{"id":4439,"date":"2020-10-30T20:32:34","date_gmt":"2020-10-30T19:32:34","guid":{"rendered":"https:\/\/webhosting.de\/funktionsweise-ssl-tls\/"},"modified":"2020-10-30T20:32:34","modified_gmt":"2020-10-30T19:32:34","slug":"feature-ssl-tls","status":"publish","type":"post","link":"https:\/\/webhosting.de\/sv\/funktionsweise-ssl-tls\/","title":{"rendered":"Funktionalitet SSL, TLS"},"content":{"rendered":"

N\u00e4r det g\u00e4ller digital teknik handlar det inte l\u00e4ngre om att s\u00e4tta rekord \u00e0 la OS enligt mottot \"snabbare, h\u00f6gre, l\u00e4ngre\". Slutenheternas prestanda, allt snabbare \u00f6verf\u00f6ringshastigheter och m\u00e5ngfalden av praktiska appar \u00e4r en sak. En annan sak \u00e4r att n\u00e4r vi surfar, anv\u00e4nder sociala medier och andra tj\u00e4nster p\u00e5 internet avsl\u00f6jar vi fakta om oss sj\u00e4lva praktiskt taget varje sekund som vi inte vill att alla ska k\u00e4nna till. Det handlar om adresser, bankkonton, kreditkortsnummer och andra k\u00e4nsliga uppgifter. Uppgifter<\/a>.<\/p>\n

Dagens modeord \u00e4r s\u00e4kerhet. Eller: Hur kan jag aktivt och passivt se till att de uppgifter som jag l\u00e4mnar ut via Internet och skickar runt om i v\u00e4rlden \u00e4r skyddade fr\u00e5n obeh\u00f6rig \u00e5tkomst av tredje part? Funktioner som SSL och TLS, krypteringsmetoder som \u00e4r utformade f\u00f6r att garantera att jag \u00e4r s\u00e4ker i den digitala v\u00e4rlden, kan vara till hj\u00e4lp h\u00e4r.<\/p>\n

Hur ett SSL-certifikat fungerar<\/h2>\n

SSL (Secure Sockets Layer) \u00e4r ett protokoll f\u00f6r autentisering och kryptering av anslutningar p\u00e5 Internet. Det ursprungliga SSL-f\u00f6rfarandet \u00e4r nu f\u00f6r\u00e5ldrat och har ersatts av TLS (Transport Layer Security). I allm\u00e4nt bruk har dock termen SSL beh\u00e5llits fram till i dag.<\/p>\n

F\u00f6r att f\u00f6rklara hur det fungerar tar vi som exempel en best\u00e4llning fr\u00e5n en kund i en Onlinebutik<\/a>. En krypterad SSL-anslutning uppr\u00e4ttas alltid av klienten (h\u00e4r kunden). Det f\u00f6rsta steget \u00e4r det s\u00e5 kallade handshake, d\u00e4r en krypteringsparameter genereras f\u00f6r sessionen. Butikens server svarar sedan genom att skicka sin offentliga nyckel till klienten tillsammans med sitt SSL-certifikat. Detta skickar i sin tur Certifikat<\/a> autentiseras p\u00e5 grundval av en f\u00f6rteckning \u00f6ver k\u00e4nda certifikatutf\u00e4rdare - Certifikat eller certifieringsmyndighet = certifieringsmyndighet f\u00f6r digitala certifikat. Om certifikatutf\u00e4rdaren inte \u00e4r k\u00e4nd \u00f6ppnar de flesta webbl\u00e4sare ett f\u00f6nster som ger anv\u00e4ndaren m\u00f6jlighet att acceptera eller avvisa certifikatet p\u00e5 eget ansvar.<\/p>\n

Nu genererar klienten en symmetrisk nyckel som krypteras med serverns offentliga nyckel och skickar tillbaka den. D\u00e4refter k\u00e4nner b\u00e5de klienten och servern till koden f\u00f6r att kryptera anv\u00e4ndardata och den s\u00e4kra anslutningen uppr\u00e4ttas.<\/p>\n

Skillnader mellan popul\u00e4ra SSL-certifikat<\/h2>\n

Det finns olika versioner av SSL-certifikat, som beror p\u00e5 s\u00f6kandens behov och varierar ocks\u00e5 i pris. Faktorer \u00e4r till exempel krypteringsstyrkan (standardv\u00e4rdena \u00e4r 128 bit eller 256 bit), valideringstypen och webbl\u00e4sarens kompatibilitet eller acceptans.<\/p>\n

