{"id":8426,"date":"2022-04-10T18:30:03","date_gmt":"2022-04-10T15:30:03","guid":{"rendered":"https:\/\/kutaybilen.com.tr\/?p=8426"},"modified":"2022-04-10T18:30:03","modified_gmt":"2022-04-10T15:30:03","slug":"google-https-serifikalarinin-omrunu-bir-yila-cekmek-istiyor","status":"publish","type":"post","link":"https:\/\/kutaybilen.com.tr\/?p=8426","title":{"rendered":"Google, HTTPS Serifikalar\u0131n\u0131n \u00d6mr\u00fcn\u00fc Bir Y\u0131la \u00c7ekmek \u0130stiyor"},"content":{"rendered":"

Google, HTTPS\u2019nin \u015fifrelenmi\u015f trafi\u011fini korumak i\u00e7in kullan\u0131lan SSL sertifikas\u0131n\u0131n kullan\u0131m \u00f6mr\u00fcn\u00fc iki y\u0131ldan bir y\u0131la indirmek istiyor. Teklifi yapan ki\u015fi ise Yunanistan\u2019da d\u00fczenlenen CA\/B Forum\u2019daki F2F toplant\u0131s\u0131na Google temsilcisi olarak kat\u0131lan Ryan Sleevi oldu.<\/p>\n

CA: SSL sertifikalar\u0131 da\u011f\u0131tan \u015firketler.<\/p>\n

B: Taray\u0131c\u0131 \u00fcreticileri.<\/p>\n

Oylar<\/strong><\/b><\/p>\n

<\/strong><\/p>\n

Sleevi\u2019nin 2020\u2019nin mart ay\u0131ndan itibaren ba\u015flayacak olan teklifine nazaran SSL sertifikas\u0131n\u0131n \u00f6mr\u00fc 825 g\u00fcn (kabaca 2 y\u0131l 3 ay) yerine 397 g\u00fcn (1 y\u0131l 1 ay) olacak. \u015eu an i\u00e7in teklif oylanmad\u0131 lakin bir\u00e7ok taray\u0131c\u0131 tedarik\u00e7isi yeni SSL sertifikas\u0131 kullan\u0131m m\u00fchleti teklifini desteklediklerini bildirdi.<\/p>\n

\u00d6teki yandan sertifika otoritelerinin bu bahiste \u00e7ok da memnun oldu\u011funu s\u00f6ylemek m\u00fcmk\u00fcn de\u011fil. Son on y\u0131lda taray\u0131c\u0131 \u00fcreticileri SSL sertifikalar\u0131n\u0131n kullan\u0131m m\u00fcddetlerini daima olarak k\u0131saltt\u0131. Birinci olarak sekiz y\u0131ldan be\u015f y\u0131la, akabinde \u00fc\u00e7 y\u0131la en son ise iki y\u0131la kadar indi.<\/p>\n

Bundan evvel son de\u011fi\u015fiklik Mart 2018\u2019de meydana gelmi\u015f, taray\u0131c\u0131 \u00fcreticileri SSL sertifikalar\u0131n\u0131n \u00f6mr\u00fcn\u00fc \u00fc\u00e7 y\u0131ldan bir y\u0131la indirmeye \u00e7al\u0131\u015fm\u0131\u015f fakat sertifika otoritelerinin bask\u0131lar\u0131 sonras\u0131 iki y\u0131lda karar k\u0131l\u0131nm\u0131\u015ft\u0131. G\u00f6r\u00fcn\u00fc\u015fe bak\u0131l\u0131rsa taray\u0131c\u0131 \u00fcreticileri as\u0131l planlar\u0131ndan vazge\u00e7mi\u015f de\u011filler.<\/p>\n

Yeni teklife yans\u0131lar<\/strong><\/b><\/p>\n

<\/strong><\/p>\n

DigiCert\u2019\u00fcn CA\/B Forum\u2019daki temsilcisi olan Timothy Hollebeek, kaleme ald\u0131\u011f\u0131 blog yaz\u0131s\u0131nda \u015firketin yeni teklife kar\u015f\u0131 olan duru\u015funu kaleme ald\u0131.<\/p>\n

\u201cBu de\u011fi\u015fikli\u011fin \u00e7ok k\u0131sa vakit d\u00f6nemine sahip ziyanl\u0131 web sitelerine hi\u00e7bir tesiri yok. Birka\u00e7 g\u00fcn ya da en fazla birka\u00e7 hafta sonra alan ismi kara listeye ekleniyor ve sald\u0131rganlar akabinde yeni bir alan ismi ile yeni sertifikalar al\u0131yorlar.\u201d<\/em><\/p>\n

M\u00fc\u015fterilerinin maliyetlerini de hayli art\u0131raca\u011f\u0131n\u0131 s\u00f6yleyen DigiCert y\u00f6neticisi, standartlar\u0131n da bu kadar k\u0131sa vadeli devirler halinde de\u011fi\u015ftirilmemesi gerekti\u011fini tabir etti.<\/p>\n

