Izindlela zokubhala nge-ACME ziyakhula

Ngenani elikhulu lokuhlaselwa okubhekiswe kumawebhusayithi, asikho isidingo sokukhumbula lokho enye yezindlela ezibalulekile Ukuvimbela lokho kuhlaselwa kuhlala kusetshenziswa izindlela zokuphepha ezifana Ukubethela iwebhusayithi.

Kukulesi simo lapho imisebenzi yomphakathi yethulwa ngonyaka wezi-2015 kusuka kugunya lesitifiketi Masibethele, okunikeza amathuluzi kule ndlela ngokunikezwa kwezindlela ezizenzakalelayo zokufaka nokuvuselela izitifiketi zamahhala. yenqubo yokubethela ye-TLS.

Ukwenza lula ukuthunyelwa nokwamukelwa kwe-HTTPS kuwebhu, Igunya usebenzise amasu ahlukene. Isibonelo, ngohlobo 2 lwephrothokholi ye-ACME (Automated Certificate Management Environment), inikeze "izitifiketi ze-wildcard" mahhala kusukela ngoMashi 2018.

Zenzelwe ukuvikela noma yiliphi inani lama-subdomains wesizinda esiyisisekelo. Ngamanye amagama, ngalezi zitifiketi ezijwayelekile, abaphathi bangasebenzisa isitifiketi esisodwa namabhangqa ayisihluthulelo esizindeni nakuzo zonke izizinda zaso, futhi abasakwazi ukubhalisa isitifiketi sekheli ngalinye lewebhu njengoba bekulokhu kuze kube manje. 'ngaleso sikhathi.

Masibethelwe sisabalalise ivolumu enkulu yezitifiketi zamahhala ngosuku ngo-2016 kwesinye isikhathi kweqa uphawu lwesitifiketi esingu-100.000 ngosuku. Ekupheleni kukaJuni 2017, isiphathimandla sikhombisile ukuthi sesiphasise izitifiketi eziyizigidi eziyi-100 selokhu yethulwa ngoDisemba 2015. Khumbula ukuthi ngoFebhuwari 2017, i-Let Encrypt yayisetshenziswa yi-13,70% yazo zonke izizinda ezibhalisiwe zaseFrance.

NgoFebhuwari 2020, i-Let Encrypt ibike ukuletha izitifiketi eziyi-XNUMX billion kuwebhu. Isimemezelo senziwe nguJosh Aas noSarah Gran kubhulogi yenkampani:

“Sikhiphe isitifiketi sethu se-27 billionth ngoFebhuwari 2020, XNUMX. Sizosebenzisa le nombolo enkulu eyindilinga njengethuba lokucabanga ngokushintshile kithina nakwi-Intanethi, okuholele kulo mcimbi. Ikakhulu, sifuna ukukhuluma ngokwenzekile selokhu sagcina ukukhuluma ngenani elikhulu lezitifiketi: izigidi eziyikhulu.

“Into ehlukile manje ukuthi iwebhu ibhalwe ngokufihliwe kakhulu kunakuqala. NgoJuni 2017, cishe i-58% yemithwalo yamakhasi yayisebenzisa i-HTTPS emhlabeni jikelele, ama-64% e-United States. Namuhla, i-81% yemithwalo yamakhasi isebenzisa i-HTTPS emhlabeni wonke, futhi siyi-91% e-United States! Kuyimpumelelo emangalisayo. Kuyimfihlo kakhulu nokuvikeleka kwawo wonke umuntu.

Nge-ACME, iZeroSSL ijoyine iqembu elincane leziphathimandla isitifiketi Banikela ngezitifiketi zamahhala zezinsuku ezingama-90 nge-ACME. Njengoba kushiwo kusayithi, unenketho yokuvikela amawebhusayithi akho usebenzisa izitifiketi ze-SSL izinsuku ezingama-90 ngaphandle kwenkokhiso ngokubhalisela uhlelo lwamahhala lweZeroSSL. Ukuqinisekisa isitifiketi kuthatha kuphela imizuzu embalwa futhi ukufakwa kulula njengoba kunemiyalo yonke indlela yendlela.

Abasebenzisi futhi bangakha ukwethembana, uvikele ukuthengiselana kwamakhasimende futhi uhlale uphambili ezinsongweni zewebhu ngokusebenzisa izitifiketi zonyaka owodwa zeZeroSSL Premium SSL esizindeni esisodwa noma ngaphezulu, ezisekela izitifiketi ze-wildcard futhi zithathe ngaphansi kwemizuzu eyi-10 ukufaka.

Ukwenza kusebenze umthetho olandelwayo we-SSL ivumela ukuqinisekisa ukushintshaniswa kwedatha phakathi kwewebhusayithi nabasebenzisi be-Intanethi. Ukuphepha osekubalulekile emehlweni wabasebenzisi.

Iphrothokholi ye-ACME (okusho ukuthi i-Automatic Certificate Management Environment, ngokwezwi nezwi "Indawo Yokulawulwa Kwesitifiketi Esizenzakalelayo") umthetho olandelwayo wokuxhumana ukwenza ukushintshana phakathi kweziphathimandla zezitifiketi nabanikazi be-web server.

Ukuthola iziphathimandla zesitifiketi ezengeziwe zokuxhasa i-ACME ngale ndlela akukhona mayelana nokucela ukuyeka ukusebenzisa i-Let Encrypt, kepha kumayelana nokuhlukahluka okuningi ku-ecosystem nokwenza ukuthi ithembeke kakhulu.

I-Let Encrypt ingazithola isesimweni senhlekelele (kusuka ephutheni elilula kuya esinqumweni sokumisa ukusebenza).

Noma yini eyenzekayo, noma ngabe isimo senhlekelele singenzeki, kuhlala kungcono ukuba nezinketho futhi yilokhu okunikezwayo okufana nokunikezwa kweZeroSSL.

Kufanele futhi ucabangele ukuthi kulula kanjani ukushintsha ama-AC, okungaba umsebenzi omncane.


Okuqukethwe yi-athikili kunamathela ezimisweni zethu ze izimiso zokuhlelela. Ukubika iphutha chofoza lapha.

Yiba ngowokuqala ukuphawula

Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe.

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.

i-bool(iqiniso)