{"id":294425,"date":"2019-09-09T09:00:14","date_gmt":"2019-09-09T09:00:14","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=294425"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=294425","title":{"rendered":"Let&#8217;s Encrypt \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0447\u0442\u0438 30% \u0434\u043e\u043c\u0435\u043d\u043e\u0432"},"content":{"rendered":"\n<div class=\"post__text post__text-html js-mediator-article\">\n<h3>\u041f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0432 \u0445\u043e\u0434\u0443 RC4\/3DES\/TLS 1.0 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430 \u0441\u043e\u0442\u043d\u0438 \u043b\u0435\u0442. \u0410\u043d\u0430\u043b\u0438\u0437 \u0441\u043e\u0442\u0435\u043d \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 SSL-\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u0439<\/h3>\n<p>  \u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 <a href=\"https:\/\/www.leebutterman.com\/2019\/08\/01\/handshaking-the-web-dataset-of-350-million-ssl-connections.html\">\u043d\u0430\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 350 \u043c\u043b\u043d SSL-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439<\/a>, \u0441\u0440\u0430\u0437\u0443 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432:<\/p>\n<ul>\n<li>\u043a\u0442\u043e \u0432\u044b\u0434\u0430\u043b \u044d\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b  <\/li>\n<li>\u043a\u0430\u043a\u0430\u044f \u0442\u0430\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u044f  <\/li>\n<li>\u043a\u0430\u043a\u043e\u0432\u043e \u0438\u0445 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438<\/li>\n<\/ul>\n<p><a name=\"habracut\"><\/a>  <\/p>\n<h1>Let&#8217;s Encrypt \u0432\u044b\u0434\u0430\u043b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043f\u043e\u0447\u0442\u0438 \u0434\u043b\u044f 30% \u0434\u043e\u043c\u0435\u043d\u043e\u0432<\/h1>\n<p>  \u041d\u0430\u0448 \u0441\u0435\u0440\u0432\u0435\u0440 (<i>leebutterman.com<\/i>) \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b Let&#8217;s Encrypt \u2014 \u044d\u0442\u043e \u0441\u0430\u043c\u044b\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435! \u0421\u0432\u044b\u0448\u0435 47 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c\u0438 Let&#8217;s Encrypt, \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u043e\u0447\u0442\u0438 30% \u043d\u0430\u0448\u0435\u0439 \u0432\u044b\u0431\u043e\u0440\u043a\u0438.<\/p>\n<p>  352,3 \u043c\u043b\u043d \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441\u043c\u043e\u0433\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c 158,7 \u043c\u043b\u043d \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0438 \u044d\u043c\u0438\u0442\u0435\u043d\u0442\u0430. \u041f\u0435\u0440\u0432\u0430\u044f \u0434\u0435\u0441\u044f\u0442\u043a\u0430:<\/p>\n<pre>47,2 \u043c\u043b\u043d Let's Encrypt 28,9 \u043c\u043b\u043d DigiCert 13,8 \u043c\u043b\u043d Comodo 10,1 \u043c\u043b\u043d Google 7,2 \u043c\u043b\u043d  GoDaddy 7,1 \u043c\u043b\u043d  Sectigo 7,0 \u043c\u043b\u043d  Cpanel 6,1 \u043c\u043b\u043d  GlobalSign 3,4 \u043c\u043b\u043d  CloudFlare0 2,5 \u043c\u043b\u043d  Amazon 2,1 \u043c\u043b\u043d  (\u0430\u043d\u043e\u043d\u0438\u043c\u043d\u0430\u044f \u0441\u0430\u043c\u043e\u043f\u043e\u0434\u043f\u0438\u0441\u044c) 1,1 \u043c\u043b\u043d  Plesk<\/pre>\n<p>  <\/p>\n<div class=\"spoiler\"><b class=\"spoiler_title\">\u0411\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441. \u0440\u0430\u0437 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0442\u0430\u043a\u043e\u0439 \u0441\u043e\u0432\u043e\u043a\u0443\u043f\u043d\u044b\u0439 issuer_dn s:<\/b><\/p>\n<div class=\"spoiler_text\"> 193590544 null 47237383 C=US, O=Let&#8217;s Encrypt, CN=Let&#8217;s Encrypt