Muva nje Abathuthukisi beMozilla abaphethe iphrojekthi yesiphequluli seFirefox wethule uhlelo lokuguqula isiphequluli seFirefox kumaki wonke amakhasi avulekile ku-HTTP ngenkomba yokuxhuma okungaphephile.
Ngamagama ambalwa, noma ngabe yiliphi lelo khasi, bonke labo abangewona ama-https (abanaso isitifiketi se-SSL) bazomakwa njengabangaphephile kumsebenzisi wesiphequluli.
IFirefox isebenzisa izindlela zokulwa namakhasi angenazo izitifiketi ze-SSL
Kuze kube manje, isiphequluli sikhombise kuphela "ukungavikeleki" wonke lawo makhasi we-HTTP aqukethe amafomu noma izinkambu zokungena ngemvume.
IMozilla ikholelwa ukuthi njengoba ngaphezu kwama-80% awo wonke amakhasi we-Intanethi manje eseku-HTTPS, abasebenzisi abasadingi inkomba enhle yalokhu okwedlule, kepha inkomba engemihle yokuxhumeka kwe-HTTP.
Ngaphakathi umncintiswano omkhulu weFirefox (I-Chrome), okukhipha inkomba yokuxwayisa ukusungulwa Ukuxhumeka okungavikelekile kwamakhasi asuselwa ku-HTTP kuboniswa njengokukhishwa kwe-Chrome 68.
Lesi sinyathelo sokumaka amakhasi we-HTTP njengokungavikeleki yiFirefox akuyona into entsha.njengoba lo mzamo omusha ungukuqhubeka kwemizamo yangaphambilini yokuphoqelela ukushintshela ku-HTTPS kuFirefox.
Isibonelo, Kusukela kukhishwe i-Firefox version 51, inkomba yenkinga yezokuphepha ingeziwe esipheqululini, iboniswa lapho abasebenzisi be-non-HTTPS befinyelela amakhasi aqukethe amafomu okuqinisekisa
Futhi abantu beFirefox bakhethe ukuqala ukukhawulela ukufinyelela kuma-API amasha wewebhu, kuFirefox 67 yamakhasi avulekile ngaphandle komongo ovikelekile, ukukhishwa kwezaziso zohlelo nge-API yezaziso akuvunyelwe.
Futhi ku-Firefox version 68 ngesikhathi sezingcingo ezingavikelekile, izicelo zokushayela getUserMedia () zivinjelwe ekufinyeleleni kwimithombo yedatha ye-multimedia (isibonelo, ikhamera nemakrofoni).
Inkomba «security.insecure_connection_icon.enabled»Kwengezwe futhi mayelana ne-: izilungiselelo ze-config, ezikuvumela ukuthi unike amandla ngokukhetha ukuhlaba umkhosi koxhumano olungaphephile lwe-HTTP.
«Ngenguqulo yedeskithophu elandelayo yesiphequluli okuyiFirefox 70, sihlose ukubonisa isithonjana ku-'block block '(ohlangothini lwesobunxele lwe-URL bar esetshenziselwa ukubonisa imininingwane yezokuphepha / yobumfihlo) ephawula wonke amasayithi athunyelwe nge I-HTTP (kanye namaphutha e-FTP nezitifiketi) njengokungavikeleki, "kusho unjiniyela weFirefox uJohann Hofmann.
Lolu shintsho olusha kuhlelwe ukuthi lusetshenziswe ekukhishweni okulandelayo kwenguqulo yeFirefox 70., okulindeleke ukuthi ikhishwe emphakathini ngo-Okthoba 22 walo nyaka.
Olunye ushintsho lweFirefox 70
Ngaphezu kwalokho okwashiwo, onjiniyela bahlela futhi ukuthi iFirefox 70 isuse inkinobho «(i)» kubha yekheli, izikhawulela endaweni ehlala njalo yesikhombi sezinga lokuvikeleka lokuxhumeka, okukuvumela futhi ukuthi uhlole isimo samamodi wokukhiya wekhodi yokulandelela ukunyakaza.
Nge-HTTP, isithonjana sezinkinga zokuphepha sizoboniswa ngokusobala, ezokhonjiswa futhi nge-FTP futhi uma kunezinkinga zesitifiketi:
- Ukuboniswa kwenkomba yokuxhuma okungavikelekile kufanele kukhuthaze abanikazi besayithi ukuthi bashintshele ku-HTTPS ngokuzenzakalela.
- Ngokwezibalo ezivela kwinsizakalo ye-Firefox telemetry, iphesenti lomhlaba wezicelo zekhasi ngaphezulu kwe-HTTPS ngama-78.6% (70.3% ngonyaka odlule, 59.7% eminyakeni emibili eyedlule) kanye no-87.6% e-US.
- Isikhungo esilawulwa umphakathi, esingenzi nzuzo iLet Encrypt sinikeze mahhala kuwo wonke amaqembu anentshisekelo ngezitifiketi eziyizigidi eziyi-106 ezihlanganisa izizinda ezizungeze izigidi eziyi-174 (izizinda eziyizigidi ezingama-80 zahlanganiswa ngonyaka owedlule)
Ngalesi sikhathi ngabe ukuhamba kwabantu beFirefox bebhekisa emakhasini we-HTTP kuzocacisa noma bazoyeka bese beqhubeka nokusebenzisa ezinye izindlela zokuvimbela?
Ekugcineni, futhi kulezi zinsuku akunzima noma kuyabiza ukusebenzisa isitifiketi se-SSL ekhasini lewebhu ngoba i-Let Encrypt inikeza izitifiketi zamahhala.