kodwa izethameli eziningi azikakazilaleli izingcingo. Ngeshwa, ngokusebenza njengommeleli osobala, ama-antivirus amaningi anciphisa ikhwalithi yokuvikelwa kwe-cryptographic kumakhompyutha amaklayenti. Ngale njongo, sithuthukisa Amathuluzi okutholwa kwe-HTTPS, okuthi ohlangothini lweseva ithole ukuba khona kwe-MiTM, njenge-antivirus, esiteshini phakathi kweklayenti neseva.

Ngandlela thize, kulokhu, ama-antivirus aphinde aphazamisa isiphequluli, futhi iFirefox yayingenakho ukukhetha ngaphandle kokuxazulula inkinga ngokwayo. Kukhona ukulungiselelwa kuzilungiselelo zesiphequluli security.enterprise_roots.enabledUma uvula leli fulegi, iFirefox izoqala ukusebenzisa isitolo sesitifiketi. Windows ukuqinisekisa ukuxhumeka kwe-SSL. Uma othile ehlangabezana namaphutha ashiwo ngenhla lapho evakashela amawebhusayithi e-HTTPS, angakhubaza ukuskena kokuxhumeka kwe-SSL kusofthiwe yakhe yokulwa namagciwane noma avumele le mbonakaliso ngesandla kuzilungiselelo zesiphequluli sakhe.

Inkinga kuxoxiwe ku-tracker yesiphazamisi ye-Mozilla. Onjiniyela banqume ukwenza ifulegi lisebenze ngezinjongo zokuhlola security.enterprise_roots.enabled ngokuzenzakalelayo, ukugcina izitifiketi Windows kusetshenziswe ngaphandle kwesenzo esengeziwe esivela kumsebenzisi. Lokhu kuzokwenzeka kusukela ku-Firefox 66 kumasistimu Windows 8 no Windows 10, lapho kufakwa khona ama-antivirus eqembu lesithathu (i-API ikuvumela ukuthi uthole ukuba khona kwe-antivirus ohlelweni kusukela kunguqulo kuphela Windows 8).

Source: www.habr.com