Authority X3 13367305 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert SHA2 High Assurance Server CA 13092572 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Domain Validation Secure Server CA 10081610 C=US, O=Google Trust Services, CN=Google Internet Authority G3 7048258 C=US, ST=TX, L=Houston, O=cPanel, Inc., CN=cPanel, Inc. Certification Authority 6772537 C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA 4946970 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL RSA CA 2018 3926261 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Domain Validation Secure Server CA 2 3727005 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http:\/\/certs.godaddy.com\/repository\/, CN=Go Daddy Secure Certificate Authority \u2014 G2 3483129 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http:\/\/certs.starfieldtech.com\/repository\/, CN=Starfield Secure Certificate Authority \u2014 G2 3404488 C=US, ST=CA, L=San Francisco, O=CloudFlare, Inc., CN=CloudFlare Inc ECC CA-2 2523036 C=US, O=Amazon, OU=Server CA 1B, CN=Amazon 2498667 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte TLS RSA CA G1 2431104 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Domain Validation CA \u2014 SHA256 \u2014 G2 2422131 C=BE, O=GlobalSign nv-sa, CN=AlphaSSL CA \u2014 SHA256 \u2014 G2 2310140 C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA 1791127 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Encryption Everywhere DV TLS CA \u2014 G1 1298054 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Organization Validation Secure Server CA 1019337 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust RSA CA 2018 853367 C=US, O=DigiCert Inc, CN=DigiCert ECC Secure Server CA 842994 C=US, ST=Someprovince, L=Sometown, O=none, OU=none, CN=localhost, emailAddress=webmaster@localhost 828175 C=CH, L=Schaffhausen, O=Plesk, CN=Plesk, emailAddress=info@plesk.com 800601 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte RSA CA 2018 736336 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA \u2014 SHA256 \u2014 G2 679798 C=FR, ST=Paris, L=Paris, O=Gandi, CN=Gandi Standard SSL CA 2 648187 OU=Default Web server, CN=www.example.com, emailAddress=postmaster@example.com 572342 C=&#8212;, ST=SomeState, L=SomeCity, O=SomeOrganization, OU=SomeOrganizationalUnit, CN=server.ab-archive.net, emailAddress=root@server.ab-archive.net 546456 C=DE, ST=Bayern, L=Muenchen, O=ispgateway, CN=webserver.ispgateway.de, emailAddress=hostmaster@ispgateway.de 501592 C=US, ST=Virginia, L=Herndon, O=Parallels, OU=Parallels Panel, CN=Parallels Panel, emailAddress=info@parallels.com 501093 C=US, ST=California, O=DreamHost, CN=sni.dreamhost.com 480468 C=CN, O=TrustAsia Technologies, Inc., OU=Domain Validated SSL, CN=TrustAsia TLS RSA CA 468190 C=BE, O=GlobalSign nv-sa, CN=GlobalSign CloudSSL CA \u2014 SHA256 \u2014 G3 464242 C=&#8212;, ST=SomeState, L=SomeCity, O=SomeOrganization, OU=SomeOrganizationalUnit, CN=localhost.localdomain, emailAddress=root@localhost.localdomain 455067 C=PL, O=home.pl SA, CN=Certyfikat SSL 445550 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Encryption Everywhere DV TLS CA \u2014 G2 417062 C=PL, O=Unizeto Technologies SA, OU=Certum Certification Authority, CN=Certum Domain Validation CA SHA2 416966 C=JP, ST=Tokyo, L=Chiyoda-ku, O=Gehirn Inc., CN=Gehirn Managed Certification Authority \u2014 RSA DV 384480 C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis SpA\/03358520967, CN=Actalis Organization Validated Server CA G2 368708 C=JP, ST=OSAKA, L=OSAKA, O=SecureCore, CN=SecureCore RSA DV CA 353716 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=RapidSSL TLS RSA CA G1 343034 C=US, O=DigiCert Inc, CN=DigiCert Global CA G2 278170 C=PL, O=nazwa.pl sp. z oo, OU=http:\/\/nazwa.pl, CN=nazwaSSL 267784 