Dom\u00e4nvaliderade certifikat (dom\u00e4nvalidering)<\/h3>\n

Dom\u00e4nvaliderade certifikat \u00e4r de mest utbredda. Via reglerad e-posttrafik kontrollerar certifieringsmyndigheten om den som ans\u00f6ker om ett SSL-certifikat verkligen \u00e4r dom\u00e4nens \u00e4gare. Efter bekr\u00e4ftelse utf\u00e4rdas certifikatet inom mycket kort tid. Denna variant anv\u00e4nds fr\u00e4mst f\u00f6r sm\u00e5 webbplatser, bloggar, forum, e-postservrar och intran\u00e4t och \u00e4r det billigaste alternativet.<\/p>\n

Organisationsvaliderade certifikat (organisationsvalidering)<\/h3>\n

Processen \u00e4r n\u00e5got mer komplicerad f\u00f6r ett organisationsvaliderat certifikat. H\u00e4r kontrolleras inte bara dom\u00e4nen utan \u00e4ven identiteten. Webbplatsoperat\u00f6ren - vanligtvis ett f\u00f6retag - m\u00e5ste bevisa med vissa dokument att han verkligen \u00e4r dom\u00e4nens \u00e4gare. Identitetskontrollen f\u00f6r certifikatet varierar fr\u00e5n leverant\u00f6r till leverant\u00f6r. Normalt beg\u00e4rs ett utdrag ur handelsregistret, en j\u00e4mf\u00f6relse med bankuppgifter g\u00f6rs och telefonkontakt uppr\u00e4ttas mellan den s\u00f6kande och leverant\u00f6ren. Organisationsvaliderade certifikat l\u00e4mpar sig f\u00f6r f\u00f6retags webbplatser, webbutiker och e-post.<\/p>\n

ut\u00f6kad validering<\/h3>\n

En tredje version \u00e4r den utvidgade valideringen. S\u00e5dana certifierade webbplatser k\u00e4nns igen p\u00e5 den gr\u00f6na texten i adressf\u00e4ltet i webbl\u00e4saren. Denna visuella \u00e5terkoppling visar att anslutningen \u00e4r s\u00e4rskilt p\u00e5litlig. De som sk\u00f6ter sina betalningstransaktioner via internetbanken k\u00e4nner till detta fr\u00e5n banker och sparbanker. Certifieringsmyndigheten g\u00e5r till v\u00e4ga p\u00e5 samma s\u00e4tt som f\u00f6r organisationsvaliderade certifikat, men kontrollerar dessutom om den s\u00f6kande verkligen \u00e4r anst\u00e4lld p\u00e5 respektive f\u00f6retag och har beh\u00f6righet att f\u00f6rv\u00e4rva ett ut\u00f6kat valideringscertifikat.<\/p>\n

EV-certifikat \u00e4r alltid krypterade med 256 bitar och f\u00e5r st\u00f6rsta m\u00f6jliga acceptans i alla webbl\u00e4sare. F\u00f6rutom det gr\u00f6na teckensnittet som redan n\u00e4mnts visas \u00e4ven f\u00f6retagets namn och s\u00e4te p\u00e5 adressraden.<\/p>\n

Vilket certifieringsorgan \u00e4r r\u00e4tt?<\/h2>\n

Det finns ett stort antal certifikatutf\u00e4rdare (CA) i olika l\u00e4nder, vilket g\u00f6r att en intresserad part l\u00e4tt kan f\u00f6rlora kontakten med dem. Ofta \u00e4r det inte m\u00f6jligt att sp\u00e5ra vilket f\u00f6retag eller vilken myndighet som st\u00e5r bakom dem. Kritiker talar nu om ett \"certifieringslotteri\" som inte ger n\u00e5gon st\u00f6rre insyn och tillf\u00f6rlitlighet. I vilket fall som helst \u00e4r Bundesdruckerei med dess dotterbolag D-Trust helt och h\u00e5llet i tyska h\u00e4nder. M\u00e5nga andra myndigheter arbetar med amerikanska mellanliggande certifikat, men senast sedan aff\u00e4ren med underr\u00e4ttelsetj\u00e4nsten NSA m\u00e5ste man tvivla p\u00e5 att ens egna uppgifter verkligen \u00e4r skyddade med dem.<\/p>\n

