KuFirefox 70, amakhasi avulwe nge-HTTP azoqala ukumakwa njengangaphephile

Onjiniyela beFirefox kwethulwe Uhlelo lweFirefox lokuya ekumaka wonke amakhasi avulwe phezu kwe-HTTP ngenkomba yokuxhumana engavikelekile. Ushintsho luhlelelwe ukusebenza kuFirefox 70, ehlelelwe u-Okthoba 22nd. Ku-Chrome, isexwayiso esiyinkomba mayelana nokusungulwa kokuxhumeka okungavikelekile sibonisiwe emakhasini avulwe nge-HTTP kusukela ekukhululweni.
I-Chrome 68, ehlongozwa ngoJulayi odlule.

Futhi kuFirefox 70 kuhlelwe susa inkinobho ethi “(i)” kubha yekheli, uzibeke umkhawulo ekubekeni unomphela inkomba yezinga lokuphepha lokuxhuma, elikuvumela futhi ukuthi uhlole isimo sezindlela zokuvimbela ikhodi ukuze ulandelele ukunyakaza. Ku-HTTP, isithonjana senkinga yokuvikeleka sizoboniswa ngokucacile, esizophinde siboniswe ku-FTP nasezimeni zezinkinga zesitifiketi:

Kulindeleke ukuthi ukubonisa inkomba yokuxhumeka okungavikelekile kuzokhuthaza abanikazi besayithi ukuthi bashintshele ku-HTTPS ngokuzenzakalelayo. Ngu izibalo Isevisi yeFirefox Telemetry, isabelo somhlaba wonke sezicelo zekhasi nge-HTTPS singama-78.6%
(ngonyaka odlule 70.3%, eminyakeni emibili edlule 59.7%), futhi e-USA - 87.6%. I-Let Encrypt, inhlangano engenzi nzuzo, yesitifiketi esilawulwa umphakathi esihlinzeka ngezitifiketi mahhala kunoma ubani, ikhiphe izitifiketi eziyizigidi ezingu-106 ezihlanganisa izizinda ezingaba yizigidi ezingu-174 (kusuka ezizindeni eziyizigidi ezingu-80 ngonyaka odlule).

Isinyathelo sokumaka i-HTTP njengengavikelekile siyaqhubeka nemizamo yangaphambilini yokuphoqelela ukushintshela ku-HTTPS kuFirefox. Isibonelo, ukuqala ngokukhululwa I-Firefox 51 Inkomba yenkinga yezokuphepha yengeziwe esipheqululini, esiboniswa lapho ufinyelela amakhasi aqukethe amafomu okuqinisekisa ngaphandle kokusebenzisa i-HTTPS. Futhi waqala imikhawulo ukufinyelela kuma-Web API amasha - ku I-Firefox 67 emakhasini avulwe ngaphandle komongo ovikelekile, izaziso zesistimu zinqatshelwe ukuthi ziboniswe nge-Notiifications API, futhi I-Firefox 68 ngezingcingo ezingavikelekile, izicelo zokushayela i-getUserMedia() ukuze uthole ukufinyelela emithonjeni yemidiya (isibonelo, ikhamera nemakrofoni) zivaliwe. Ifulegi elithi “security.insecure_connection_icon.enabled” liphinde langezwa ngaphambilini kokuthi mayelana:kuzilungiselelo, okukuvumela ukuthi ukhethe ngokukhetha ifulegi loxhumano olungavikelekile lwe-HTTP.

Source: opennet.ru