C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Organization Validation SHA256 CA, Level 1, emailAddress=ca@trustwave.com 251987 C=IT, ST=Bergamo, L=Ponte San Pietro, O=Actalis SpA\/03358520967, CN=Actalis Domain Validation Server CA G2 244273 C=JP, O=Cybertrust Japan Co., Ltd., CN=Cybertrust Japan Public CA G3 236608 C=US, ST=Washington, L=Seattle, O=Odin, OU=Plesk, CN=Plesk, emailAddress=info@plesk.com 228615 C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Organization Validation Secure Server CA 202529 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1 184627 C=US, ST=MI, L=Ann Arbor, O=Internet2, OU=InCommon, CN=InCommon RSA Server CA 184276 C=US, O=Entrust, Inc., OU=See <a href=\"http:\/\/www.entrust.net\/legal-terms\">www.entrust.net\/legal-terms<\/a>, OU=\u00a9 2012 Entrust, Inc. \u2014 for authorized use only, CN=Entrust Certification Authority \u2014 L1K 177315 C=NL, ST=Noord-Holland, L=Amsterdam, O=TERENA, CN=TERENA SSL CA 3 171469 C=LV, L=Riga, O=GoGetSSL, CN=GoGetSSL RSA DV CA 168933 C=US, O=GeoTrust Inc., CN=RapidSSL SHA256 CA 150830 C=RU, ST=Moscow, L=Moscow, O=Odin, OU=Odin Automation, CN=odin.com, emailAddress=webmaster@odin.com 122399 C=JP, O=Japan Registry Services Co., Ltd., CN=JPRS Domain Validation Authority \u2014 G2 118029 C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo ECC Domain Validation Secure Server CA 109435 C=GB, ST=Berkshire, L=Newbury, O=My Company Ltd 108309 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, OU=Microsoft IT, CN=Microsoft IT TLS CA 2 108016 C=US, O=GeoTrust Inc., CN=RapidSSL SHA256 CA \u2014 G3 107719 C=&#8212;, ST=SomeState, L=SomeCity, O=SomeOrganization, OU=SomeOrganizationalUnit, CN=ns546485.ip-158-69-252.net, emailAddress=root@ns546485.ip-158-69-252.net 106164 C=US, ST=DE, L=Wilmington, O=Corporation Service Company, CN=Trusted Secure Certificate Authority DV 104634 CN=localhost <\/p>\n<p>  \u0412 \u0441\u0445\u0435\u043c\u0435 zgrab \u044d\u0442\u043e <code>.data.tls.server_certificates.certificate.parsed.issuer_dn<\/code>, \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043c\u043e\u0436\u043d\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e <code>zcat 2019-08-01-ssl-*.gz | parallel --pipe jq -r .data.tls.server_certificates.certificate.parsed.issuer_dn | sort | uniq -c zcat 2019-08-01-ssl-*.gz | parallel --pipe jq -r .data.tls.server_certificates.certificate.parsed.issuer_dn | sort | uniq -c zcat 2019-08-01-ssl-*.gz | parallel --pipe jq -r .data.tls.server_certificates.certificate.parsed.issuer_dn | sort | uniq -c<\/code> <\/div>\n<\/div>\n<p>  \u0421\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&#8217;s Encrypt \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430, \u0441\u0442\u0438\u043c\u0443\u043b\u0438\u0440\u0443\u044f \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0446\u0438\u043a\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u043d\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0434\u0440\u0435\u0432\u043d\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.<\/p>\n<h1>\u041f\u043e\u0447\u0442\u0438 \u0442\u0440\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441 RC4 \u0438\u043b\u0438 3DES<\/h1>\n<p>  \u0418\u0437 160 \u043c\u043b\u043d \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0431\u043e\u043b\u0435\u0435 150 \u043c\u043b\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u0440\u0438\u0432\u044b\u0435, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0414\u0438\u0444\u0444\u0438 \u2014 \u0425\u0435\u043b\u043b\u043c\u0430\u043d\u0430 \u0438 AES. \u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043f\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u0448\u0438\u0444\u0440\u043e\u0432 \u0441\u0442\u0430\u043b RSA \u0441 RC4, \u0430 \u043f\u043e\u0447\u0442\u0438 