Google f\u00f6redrar sidor med SSL-kryptering<\/h2>\n

2014 meddelade Google att s\u00f6kmotorn numera har en algoritm som f\u00f6redrar SSL-certifierade sidor och ger dem st\u00f6rre vikt i rankingen \u00e4n sidor utan certifikat. Bland k\u00e4nnare ans\u00e5gs detta steg n\u00e4stan sensationellt vid den tidpunkten, eftersom Google vanligtvis \u00e4r helt tyst om hur algoritmerna fungerar och hur de fungerar. F\u00f6retaget har dock b\u00f6rjat f\u00f6rb\u00e4ttra s\u00e4kerheten p\u00e5 Internet mer och mer. Detta var f\u00f6rmodligen anledningen till det offentliga uttalandet.<\/p>\n

En titt p\u00e5 framtidens kryptering<\/h2>\n

Ett fram\u00e5tblickande projekt om kryptering \u00e4r \"Let's Encrypt\", som fr\u00e4mjas av den kaliforniska Internet Security Research Group (ISRG). Detta b\u00f6r i framtiden g\u00f6ra det m\u00f6jligt f\u00f6r varje webbplatsoperat\u00f6r att p\u00e5 ett enkelt s\u00e4tt och helt gratis f\u00f6rse sin dom\u00e4n med ett SSL-certifikat som anses vara p\u00e5litligt och accepteras av de vanliga webbl\u00e4sarna. Krypterade HTTPS-anslutningar kan d\u00e4rf\u00f6r snart bli webbstandard och ge \u00f6kad s\u00e4kerhet och dataskydd. Medlemmar i ISRG \u00e4r Mozilla Foundation, Cisco, Akamai och Electronic Frontier Foundation.<\/p>","protected":false},"excerpt":{"rendered":"

