Dijital d\u00fcnyada g\u00fcvenli\u011fin anahtar\u0131 olan SSL\/TLS sertifikalar\u0131 i\u00e7in yolun sonu g\u00f6r\u00fcnd\u00fc; ancak bu bir son de\u011fil, daha h\u0131zl\u0131 ve g\u00fcvenli bir gelece\u011fin ba\u015flang\u0131c\u0131. Google\u2019\u0131n \u00f6nc\u00fcl\u00fc\u011f\u00fcn\u00fc yapt\u0131\u011f\u0131 ve sekt\u00f6r\u00fcn standart belirleyicisi olan CA\/Browser Forum taraf\u0131ndan kabul edilen yeni kararlarla, art\u0131k “y\u0131ll\u0131k” sertifika d\u00f6nemi tarih oluyor.<\/p>\n
Ge\u00e7ti\u011fimiz y\u0131llarda 10 y\u0131ldan 2 y\u0131la, ard\u0131ndan 398 g\u00fcne d\u00fc\u015fen sertifika ge\u00e7erlilik s\u00fcreleri, \u00f6n\u00fcm\u00fczdeki d\u00f6nemde \u00e7ok daha radikal bir \u015fekilde k\u0131salacak. Kabul edilen takvime g\u00f6re maksimum sertifika s\u00fcreleri \u015fu \u015fekilde g\u00fcncellenecek:<\/p>\n
15 Mart 2026: Sertifika s\u00fcreleri 200 g\u00fcne d\u00fc\u015f\u00fcyor.<\/p>\n
15 Mart 2027: S\u00fcreler 100 g\u00fcn ile s\u0131n\u0131rland\u0131r\u0131l\u0131yor.<\/p>\n
15 Mart 2029: Hedeflenen nihai s\u00fcre 47 g\u00fcn (yakla\u015f\u0131k 1.5 ay).<\/p>\n
Pek \u00e7ok site sahibi i\u00e7in “her ay sertifika yenilemek” bir y\u00fck gibi g\u00f6r\u00fcnse de, bu de\u011fi\u015fikli\u011fin arkas\u0131nda \u00e7ok g\u00fc\u00e7l\u00fc siber g\u00fcvenlik nedenleri var:<\/p>\n
S\u0131z\u0131nt\u0131 S\u00fcresini K\u0131saltmak: Bir SSL sertifikas\u0131n\u0131n \u00f6zel anahtar\u0131 \u00e7al\u0131nd\u0131\u011f\u0131nda, sertifika ne kadar uzun s\u00fcreliyse tehlike o kadar b\u00fcy\u00fckt\u00fcr. S\u00fcre k\u0131sald\u0131\u011f\u0131nda, sald\u0131rgan\u0131n elindeki sertifika \u00e7ok h\u0131zl\u0131 bir \u015fekilde ge\u00e7ersiz kal\u0131r.<\/p>\n
Kuantum Tehdidine Haz\u0131rl\u0131k: Kuantum bilgisayarlar\u0131n mevcut \u015fifreleme y\u00f6ntemlerini k\u0131rma potansiyeline kar\u015f\u0131, internet altyap\u0131s\u0131n\u0131n yeni algoritmalara \u0131\u015f\u0131k h\u0131z\u0131nda uyum sa\u011flamas\u0131 gerekiyor. K\u0131sa s\u00fcreli sertifikalar bu esnekli\u011fi sa\u011fl\u0131yor.<\/p>\n
Otomasyonun G\u00fcc\u00fc: Manuel yap\u0131lan her i\u015flem hataya gebedir. Bu karar, d\u00fcnyay\u0131 insan hatas\u0131ndan ar\u0131nd\u0131r\u0131lm\u0131\u015f, otomatik (ACME tabanl\u0131) yenileme sistemlerine zorluyor.<\/p>\n
Bu de\u011fi\u015fimden en \u00e7ok etkilenecek olanlar ku\u015fkusuz sistem y\u00f6neticileri ve hosting sa\u011flay\u0131c\u0131lar\u0131 olacak. Art\u0131k manuel olarak sertifika olu\u015fturup sunucuya y\u00fcklemek, operasyonel bir s\u00fcrd\u00fcr\u00fclebilirlik ta\u015f\u0131m\u0131yor.<\/p>\n
ACME Protokol\u00fc Standart Olacak: Let’s Encrypt ile hayat\u0131m\u0131za giren ACME (Automated Certificate Management Environment) protokol\u00fc art\u0131k bir se\u00e7enek de\u011fil, zorunluluk haline gelecek.<\/p>\n
Do\u011frulama S\u0131kl\u0131\u011f\u0131 Artacak: Sadece sertifikan\u0131n de\u011fil, alan ad\u0131 sahipli\u011fi do\u011frulamas\u0131n\u0131n (DCV) da \u00e7ok daha s\u0131k yap\u0131lmas\u0131 gerekecek.<\/p>\n
Web g\u00fcvenli\u011fi art\u0131k “y\u0131lda bir kez hat\u0131rlanan” bir check-list maddesi olmaktan \u00e7\u0131k\u0131p, ya\u015fayan ve s\u00fcrekli kendini g\u00fcncelleyen bir organizmaya d\u00f6n\u00fc\u015f\u00fcyor. \u015eirketlerin ve bireysel geli\u015ftiricilerin, altyap\u0131lar\u0131n\u0131 \u015fimdiden tam otomatik sertifika y\u00f6netim sistemlerine entegre etmesi kritik \u00f6nem ta\u015f\u0131yor.<\/p>\n
Unutmay\u0131n: G\u00fcvenlik, dura\u011fan bir durum de\u011fil; s\u00fcrekli bir hareket halidir.<\/p>\n
Kaynak: CA\/Browser Forum SC-081 Oylamas\u0131 ve Google ‘Moving Forward on the 90-day Certificate Validity’ Duyurusu”<\/p>\n","protected":false},"excerpt":{"rendered":"
Dijital d\u00fcnyada g\u00fcvenli\u011fin anahtar\u0131 olan SSL\/TLS sertifikalar\u0131 i\u00e7in yolun sonu g\u00f6r\u00fcnd\u00fc; ancak bu bir son de\u011fil, daha h\u0131zl\u0131 ve g\u00fcvenli bir gelece\u011fin ba\u015flang\u0131c\u0131. Google\u2019\u0131n \u00f6nc\u00fcl\u00fc\u011f\u00fcn\u00fc yapt\u0131\u011f\u0131 ve sekt\u00f6r\u00fcn standart belirleyicisi olan CA\/Browser Forum taraf\u0131ndan kabul...<\/p>\n","protected":false},"author":2,"featured_media":15105,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[52],"tags":[],"class_list":["post-15104","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"_links":{"self":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/15104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/comments?post=15104"}],"version-history":[{"count":1,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/15104\/revisions"}],"predecessor-version":[{"id":15106,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/posts\/15104\/revisions\/15106"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/media\/15105"}],"wp:attachment":[{"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/media?parent=15104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/categories?post=15104"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inetmar.com\/blog\/wp-json\/wp\/v2\/tags?post=15104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}