Masibethele sixazulule inkinga yesitifiketi kumadivayisi amadala we-Android

lets-Bethela

Emasontweni athile edlule sabelana lapha kubhulogi izindaba ezithi Masibethele (inhlangano engenzi nzuzo, elawulwa ngumphakathi enikezela izitifiketi mahhala kuwo wonke umuntu) uxwayise abasebenzisi ngenguquko eseduze ekwakhiweni kwesiginesha, okungadala izinkinga futhi ikakhulukazi ukulahleka kokuhambisana cishe nama-33% wamadivayisi we-Android asetshenziswayo.

Futhi lokhu kungenxa yokuthi likhangise ushintsho ekwenzeni amasiginesha lisebenzisa isitifiketi salo sezimpande kuphela, ngaphandle kokusebenzisa isitifiketi esisayinwe ngokushaywa yisiphathimandla sesitifiketi se-IdenTrust.

Kwashiwo ukuthi kusukela ngoJanuwari 11, 2021, kuzokwenziwa izinguquko ku-Let Encrypt API futhi ngokuzenzakalela, amakhasimende e-ACME azothola izitifiketi ze-ISRG Root X1 ngaphandle kokusayina.

Uhlobo olusha lwesitifiketi sezimpande se-Let Encrypt sashiwo ukuthi sisebenzisana nazo zonke iziphequluli zesimanje, kepha saziwa kuphela nge-Android 7.1.1, ekhishwe ekupheleni kuka-2016 (uma ufuna ukwazi kabanzi ngezindaba, ungaxhumana ukushicilelwa Kulesi sixhumanisi esilandelayo).

Kodwa manje, I-Let Encrypt imemezele ukuthi uhlelo selubuyekeziwe futhi lokho kuhambisana namadivayisi amadala we-Android kuzoqhubeka okungenani eminye iminyaka emithathu.

Ushintsho lwe-API ihlelelwe uJanuwari 11, okusho ukuguqukela ekukhishweni okuzenzakalelayo kwezitifiketi eziqinisekiswe kuphela isitifiketi sempande ISRG Root X1, ngaphandle kwesiginesha, lihlehliselwe uJuni 2021.

Siyajabula ukumemezela ukuthi sesisungule indlela yamadivayisi we-Android amadala okugcina amandla awo okuvakashela amasayithi asebenzisa izitifiketi ze-Let Encrypt ngemuva kokuphela kwabathengisi bethu abasayinile. Asisahleleli noma yiziphi izinguquko ngoJanuwari ezingadala izingqinamba zokuhambisana kwababhalisile be-Let's Encrypt.

Ngesikhathi esifanayo, kwanqunywa njengenketho yokunikeza ithuba lokucela esinye isitifiketi, iqinisekiswe ngokwesikimu esidala sokuqinisekisa ukuwela nokugcinwa kokuhambisana namadivayisi esitolo sesitifiketi sezimpande isitifiketi esithi Asibethele asangezwanga kuso.

Kuzokwenziwa esinye isitifiketi ngasekupheleni kukaJanuwari noma ekuqaleni kukaFebhuwari 2021 njengengxenye yesivumelwano esingeziwe negunya lesitifiketi se-IdenTrust. Ngaphezu kwesitifiketi sempande se-ISRG Root X1 esinge-Encrypt, lesi sitifiketi sizosayinwa kusetshenziswa isitifiketi se-DST Root CA X3 esivela ku-IdenTrust.

Isiginesha yesiphambano kuzoba semthethweni iminyaka emithathu, esingaphansi kwesikhathi sokusebenza kwesitifiketi esiyimpande esiyinhloko i-ISRG Root X1.

Njengoba ukusayinda kuzophelelwa yisikhathi ngaphambi kwesiginesha ngesitifiketi esiyinhloko se-Let Encrypt, kungenzeka ukuthi izinkinga ezifana nesigameko sokuphela kwesitifiketi sempande se-AddTrust esisetshenziselwe ukusayinda izitifiketi zesiphathimandla sesitifiketi seSectigo (iComodo ).

Iziphequluli ziphathe kahle ukuphelelwa yisikhathi kwesitifiketi se-AddTrust, kepha kubangele ukuphahlazeka okukhulu kuzinhlelo ze-OpenSSL ne-GnuTLS, noma isitifiketi esiyinhloko seComodo besisasebenza futhi nohlu lokuthembana nesitifiketi samanje luqhubekile.

Ukuqinisekisa ukuthi isitifiketi esisha esithi Asibethele asizenzi izingqinamba ezifanayo zokuhambisana, iziphathimandla zesitifiketi se-IdenTrust ne-Let Encrypt zihlose ukubuyekeza uhlelo olusetshenzisiwe kusetshenziswa abacwaningi mabhuku bangaphandle.

Njengesikhumbuzo, isitifiketi sezimpande se-Let Encrypt siyasebenzisana nazo zonke iziphequluli zesimanje, kepha saziwa kuphela njengeplatifomu ye-Android 7.1.1, ekhishwe ekupheleni kuka-2016. Ngokwezibalo ezitholakalayo, kuphela u-66,2% wazo zonke Amadivayisi we-Android asebenzisa i-Android 7.1 nezinguqulo ezintsha.

Ama-33,8% wamadivayisi we-Android asetshenziswayo awanayo idatha evela kusitifiketi sempande esithi As Encrypt, okungukuthi, adinga isitifiketi esisayiniwe ngokungeziwe nesitifiketi sempande esihambisana nezinguqulo zangaphambilini ze-Android ukuze siqhubeke sisebenze kahle. Uma uzama ukuvula amasayithi asayinwe kuphela ngesitifiketi se-Let Encrypt root kulawo madivayisi, kuzovela iphutha.

Ekugcineni, uma unesifiso sokwazi okwengeziwe ngakho Ungahlola imininingwane yezindaba kumbhalo wokuqala ongafinyelela kuwo isixhumanisi esilandelayo.


Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.