1,8% \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 <a href=\"https:\/\/en.wikipedia.org\/wiki\/RC4#Biased_outputs_of_the_RC4\">RC4<\/a> \u0438\u043b\u0438 <a href=\"https:\/\/en.wikipedia.org\/wiki\/Triple_DES#Security\">3DES<\/a>, \u0438 \u0434\u0430\u0436\u0435 DES \u043d\u0430 \u0448\u0435\u0441\u0442\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u0445! (<code>zcat 2019-08-01-ssl-*.gz | parallel --pipe jq -r .data.tls.server_hello.cipher_suite.name | sort | uniq -c zcat 2019-08-01-ssl-*.gz | parallel --pipe jq -r .data.tls.server_hello.cipher_suite.name | sort | uniq -c<\/code>)<\/p>\n<pre>120457325\tTLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 16750820\tTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 13808304\tTLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 2393679\t\tTLS_RSA_WITH_RC4_128_SHA 1768423\t\tTLS_RSA_WITH_AES_256_CBC_SHA 1653084\t\tTLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 1397638\t\tTLS_RSA_WITH_AES_128_CBC_SHA 373383\t\tTLS_ECDHE_RSA_WITH_RC4_128_SHA 157929\t\tTLS_RSA_WITH_3DES_EDE_CBC_SHA 17663\t\tTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 4041\t\tTLS_ECDHE_ECDSA_WITH_RC4_128_SHA 2794\t\tTLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA 458\t\tTLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 205\t\tTLS_RSA_WITH_RC4_128_MD5 115\t\tTLS_DH_RSA_WITH_AES_128_CBC_SHA 28\t\t\u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 6\t\tTLS_RSA_WITH_DES_CBC_SHA 1\t\tTLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384<\/pre>\n<p>  \u041e\u0431\u0440\u0430\u0442\u0438\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 Chrome \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u044c <a href=\"https:\/\/rc4.badssl.com\/\">RC4<\/a>, \u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 <a href=\"https:\/\/3des.badssl.com\/\">3DES<\/a> (\u0441\u043f\u0430\u0441\u0438\u0431\u043e, <code>badssl.com<\/code>!)<\/p>\n<h1>\u0411\u043e\u043b\u0435\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c TLS<\/h1>\n<p>  \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0430\u043a\u0435\u0442 TLS \u0432 go \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 TLS 1.3 \u2014 \u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043d\u0430\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0431\u0438\u0440\u0430\u043b\u0438 \u0441 zgrab, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 TLS 1.3 (\u043d\u0430\u0432\u0435\u0440\u043d\u043e\u0435, \u043b\u0443\u0447\u0448\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043c). \u0421\u0435\u0440\u0432\u0435\u0440\u044b \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 TLS 1.2, \u043d\u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TLS 1.0 (<code>zcat 2019-08-01-ssl-*.gz | parallel --pipe jq -r .data.tls.server_hello.version.name | sort | uniq -c zcat 2019-08-01-ssl-*.gz | parallel --pipe jq -r .data.tls.server_hello.version.name | sort | uniq -c<\/code>).<\/p>\n<pre>154500876 TLSv1.2 4263887   TLSv1.0 19352     TLSv1.1 1781      SSLv3<\/pre>\n<p>  <a href=\"https:\/\/tls-v1-0.badssl.com:1010\/\">TLS 1.0<\/a> \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d \u0432 Chrome.<\/p>\n<h1>\u0421\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0438\u0441\u0442\u0435\u043a\u0430\u044e\u0442 \u043f\u043e\u0441\u043b\u0435 2099 \u0433\u043e\u0434\u0430<\/h1>\n<p>  \u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 <a href=\"https:\/\/letsencrypt.org\/2015\/11\/09\/why-90-days.html\">\u043b\u0443\u0447\u0448\u0438\u043c\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430\u043c\u0438 \u043e\u0442 Let\u2019s Encrypt<\/a>, \u0441\u0440\u043e\u043a \u0441\u043b\u0443\u0436\u0431\u044b SSL-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c 90 \u0434\u043d\u0435\u0439.