Ngenani elikhulu lohlaselo olujolise kwiiwebhusayithi, akukho mfuneko yakukhumbula loo nto enye yeendlela ezibalulekileyo Ukuthintela uhlaselo olunjalo kuhlala ukwamkelwa amanyathelo zokhuseleko ezifana ufihlo lwewebhusayithi.
Kukule meko ukuba Ngo-2015 kuye kwasungulwa iinkonzo zoluntu yegunya lezatifikethi Makhe Encrypt, enika izixhobo kweli cala ngokubonelelwa kweendlela ezizisebenzelayo zofakelo kunye nohlaziyo lwezatifikethi zasimahla. ye TLS iprotocol yoguqulelo oluntsonkothileyo.
Ukuququzelela ukuthunyelwa kunye nokwamkelwa kwe-HTTPS kwiwebhu, Igunya usebenzise iindlela ezahlukeneyo zobuchule. Umzekelo, ngoguqulelo lwesi-2 lwe-ACME (Imeko-bume yoLawulo lweSiqinisekiso esiZizimelayo) ibonelele “ngezatifikethi ze-wildcard” simahla ukusukela ngoMatshi ka-2018.
Zenzelwe ukukhusela naliphi na inani le-subdomains yesizinda esisisiseko. Ngamanye amazwi, ngezi zatifikethi eziqhelekileyo, abalawuli banokusebenzisa isatifikethi esinye kunye nesibini esiphambili sesizinda kunye nawo onke ama-subdomains aso, kwaye abasayi kubhalisa ngabanye isatifikethi kwidilesi yewebhu nganye njengoko kwakunjalo kude kube ngoku. 'ngaloo mzuzu.
Masibhale ngokufihlakeleyo umthamo omkhulu wezatifikethi zasimahla ngosuku ngo-2016, ngamanye amaxesha bagqithise kwi-100.000 yezatifikethi zamanqaku ngosuku. Ekupheleni kukaJuni 2017, igunya libonise ukuba liphumelele izatifikethi ze-100 yezigidi ukususela ekuqalisweni kwayo ngoDisemba 2015. Khumbula ukuba ngoFebruwari 2017, Masibhale i-Encrypt isetyenziswe yi-13,70% yeendawo ezibhalisiweyo zesiFrentshi.
NgoFebruwari ka-2020, Masibethele ingxelo ngokuzisa izatifikethi zebhiliyoni enye kwiwebhu. Isibhengezo senziwe nguJosh Aas kunye noSarah Gran kwibhlog yenkampani:
“Sikhuphe isatifikethi sethu sebhiliyoni nge-27 kaFebruwari 2020. Siza kusebenzisa eli nani likhulu njengethuba lokucinga ngento etshintshileyo kuthi nakwi-Intanethi, ekhokelele kulo msitho. Ngokukodwa, sifuna ukuthetha ngento eyenzekileyo ukusukela oko sigqibele ukuthetha ngenani elikhulu lezatifikethi - ikhulu lezigidi.
"Into enye eyahlukileyo ngoku kukuba iwebhu ifihliwe ngakumbi kunangaphambili. Ukususela ngoJuni 2017, malunga ne-58% yemithwalo yephepha esetyenziselwa i-HTTPS emhlabeni jikelele, i-64% e-United States. Namhlanje, i-81% yokulayishwa kwephepha isebenzisa i-HTTPS kwihlabathi jikelele, kwaye sikwi-91% e-United States! Yimpumelelo engakholelekiyo. Kukwabucala ngakumbi kunye nokhuseleko lomntu wonke.
Nge-ACME, i-ZeroSSL ijoyine iqela elincinci labasemagunyeni isiqinisekiso Banikezela ngezatifikethi zasimahla zeentsuku ezingama-90 nge-ACME. Njengoko kuchaziwe kwindawo, unokukhetha ukukhusela iiwebhusayithi zakho usebenzisa izatifikethi ze-SSL iintsuku ezingama-90 ngaphandle kweendleko xa ubhalisa kwisicwangciso sasimahla seZeroSSL. Ukuqinisekisa isatifikethi kuthatha imizuzu embalwa kuphela kwaye ukufakela kulula njengoko kufumaneka ngemiyalelo kwinqanaba ngalinye lendlela.
Abasebenzisi nabo banokwakha ukuthembana, Khusela ukuthengiselana kwabathengi kwaye uhlale uphambi kwezoyikiso zewebhu ngokusebenzisa izatifikethi ze-ZeroSSL Premium SSL zonyaka omnye okanye ngaphezulu, ezixhasa izatifikethi ze-wildcard kwaye uthathe ngaphantsi kwemizuzu eyi-10 ukuyifaka.
Ukuqaliswa komgaqo we-SSL ivumela utshintshiselwano lwedatha phakathi kwewebhusayithi kunye nabasebenzisi be-Intanethi. Ukhuseleko oluye lwaba yimfuneko emehlweni abasebenzisi.
Iprothokholi ye-ACME (emele Imekobume yoLawulo lweSitifiketi esizenzekelayo, ngokoqobo "imekobume yolawulo lwesatifikethi esizenzekelayo") yiprothokholi yonxibelelwano ukwenza utshintshiselwano oluzenzekelayo phakathi kwabasemagunyeni bezatifikethi kunye nabanini beseva yewebhu.
Ukufumana amagunya okuqinisekisa ngakumbi ukuxhasa i-ACME ngale ndlela ayithethi malunga nokubiza ukuba i-Let Encrypt irhoxiswe, kodwa malunga nokuba neyantlukwano ngakumbi kwi-ecosystem kunye nokwenza ukuba ithembeke ngakumbi.
Masi-Encrypt sinokuzifumana kwimeko yentlekele (ukusuka kwimpazamo elula ukuya kwisigqibo sokuyeka ukusebenza).
Nokuba kwenzeka ntoni na, nokuba imeko yentlekele ingenzeki, kuhlala kungcono ukuba neenketho kwaye yile nto inikela njengeZeroSSL.
Kufuneka kwakhona ucinge ukuba kulula kangakanani ukutshintsha ii-ACs, ezinokuthi zibe ngumsebenzi onzima.