Google Chrome
Google yakayambira nezvekuchinja kwemaitiro ekubata zvakavhenganiswa zvemukati pamapeji akavhurwa kuburikidza neHTTPS. Pakutanga, dai paive nezvikamu pamapeji akavhurika neHTTPS yakatakurwa isina kunyorera (uchishandisa iyo http: // protocol), yakakurumidza kuratidzwa.
Ikozvino, kune anotevera mavhezheni ebhurawuza, zvakatemwa kudzivirira kuvharirwa kwezviwanikwa izvi default. Naizvozvo, zvichave nechokwadi kuti iwo mapeji anovhurwa kuburikidza ne "https: //" ane zviwanikwa chete zvakatakurwa kuburikidza nechengetedzo yekutaurirana chiteshi.
Izvo zvinoonekwa kuti parizvino vashandisi veChannel vanovhura anopfuura makumi mapfumbamwe muzana emasaiti vachishandisa HTTPS. Kuvapo kwekuiswa kwakadhindwa pasina encryption kunogadzira kutyisidzira kwekutyora kuburikidza nekushandurwa kwekuchengetedzeka zvemukati pamberi pekutonga pamusoro pekamuri yekutaurirana (semuenzaniso, kana uchibatanidza kuburikidza yakavhurika Wi-Fi).
Iyo yakasanganiswa yemukati chiratidzo inoonekwa seisingabatsiri uye inotsausa, sezvo isingape kuongororwa kusinganzwisisike kwekuchengetedzeka kwepeji.
Iye zvino, mhando dzine njodzi zvakanyanya yezvinhu zvakasanganiswa, senge zvinyorwa uye iframes, zvatovharirwa nekutadza, asi mifananidzo, mafaira enzwi uye mavhidhiyo anogona kutorwa kuburikidza "http: //".
Nekutsiva mifananidzo, anorwisa anogona kutsiva zviito zvekutevera zvekuki, edza kushandisa zvakashata mumashandisirwo emifananidzo kana kuita zvekunyepedzera, kutsiva ruzivo rwunoratidzwa mumufananidzo.
Kuunzwa kwe blockade kwakakamurwa muzvikamu zvinoverengeka. Mu Chrome 79 (iyo yakarongerwa Zvita 10), Kugadziridza kutsva kuchaonekwa kunozodzivirira kuvharirwa kwenzvimbo dzakananga.
Iwo marongero akataurwa anozoiswa kune zvakasanganiswa zvemukati zvakatovharwa, senge zvinyorwa uye mafiramu uye zvichagadziriswa kuburikidza nemenyu inoonekwa kana iwe ukabaya chiratidzo chekiyi, uchitsiva chiratidzo chakambotaurwa chekudzima kukiya.
Paunenge uri weChannel 80 (inotarisirwa muna Kukadzi 4) chirongwa chekukiya chinoshandiswa kune maodhiyo nemavhidhiyo mafaera, iyo inosanganisira otomatiki kutsiva kubva http: // kusvika https: // iyo ichaita kuti irambe ichishanda kana dambudziko dambudziko riripo zvakare kuburikidza neHTTPS.
Mifananidzo icharamba ichiisa isina kuchinjika, asi kana uchirodha pasi kuburikidza ne http: // pa https: // mapeji eiyo peji rese, chiratidzo chekubatana chisina kuchengeteka chinotanga. Yekutsiva otomatiki ne https kana bhuroka mifananidzo, saiti vanogadzira vanozokwanisa kushandisa yakagadziridzwa-isina kuchengetedzeka-zvikumbiro-uye vharira-zvese-zvemukati-zvakasanganiswa CSP zvivakwa.
Kuvhurwa kwe Chrome 81, yakarongerwa Kurume 17, inoshandisa AutoCorrect kubva http: // kusvika https: // zvekusanganiswa kwemifananidzo kurodha pasi.
Uye zvakare, Google yakazivisa kusangana mune imwe yeanotevera mavhezheni eCome browser, chinhu chitsva che Password Kuongorora, yakambogadzirwa seyekunze plugin.
Iko kusanganisa kunozotungamira pakuonekwa mune yakazara-nguva password password Chrome zvishandiso kuongorora kuvimbika kwemapassword akashandiswa nemushandisi. Paunoyedza kuisa chero saiti, iro zita rekushandisa nephasiwedi zvichasimbiswa zvichipesana nedhatabhesi yemaakaunzi akanganiswa pamwe neyambiro kana paine matambudziko.
Kusimbiswa kunoitika pane dhatabhesi inovhara anopfuura mabhiriyoni mana maakaunzi akaomeswa izvo zvinoonekwa mukudonha kwedatabhesi revashandisi. Yambiro ichaoneswawo paunenge uchiedza kushandisa mapassword asina basa akadai se "abc123" (Google statistics 23% yevaAmerican vanoshandisa aya mapassword), kana pavanoshandisa password imwechete pane akawanda masayiti.
Kuchengetedza zvakavanzika, kana uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinako Iyo yakazara hashi yakavharidzirwa nekiyi inogadzirwa nemushandisi.
Iyo yekutanga hashes mudura reGoogle yakawedzera zvakare yakavharidzirwa uye chete maviri ekutanga mabheti eiyo hash anosara ekunongedzera.
Kuchengetedza kuti usatarise zvirimo zveakakanganiswa dhatabhesi dhatabhesi nekuverenga neakasarudzika prefixes, iyo yakadzoserwa data yakavharidzirwa zvine chekuita nekiyi inogadzirwa zvichibva pane yakasimbiswa login uye password chinongedzo.
mabviro: https://security.googleblog.com