<\/p>\n<p>  \u041d\u043e \u043b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u043d\u0435 \u0437\u0430\u043f\u0440\u0435\u0449\u0430\u044e\u0442 <i>\u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438<\/i>!<\/p>\n<p>  <img decoding=\"async\" src=\"https:\/\/habrastorage.org\/getpro\/habr\/post_images\/804\/eea\/d16\/804eead160c68ac7ce7198da2d38d679.jpg\"><br \/>  <i><font color=\"gray\">\u0424\u043e\u0442\u043e \u0420\u0438\u043a\u0430 \u0413\u043e\u043b\u0434\u0432\u0430\u0441\u0435\u0440\u0430 \u0438\u0437 \u0424\u043b\u0430\u0433\u0441\u0442\u0430\u0444\u0444\u0430, \u0410\u0440\u0438\u0437\u043e\u043d\u0430, \u0421\u0428\u0410 [<a href=\"https:\/\/creativecommons.org\/licenses\/by\/2.0\">CC BY 2.0<\/a>], <a href=\"https:\/\/commons.wikimedia.org\/wiki\/File:Gnarly_Bristlecone_Pine.jpg\">via Wikimedia Commons<\/a><\/font><\/i><\/p>\n<p>  \u0412 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0441 \u0442\u044b\u0441\u044f\u0447\u0435\u043b\u0435\u0442\u043d\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0436\u0438\u0437\u043d\u0438, \u043a\u0430\u043a \u044d\u0442\u0438 \u043e\u0441\u0442\u0438\u0441\u0442\u044b\u0435 \u0441\u043e\u0441\u043d\u044b. <\/p>\n<h4>\u0422\u044b\u0441\u044f\u0447\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u0441\u0442\u0435\u043a\u0430\u044e\u0442 \u043f\u043e\u0441\u043b\u0435 3000 \u0433\u043e\u0434\u0430<\/h4>\n<p>  \u0411\u043e\u043b\u0435\u0435 3000 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043d\u0435 \u0438\u0441\u0442\u0435\u043a\u0430\u044e\u0442 \u0432 \u044d\u0442\u043e\u043c \u0442\u044b\u0441\u044f\u0447\u0435\u043b\u0435\u0442\u0438\u0438. \u0421\u0432\u044b\u0448\u0435 8000 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u0441\u0442\u0435\u043a\u0430\u044e\u0442 \u043f\u043e\u0441\u043b\u0435 2200 \u0433\u043e\u0434\u0430. \u0411\u043e\u043b\u0435\u0435 200 000 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u2014 \u043f\u043e\u0441\u043b\u0435 2100 \u0433\u043e\u0434\u0430 (\u0431\u043e\u043b\u0435\u0435 1,5 \u043c\u043b\u043d \u2014 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 2040-\u0445 \u0433\u043e\u0434\u0430\u0445!)<\/p>\n<p>  \u0422\u0430\u043a, \u0432 \u043e\u0434\u043d\u043e\u043c 2117 \u0433\u043e\u0434\u0443 \u0438\u0441\u0442\u0435\u043a\u0430\u0435\u0442 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u043e\u043b\u0435\u0435 100 000 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0430 \u0432 3017-\u043c \u2014 \u0431\u043e\u043b\u0435\u0435 \u0442\u044b\u0441\u044f\u0447\u0438. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0438\u043c\u0435\u043d\u043d\u043e \u0432 2017 \u0433\u043e\u0434\u0443 \u0447\u0442\u043e-\u0442\u043e \u0432\u043d\u0443\u0448\u0430\u043b\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u0435 \u043a \u0434\u043e\u043b\u0433\u043e\u0436\u0438\u0432\u0443\u0449\u0438\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\u043c?<\/p>\n<h4>\u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0436\u0435 \u0438\u0441\u0442\u0435\u043a\u043b\u0438<\/h4>\n<p>  \u0423 \u043f\u043e\u0447\u0442\u0438 1,6 \u043c\u043b\u043d \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438\u0441\u0442\u0451\u043a \u043d\u0435\u0434\u0430\u0432\u043d\u043e (\u0432 \u0438\u044e\u043b\u0435, \u043c\u0435\u0441\u044f\u0446\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f). \u0423 \u043f\u043e\u0447\u0442\u0438 3,7 \u043c\u043b\u043d \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438\u0441\u0442\u0451\u043a \u0432 2019 \u0433\u043e\u0434\u0443. \u0421\u0432\u044b\u0448\u0435 9,6 \u043c\u043b\u043d \u0434\u043e\u043c\u0435\u043d\u043e\u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0441 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c, \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u0448\u0435\u043b \u0432 2010-\u0435 \u0433\u043e\u0434\u044b!