Como qayb ka mid ah dhaqdhaqaaq isku dubaridan ka mid ah afar ka mid ah magacyada ugu waaweyn ee teknolojiyadda, hab maamuuskii hore ee amniga TLS 1.0 iyo 1.1 ayaa laga saari doonaa Safari, Edge, Internet Explorer, Firefox iyo Chrome sanadka 2020.
Apple, Microsoft, Mozilla, iyo Google ayaa iska kaashaday sidii ay internetka uga nadiifin lahaayeen borotokoolladaan duugga ah iyo kuwa khaldan, iyagoo xusay in dadka badankood ay hadda u wareegeen TLS 1.2, haddii kale TLS 1.3.
In kasta oo boqolkiiba 94 boggagguba mar horeba la jaanqaadi karaan nooca 1.2Muddo faragelin ah 18ka bilood ee soo socota ayaa qof walba siin doonta fursad uu kula qabsado.
Soosaarayaasha daalacayaasha Firefox, Chrome, Edge iyo Safari ayaa ka digay joojinta dhow ee taageerada hab maamuuska TLS 1.0 iyo TLS 1.1:
- Firefox, taageerada TLS 1.0 / 1.1 waa la joojin doonaa bisha Maarso 2020, laakiin qawaaniintani waa la curyaamin doonaa horraantii tijaabada iyo habeynkii.
- In Chrome, taageerada TLS 1.0 / 1.1 waa la joojin doonaa sida Google Chrome version 81, oo la filayo Janaayo 2020.
- Intii lagu jiray Google Chrome nooca 72, oo la sii deyn doono Janaayo 2019, marka la furayo goobaha TLS 1.0 / 1.1, digniin gaar ah oo ku saabsan adeegsiga nooca duugoobay ee TLS ayaa la soo bandhigi doonaa. Dejinta suurtagelinaysa in lagu soo celiyo taageerada TLS 1.0 / 1.1 way sii jiri doontaa illaa Janawari 2021.
- Bog furaha shabakadda Safari iyo mashiinka WebKit, taageerada TLS 1.0 / 1.1 waa la joojinayaa Maarso 2020.
- Intii aad ku jirtay shabakadda kumbuyuutarka ee Microsoft Edge iyo Internet Explorer 11, ka saarista TLS 1.0 iyo TLS 1.1 ayaa la filayaa qeybta hore ee sannadka 2020.
Tilmaanta TLS 1.0 waxaa la sii daayay Janaayo 1999. Toddobo sano ka dib, cusbooneysiinta TLS 1.1 waxaa lagu sii daayay kor u qaadis xagga amniga ah oo la xiriira jiilka bilowga vectors-ka iyo vectors-ka kororka lagu kordhinayo.
Hadda, Hawsha Injineernimada Internetka (IETF), oo ku lug leh horumarinta qaab dhismeedka Internetka iyo borotokoolka, Waxay horey u daabacday qeexitaan qabyo ah oo ka dhigaya qawaaniinta TLS 1.0 / 1.1 mid duugoobay.
20 sano kadib oo ay wali taagan tahay ayaa ah mid ka mid ah sababaha IETF looga filayo (Kooxda Injineernimada Internetka) si rasmi ah hoos ugu dhigay hab maamuuskii dabayaaqada sanadkan, in kasta oo aan weli wax war ah la soo saarin.
Inta badan adeegsadayaasha iyo adeegeyaasha waxay mar hore isticmaalaan TLS 1.2+
Boqolkiiba codsiyada isticmaalaya TLS 1.0 ee shabakada waa 0,4% kuwa isticmaala Chrome iyo 1% isticmaalayaasha Firefox.
2 milyan ee goobaha ugu waaweyn lagu qiimeeyo Alexa, kaliya 1.0% ayaa ku xaddidan TLS 0.1 iyo 1.1% - TLS XNUMX.
Marka loo eego tirakoobka Cloudflare, qiyaastii 9,3% codsiyada iyada oo loo marayo shabakadda gudbinta waxyaabaha Cloudflare waxaa lagu sameeyaa iyadoo la adeegsanayo TLS 1.0. TLS 1.1 waxaa loo isticmaalaa kiisaska 0,2%.
Sida laga soo xigtay shirkadda adeegga macluumaadka SSL Pulse Qualys TLS 1.2 waxay taageertaa 94% boggaga internetka, taas oo u oggolaanaysa dejinta isku xirnaanta aaminka ah.
“Labaatan sano waa waqti dheer in tikniyoolajiyadda badbaadada aan la beddelin. In kasta oo aynaan ka warqabin jilicsanaanta la taaban karo ee ku saabsan hirgelintayada cusub ee TLS 1.0 iyo TLS 1.1, haddana waxaa jira hirgelinta dhinac saddexaad oo nugul, ”ayuu yiri Kyle. Pflug, maamulaha barnaamijka sare ee Microsoft Edge.
Xogta Mozilla ee laga soo ururiyey telemetry at Firefox waxay muujineysaa in kaliya 1.11% ee isku xirnaanta aaminka ah la aasaasay iyadoo la adeegsanayo borotokoolka TLS 1.0. TLS 1.1, jaantuskani waa 0.09%, TLS 1.2 - 93.12%, TLS 1.3 - 5.68%.
Arimaha ugu muhiimsan ee TLS 1.0 / 1.1 waa taageero la’aanta ciphers casri ah (tusaale ahaan ECDHE iyo AEAD) iyo shuruudda ah in la taageero ciphers-kii hore, isku halaynteedii taas oo su’aal laga qabo marxaladda hadda lagu jiro horumarinta kumbuyuutarka (tusaale, taageerada TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA waa loo baahan yahay si loo xaqiijiyo)
Taageerada algorithms-ka dhaxalka ah ayaa horey u horseeday weeraro sida ROBOT, DROWN, BEAST, Logjam, iyo FREAK.
Si kastaba ha noqotee, arrimahani ma ahayn kuwo si toos ah u nugul borotokoolka waxaana lagu xiray heerka fulintooda.
Borotokoollada TLS 1.0 / 1.1 waxaa ka maqan nuglaansho daran oo loo adeegsan karo in lagu qaado weerarro wax ku ool ah.