Im Zusammenhang mit digitaler Technik geht es mittlerweile nicht mehr um Rekorde \u00e0 la Olympia nach dem Motto „schneller, h\u00f6her, weiter“. Die Leistungsf\u00e4higkeit von Endger\u00e4ten, die immer rasanteren \u00dcbertragungsraten oder die Vielfalt an komfortablen Apps sind eine Sache. Eine andere Sache ist, dass wir beim Surfen, bei der Benutzung von Social Media und anderen Diensten […]<\/p>\n","protected":false},"author":1,"featured_media":1204,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_crdt_document":"","inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[464,68],"class_list":["post-4439","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-funktionen","tag-tls"],"acf":[],"_wp_attached_file":null,"_wp_attachment_metadata":null,"litespeed-optimize-size":null,"litespeed-optimize-set":null,"_elementor_source_image_hash":null,"_wp_attachment_image_alt":null,"stockpack_author_name":null,"stockpack_author_url":null,"stockpack_provider":null,"stockpack_image_url":null,"stockpack_license":null,"stockpack_license_url":null,"stockpack_modification":null,"color":null,"original_id":null,"original_url":null,"original_link":null,"unsplash_location":null,"unsplash_sponsor":null,"unsplash_exif":null,"unsplash_attachment_metadata":null,"_elementor_is_screenshot":null,"surfer_file_name":null,"surfer_file_original_url":null,"envato_tk_source_kit":null,"envato_tk_source_index":null,"envato_tk_manifest":null,"envato_tk_folder_name":null,"envato_tk_builder":null,"envato_elements_download_event":null,"_menu_item_type":null,"_menu_item_menu_item_parent":null,"_menu_item_object_id":null,"_menu_item_object":null,"_menu_item_target":null,"_menu_item_classes":null,"_menu_item_xfn":null,"_menu_item_url":null,"_trp_menu_languages":null,"rank_math_primary_category":null,"rank_math_title":null,"inline_featured_image":null,"_yoast_wpseo_primary_category":null,"rank_math_schema_blogposting":null,"rank_math_schema_videoobject":null,"_oembed_049c719bc4a9f89deaead66a7da9fddc":null,"_oembed_time_049c719bc4a9f89deaead66a7da9fddc":null,"_yoast_wpseo_focuskw":"","_yoast_wpseo_linkdex":null,"_oembed_27e3473bf8bec795fbeb3a9d38489348":null,"_oembed_c3b0f6959478faf92a1f343d8f96b19e":null,"_trp_translated_slug_en_us":null,"_wp_desired_post_slug":null,"_yoast_wpseo_title":null,"tldname":null,"tldpreis":null,"tldrubrik":null,"tldpolicylink":null,"tldsize":null,"tldregistrierungsdauer":null,"tldtransfer":null,"tldwhoisprivacy":null,"tldregistrarchange":null,"tldregistrantchange":null,"tldwhoisupdate":null,"tldnameserverupdate":null,"tlddeletesofort":null,"tlddeleteexpire":null,"tldumlaute":null,"tldrestore":null,"tldsubcategory":null,"tldbildname":null,"tldbildurl":null,"tldclean":null,"tldcategory":null,"tldpolicy":null,"tldbesonderheiten":null,"tld_bedeutung":null,"_oembed_d167040d816d8f94c072940c8009f5f8":null,"_oembed_b0a0fa59ef14f8870da2c63f2027d064":null,"_oembed_4792fa4dfb2a8f09ab950a73b7f313ba":null,"_oembed_33ceb1fe54a8ab775d9410abf699878d":null,"_oembed_fd7014d14d919b45ec004937c0db9335":null,"_oembed_21a029d076783ec3e8042698c351bd7e":null,"_oembed_be5ea8a0c7b18e658f08cc571a909452":null,"_oembed_a9ca7a298b19f9b48ec5914e010294d2":null,"_oembed_f8db6b27d08a2bb1f920e7647808899a":null,"_oembed_168ebde5096e77d8a89326519af9e022":null,"_oembed_cdb76f1b345b42743edfe25481b6f98f":null,"_oembed_87b0613611ae54e86e8864265404b0a1":null,"_oembed_27aa0e5cf3f1bb4bc416a4641a5ac273":null,"_oembed_time_27aa0e5cf3f1bb4bc416a4641a5ac273":null,"_tldname":null,"_tldclean":null,"_tldpreis":null,"_tldcategory":null,"_tldsubcategory":null,"_tldpolicy":null,"_tldpolicylink":null,"_tldsize":null,"_tldregistrierungsdauer":null,"_tldtransfer":null,"_tldwhoisprivacy":null,"_tldregistrarchange":null,"_tldregistrantchange":null,"_tldwhoisupdate":null,"_tldnameserverupdate":null,"_tlddeletesofort":null,"_tlddeleteexpire":null,"_tldumlaute":null,"_tldrestore":null,"_tldbildname":null,"_tldbildurl":null,"_tld_bedeutung":null,"_tldbesonderheiten":null,"_oembed_ad96e4112edb9f8ffa35731d4098bc6b":null,"_oembed_8357e2b8a2575c74ed5978f262a10126":null,"_oembed_3d5fea5103dd0d22ec5d6a33eff7f863":null,"_eael_widget_elements":null,"_oembed_0d8a206f09633e3d62b95a15a4dd0487":null,"_oembed_time_0d8a206f09633e3d62b95a15a4dd0487":null,"_aioseo_description":null,"_eb_attr":null,"_eb_data_table":null,"_oembed_819a879e7da16dd629cfd15a97334c8a":null,"_oembed_time_819a879e7da16dd629cfd15a97334c8a":null,"_acf_changed":null,"_wpcode_auto_insert":null,"_edit_last":null,"_edit_lock":null,"_oembed_e7b913c6c84084ed9702cb4feb012ddd":null,"_oembed