<\/p>\n<h4>\u0421\u043e\u0442\u043d\u0438 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0435\u0449\u0451 \u043d\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b<\/h4>\n<p>  \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0443 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430 \u0442\u044b\u0441\u044f\u0447 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438\u0441\u0442\u0435\u043a\u0430\u0435\u0442 \u0434\u043e \u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u0440\u043e\u043a\u0430 \u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f!<\/p>\n<h1>\u0418\u0441\u0441\u043b\u0435\u0434\u0443\u0439\u0442\u0435 \u0441\u0430\u043c\u0438<\/h1>\n<p>  \u0414\u0430\u0439\u0442\u0435 \u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u0432\u044b \u0434\u0443\u043c\u0430\u0435\u0442\u0435! \u041f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0439\u0442\u0435 \u044d\u0442\u043e\u0442 \u043d\u0430\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u0435\u0441\u044c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c\u0438!<\/div>\n<p>               <script class=\"js-mediator-script\">!function(e){function t(t,n){if(!(n in e)){for(var r,a=e.document,i=a.scripts,o=i.length;o--;)if(-1!==i[o].src.indexOf(t)){r=i[o];break}if(!r){r=a.createElement(\"script\"),r.type=\"text\/javascript\",r.async=!0,r.defer=!0,r.src=t,r.charset=\"UTF-8\";var d=function(){var e=a.getElementsByTagName(\"script\")[0];e.parentNode.insertBefore(r,e)};\"[object Opera]\"==e.opera?a.addEventListener?a.addEventListener(\"DOMContentLoaded\",d,!1):e.attachEvent(\"onload\",d):d()}}}t(\"\/\/mediator.mail.ru\/script\/2820404\/\",\"_mediator\")}(window);<\/script>     <br \/> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"https:\/\/habr.com\/ru\/post\/466701\/\"> https:\/\/habr.com\/ru\/post\/466701\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"\n<div class=\"post__text post__text-html js-mediator-article\">\n<h3>\u041f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0432 \u0445\u043e\u0434\u0443 RC4\/3DES\/TLS 1.0 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430 \u0441\u043e\u0442\u043d\u0438 \u043b\u0435\u0442. \u0410\u043d\u0430\u043b\u0438\u0437 \u0441\u043e\u0442\u0435\u043d \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 SSL-\u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u0439<\/h3>\n<p>  \u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 <a href=\"https:\/\/www.leebutterman.com\/2019\/08\/01\/handshaking-the-web-dataset-of-350-million-ssl-connections.html\">\u043d\u0430\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 350 \u043c\u043b\u043d SSL-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439<\/a>, \u0441\u0440\u0430\u0437\u0443 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441\u043e\u0432:<\/p>\n<ul>\n<li>\u043a\u0442\u043e \u0432\u044b\u0434\u0430\u043b \u044d\u0442\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b  <\/li>\n<li>\u043a\u0430\u043a\u0430\u044f \u0442\u0430\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u044f  <\/li>\n<li>\u043a\u0430\u043a\u043e\u0432\u043e \u0438\u0445 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438<\/li>\n<\/ul>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-294425","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/294425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=294425"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/294425\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=294425"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=294425"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=294425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}