SSL geri alma sorunu<\/strong><\/b><\/p>\n

<\/strong><\/p>\n

G\u00fcvenlik ara\u015ft\u0131rmac\u0131s\u0131 olan Scott Helme ise Twitter \u00fczerinden Hollebeek\u2019in blog yaz\u0131s\u0131n\u0131 ele\u015ftirerek k\u0131sa vadeli SSL sertifikalar\u0131n\u0131n kullan\u0131m \u00f6mr\u00fcn\u00fcn yararlar\u0131n\u0131n ziyanl\u0131 sitelerle ya da \u015fifre avc\u0131l\u0131\u011f\u0131yla bir alakas\u0131 olmad\u0131\u011f\u0131n\u0131, mevzunun SSL sertifikas\u0131n\u0131 geri alma s\u00fcreci oldu\u011funu s\u00f6z etti.<\/p>\n

Helme, bu s\u00fcrecin problemli oldu\u011funu ve makus SSL sertifikalar\u0131n\u0131n ihra\u00e7 edildikten ve iptal edildikten sonra da y\u0131llarca kullan\u0131lmaya devam edildi\u011fini, bu y\u00fczden k\u0131sa SSL sertifikalar\u0131n\u0131n bu sorunu \u00e7\u00f6zebilece\u011fini zira berbat SSL sertifikalar\u0131n\u0131n evre kademe daha s\u00fcratli bitece\u011fini s\u00f6yledi.<\/p>\n

Kurallar\u0131 taray\u0131c\u0131lar koyuyor<\/strong><\/b><\/p>\n

<\/strong><\/p>\n

Sertifika sa\u011flay\u0131c\u0131lar\u0131 ile taray\u0131c\u0131 \u00fcreticiler ortas\u0131ndaki sava\u015f\u0131 y\u0131llard\u0131r alttan alta asl\u0131nda devam ediyordu. HTTPS ile alakal\u0131 haberler yapan bir blog olan HashedOut, bu teklifin asl\u0131nda HTTPS alan\u0131n\u0131 ve kalan her \u015feyi kimin denetim etti\u011fini kan\u0131tlamakla alakal\u0131 oldu\u011funu arg\u00fcman etti.<\/p>\n

\u201cE\u011fer ki sertifika \u015firketleri bunu kabul etmezse, taray\u0131c\u0131 \u00fcreticilerinin tek tarafl\u0131 hareket edebilir ve de\u011fi\u015fikli\u011fi her t\u00fcrl\u00fc zorlayabilir. Team\u00fcller olmadan olmaz lakin daha evvel bir bahiste bu t\u00fcrl\u00fc e\u015fit bir da\u011f\u0131l\u0131m olmam\u0131\u015ft\u0131. \u015eayet ki ger\u00e7ekle\u015firse CA\/B Forum\u2019un olay\u0131n\u0131n ne oldu\u011funu sormak gerekir. Zira o noktada taray\u0131c\u0131 karar s\u00fcrmeye ba\u015fl\u0131yor ve t\u00fcm bunlar bir sa\u00e7mal\u0131ktan ibaret oluyor.\u201d<\/em><\/p>\n

Bu ortada DigiCert, m\u00fc\u015fterileri ortas\u0131nda anonim bir ara\u015ft\u0131rma ger\u00e7ekle\u015ftiriyor ve bir y\u0131ll\u0131k SSL sertifikas\u0131 \u00f6mr\u00fcn\u00fcn aktivitelerini nas\u0131l etkileyece\u011fini soruyor. \u015eayet ki m\u00fc\u015fteriler bu mevzudan \u015fikayet\u00e7i olursa (ki muhtemelen olacak) DigiCert, bu ara\u015ft\u0131rma sonu\u00e7lar\u0131n\u0131 Google\u2019\u0131n teklifine kar\u015f\u0131 kullanacakt\u0131r.<\/p>\n

<\/div>\n
\n
<\/div>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

Google, HTTPS\u2019nin \u015fifrelenmi\u015f trafi\u011fini korumak i\u00e7in kullan\u0131lan SSL sertifikas\u0131n\u0131n kullan\u0131m \u00f6mr\u00fcn\u00fc iki y\u0131ldan bir y\u0131la indirmek istiyor. Teklifi …<\/p>\n","protected":false},"author":1,"featured_media":8427,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[15],"tags":[1919,1918,1920,1921],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/8426"}],"collection":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8426"}],"version-history":[{"count":1,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/8426\/revisions"}],"predecessor-version":[{"id":8428,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/posts\/8426\/revisions\/8428"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=\/wp\/v2\/media\/8427"}],"wp:attachment":[{"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8426"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8426"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kutaybilen.com.tr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8426"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}