_bfde9e10f59a17b85fc8917fa7edf782":null,"_oembed_time_bfde9e10f59a17b85fc8917fa7edf782":null,"_oembed_03514b67990db061d7c4672de26dc514":null,"_oembed_time_03514b67990db061d7c4672de26dc514":null,"rank_math_news_sitemap_robots":"index","rank_math_robots":["index"],"_eael_post_view_count":"4680","_trp_automatically_translated_slug_ru_ru":null,"_trp_automatically_translated_slug_et":"feature-ssl-tls","_trp_automatically_translated_slug_lv":"functional-ssl-tls","_trp_automatically_translated_slug_fr_fr":null,"_trp_automatically_translated_slug_en_us":null,"_wp_old_slug":null,"_trp_automatically_translated_slug_da_dk":null,"_trp_automatically_translated_slug_pl_pl":null,"_trp_automatically_translated_slug_es_es":null,"_trp_automatically_translated_slug_hu_hu":null,"_trp_automatically_translated_slug_fi":"functional-ssl-tls","_trp_automatically_translated_slug_ja":"%e6%a9%9f%e8%83%bd%e7%9a%84%ef%bd%93%ef%bd%93%ef%bd%8c-%ef%bd%94%ef%bd%8c%ef%bd%93","_trp_automatically_translated_slug_lt_lt":null,"_elementor_edit_mode":null,"_elementor_template_type":null,"_elementor_version":null,"_elementor_pro_version":null,"_wp_page_template":"default","_elementor_page_settings":null,"_elementor_data":null,"_elementor_css":null,"_elementor_conditions":null,"_happyaddons_elements_cache":null,"_oembed_75446120c39305f0da0ccd147f6de9cb":null,"_oembed_time_75446120c39305f0da0ccd147f6de9cb":null,"_oembed_3efb2c3e76a18143e7207993a2a6939a":null,"_oembed_time_3efb2c3e76a18143e7207993a2a6939a":null,"_oembed_59808117857ddf57e478a31d79f76e4d":null,"_oembed_time_59808117857ddf57e478a31d79f76e4d":null,"_oembed_965c5b49aa8d22ce37dfb3bde0268600":null,"_oembed_time_965c5b49aa8d22ce37dfb3bde0268600":null,"_oembed_81002f7ee3604f645db4ebcfd1912acf":null,"_oembed_time_81002f7ee3604f645db4ebcfd1912acf":null,"_elementor_screenshot":null,"_oembed_7ea3429961cf98fa85da9747683af827":null,"_oembed_time_7ea3429961cf98fa85da9747683af827":null,"_elementor_controls_usage":null,"_elementor_page_assets":[],"_elementor_screenshot_failed":null,"theplus_transient_widgets":["tp-video-player"],"_eael_custom_js":null,"_wp_old_date":null,"_trp_automatically_translated_slug_it_it":null,"_trp_automatically_translated_slug_pt_pt":null,"_trp_automatically_translated_slug_zh_cn":null,"_trp_automatically_translated_slug_nl_nl":null,"_trp_automatically_translated_slug_pt_br":null,"_trp_automatically_translated_slug_sv_se":null,"rank_math_analytic_object_id":"995","rank_math_internal_links_processed":null,"_trp_automatically_translated_slug_ro_ro":null,"_trp_automatically_translated_slug_sk_sk":null,"_trp_automatically_translated_slug_bg_bg":null,"_trp_automatically_translated_slug_sl_si":null,"litespeed_vpi_list":["webhostinglogo.png"],"litespeed_vpi_list_mobile":["webhostinglogo.png"],"rank_math_seo_score":null,"rank_math_contentai_score":null,"ilj_limitincominglinks":null,"ilj_maxincominglinks":null,"ilj_limitoutgoinglinks":null,"ilj_maxoutgoinglinks":null,"ilj_limitlinksperparagraph":null,"ilj_linksperparagraph":null,"ilj_blacklistdefinition":null,"ilj_linkdefinition":["funktionsweise ssl, tls"],"_eb_reusable_block_ids":null,"rank_math_focus_keyword":null,"rank_math_og_content_image":null,"_yoast_wpseo_metadesc":"Google hat bekannt gegeben, dass die Suchmaschine nun \u00fcber einen Algorithmus verf\u00fcgt, der SSL-zertifizierte Seiten bevorzugt behandelt und im Ranking","_yoast_wpseo_content_score":null,"_yoast_wpseo_focuskeywords":null,"_yoast_wpseo_keywordsynonyms":null,"_yoast_wpseo_estimated-reading-time-minutes":null,"rank_math_description":"Google hat bekannt gegeben, dass die Suchmaschine nun \u00fcber einen Algorithmus verf\u00fcgt, der SSL-zertifizierte Seiten bevorzugt behandelt und im Ranking","surfer_last_post_update":null,"surfer_last_post_update_direction":null,"surfer_keywords":null,"surfer_location":null,"surfer_draft_id":null,"surfer_permalink_hash":null,"surfer_scrape_ready":null,"_thumbnail_id":"1204","footnotes":null,"_links":{"self":[{"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/posts\/4439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/comments?post=4439"}],"version-history":[{"count":0,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/posts\/4439\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/media\/1204"}],"wp:attachment":[{"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/media?parent=4439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/categories?post=4439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/tags?post=4439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}