IFirefox iqale ukungenisa izitifiketi zezimpande ku-Windows

Isitolo sesitifiketi seFirefox

Ngokukhishwa kweMozilla Firefox 65 ngoFebhuwari 2019, abanye abasebenzisi bahlangabezane nakho waqala ukuqaphela amaphutha njengokuthi “Ukuxhumeka kwakho akuvikelekile” noma “SEC_ERROR_UNKNOWN_ISSUER”. Isizathu siphenduke ama-antivirus afana ne-Avast, i-Bitdefender ne-Kaspersky, efaka izitifiketi zabo zezimpande kukhompyutha ukuze zisebenzise i-MiTM kuthrafikhi ye-HTTPS yomsebenzisi. Futhi njengoba iFirefox inesitolo sayo sezitifiketi, bayazama ukuyingena nayo.

Onjiniyela besiphequluli kudala befona abasebenzisi ukwenqaba ukufaka ama-antivirus enkampani yangaphandle aphazamisa ukusebenza kweziphequluli nezinye izinhlelo, kodwa izethameli eziningi azikakazilaleli izingcingo. Ngeshwa, ngokusebenza njengommeleli osobala, ama-antivirus amaningi anciphisa ikhwalithi yokuvikelwa kwe-cryptographic kumakhompyutha amaklayenti. Ngale njongo, sithuthukisa Amathuluzi okutholwa kwe-HTTPS, okuthi ohlangothini lweseva ithole ukuba khona kwe-MiTM, njenge-antivirus, esiteshini phakathi kweklayenti neseva.

Ngandlela thize, kulokhu, ama-antivirus aphinde aphazamisa isiphequluli, futhi iFirefox yayingenakho ukukhetha ngaphandle kokuxazulula inkinga ngokwayo. Kukhona ukulungiselelwa kuzilungiselelo zesiphequluli security.enterprise_roots.enabled. Uma unika amandla leli fulegi, iFirefox izoqala ukusebenzisa isitolo sesitifiketi se-Windows ukuze iqinisekise ukuxhumana kwe-SSL. Uma othile ehlangabezana namaphutha ashiwo ngenhla lapho evakashela amasayithi e-HTTPS, ungakwazi ukukhubaza ukuskena kokuxhumeka kwe-SSL ku-antivirus yakho, noma usethe le fulegi mathupha kuzilungiselelo zesiphequluli sakho.

Inkinga kuxoxiwe ku-tracker yesiphazamisi ye-Mozilla. Onjiniyela banqume ukwenza ifulegi lisebenze ngezinjongo zokuhlola security.enterprise_roots.enabled ngokuzenzakalelayo ukuze isitolo sesitifiketi se-Windows sisetshenziswe ngaphandle kwesenzo somsebenzisi esengeziwe. Lokhu kuzokwenzeka kusukela kunguqulo ye-Firefox 66 ku-Windows 8 kanye ne-Windows 10 izinhlelo lapho ama-antivirus enkampani yangaphandle efakwe khona (i-API ikuvumela ukuthi unqume ukuba khona kwe-antivirus ohlelweni kuphela enguqulweni ye-Windows 8).

Source: www.habr.com