13.02.20 |
Let's Encrypt âûäàë ìèëëèàðäíûé ñåðòèôèêàò
 ïðåññ-ðåëèçå ïðåäñòàâèòåëè ïðîåêòà Let's Encrypt âñïîìèíàþò, ÷òî ïðåäûäóùèé þáèëåé â 100 ìëí âûäàííûõ ñåðòèôèêàòîâ îòìå÷àëè â èþíå 2017 ãîäà. Òîãäà äîëÿ HTTPS-òðàôèêà â èíòåðíåòå ñîñòàâëÿëà 58% (â ÑØÀ — 64%). Çà äâà ñ ïîëîâèíîé ãîäà ïîêàçàòåëè ñóùåñòâåííî âûðîñëè: «Ñåãîäíÿ 81% çàãðóæàåìûõ ñòðàíèö ïî âñåìó ìèðó èñïîëüçóþò HTTPS, à â Ñîåäèíåííûõ Øòàòàõ ìû íàõîäèìñÿ íà óðîâíå 91%!».
Let's Encrypt ñûãðàë î÷åíü âàæíóþ ðîëü â òîì, ÷òîáû ñåðòèôèêàòû HTTPS ñòàëè óòèëèòàðíûì ñòàíäàðòîì, à íàä¸æíîå øèôðîâàíèå òðàôèêà — ñîâåðøåííîé íîðìîé â èíòåðíåòå.
Ñóùåñòâóåò íåñêîëüêî âèäîâ ñåðòèôèêàòîâ, êîòîðûå îòëè÷àþòñÿ òðåáîâàíèÿìè ê íàäåæíîñòè.
DV-ñåðòèôèêàòû - ñåðòèôèêàòû ñ ïîäòâåðæäåíèåì äîìåíà, Domain Validation.
OV-ñåðòèôèêàòû - ñåðòèôèêàòû ñ ïîäòâåðæäåíèåì îðãàíèçàöèè (Organization Validation)
EV-ñåðòèôèêàòû - ñåðòèôèêàòû âûñîêîé íàä¸æíîñòè (Extended Validation)
Ê íàñòîÿùåìó âðåìåíè HTTPS ñòàë ñòàíäàðòîì äå-ôàêòî â èíòåðíåòå. Ñ ïðîøëîãî ãîäà îñíîâíûå áðàóçåðû ïðåäóïðåæäàþò ïîëüçîâàòåëåé îá îïàñíîñòè ïîäêëþ÷åíèÿ ê ñàéòàì, êîòîðûå íå øèôðóþò òðàôèê ïî HTTPS. À ê êîíöó ýòîãî ãîäà áðàçóåð Chrome íå áóäåò îñóùåñòâëÿòü çàãðóçêó ôàéëîâ åñëè ïðîòîêîë íå çàùèùåí.
Êðîìå âñåãî ïðî÷åãî, èíòåðíåò-ïðîâàéäåðû ìîãóò âñòàâëÿòü (è âñòàâëÿþò) ðåêëàìó, ðåêëàìíûå áëîêè è çàñòàâêè ïðè çàõîäå íà ñàéò áåç çàùèùåííîãî ïðîòîêîëà HTTPS. Òàê íàïðèìåð, ñ 10 ôåâðàëÿ 2020 ãîäà, Ðîñòåëåêîì, êðóïíåéøèé â ÐÔ îïåðàòîð øèðîêîïîëîñíîãî äîñòóïà, îáñëóæèâàþùèé îêîëî 13 ìëí àáîíåíòîâ, áåç ëèøíåé îãëàñêè ââ¸ë â ñòðîé ñèñòåìó ïîäñòàíîâêè ñâîèõ ðåêëàìíûõ áàííåðîâ â íåçàøèôðîâàííûé HTTP-òðàôèê àáîíåíòîâ.