{"id":7001,"date":"2015-10-01T08:54:34","date_gmt":"2015-10-01T08:54:34","guid":{"rendered":"https:\/\/megahost.ro\/blog\/?p=7001"},"modified":"2018-09-09T19:28:21","modified_gmt":"2018-09-09T19:28:21","slug":"cookie-urile-pot-compromite-site-uri-securizate-cu-https","status":"publish","type":"post","link":"https:\/\/megahost.ro\/blog\/cookie-urile-pot-compromite-site-uri-securizate-cu-https.html","title":{"rendered":"Cookie-urile pot compromite site-uri securizate cu HTTPS"},"content":{"rendered":"<p><strong><a href=\"https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2015\/09\/Https.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-7002\" src=\"https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2015\/09\/Https.jpg\" alt=\"Https\" width=\"609\" height=\"374\" srcset=\"https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2015\/09\/Https.jpg 609w, https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2015\/09\/Https-300x184.jpg 300w, https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2015\/09\/Https-150x92.jpg 150w, https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2015\/09\/Https-400x246.jpg 400w, https:\/\/megahost.ro\/blog\/wp-content\/uploads\/2015\/09\/Https-200x123.jpg 200w\" sizes=\"auto, (max-width: 609px) 100vw, 609px\" \/><\/a>Cookie-urile<\/strong> <em>&#8211; fisierele pe care website-urile le creeaza in browsere pentru a retine utilizatorii autentificati si pentru a culege informatii despre acestia &#8211;<\/em> ar putea fi folosite de atacatori pentru a extrage informatii sensibile din conexiunile HTTPS criptate.<\/p>\n<p>Problema provine din faptul ca standardul <strong>HTTP State Management<\/strong> (sau <strong>RFC 6265<\/strong>), care defineste modul in care cookie-urile ar trebui sa fie create si manipulate, nu specifica niciun mecanism care sa izoleze sau sa verifice integritatea lor.<\/p>\n<p>Ca atare, browserele web nu autentifica intotdeauna domeniile care creeaza cookie-uri. Acest lucru permite atacatorilor sa injecteze cookie-uri prin conexiuni HTTP simple, care mai tarziu vor fi transmise prin conexiuni HTTPS, in locul cookie-urilor create de site-urile HTTPS.<\/p>\n<p>Pana cand organizatiile de standardizare gasesc o solutie, problema poate fi atenuata daca site-urile folosesc mecanismul <strong>HTTP Strict Transport Security<\/strong> <strong>(HSTS)<\/strong> pentru a forta browserele sa le acceseze intotdeauna prin conexiuni HTTPS securizate.<\/p>\n<p>Cele mai recente versiuni ale browserelor majore suporta HSTS, dar pentru ca acest mecanism sa fie eficient impotriva atacurilor, si website-urile trebuie de asemenea sa-l implementeze.<\/p>\n<p>Din pacate, implementarea HSTS in randul site-urilor HTTPS ramane scazuta. Conform celor mai recente statistici, doar 4,5% dintre primele 145.000 de site-uri HTTPS din lume suporta in prezent HSTS.<\/p>\n<p><a href=\"http:\/\/www.pcworld.com\/article\/2986289\/cookie-handling-in-browsers-can-break-https-security.html#tk.rss_all\">Sursa<\/a><\/p>\n<p><a href=\"https:\/\/static.squarespace.com\/static\/4ff36a2b84aecc34311d0e6c\/523b0fcce4b099ee151514e7\/523b0fcfe4b099ee15151bd7\/1349458250001\/1000w\/Https.jpg\">Sursa foto<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cookie-urile &#8211; fisierele pe care website-urile le creeaza in browsere pentru a retine utilizatorii autentificati si pentru a culege informatii despre acestia &#8211; ar putea fi folosite de atacatori pentru a extrage informatii sensibile din conexiunile HTTPS criptate.<\/p>\n","protected":false},"author":1,"featured_media":7002,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21,47,5],"tags":[356,706,272,687,684],"class_list":["post-7001","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-domeniu-web","category-internet","category-securitate-online","tag-domenii-web","tag-hsts","tag-https","tag-internet","tag-securitate-online"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"Cookie-uri - fisierele create de website-uri in browsere- ar putea fi folosite de atacatori pentru a extrage informatii sensibile din conexiunile HTTPS criptate.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Istrator Admin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/megahost.ro\/blog\/cookie-urile-pot-compromite-site-uri-securizate-cu-https.html\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Cookie-urile pot compromite site-uri securizate cu HTTPS | megahost.ro","description":"Cookie-uri - fisierele create de website-uri in browsere- ar putea fi folosite de atacatori pentru a extrage informatii sensibile din conexiunile HTTPS criptate.","canonical_url":"https:\/\/megahost.ro\/blog\/cookie-urile-pot-compromite-site-uri-securizate-cu-https.html","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null},"aioseo_meta_data":{"post_id":"7001","title":null,"description":"Cookie-uri - fisierele create de website-uri in browsere- ar putea fi folosite de atacatori pentru a extrage informatii sensibile din conexiunile HTTPS criptate.","keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-20 22:07:20","updated":"2025-06-04 06:24:54","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/megahost.ro\/blog\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/megahost.ro\/blog\/category\/securitate-online\" title=\"Securitate Online\">Securitate Online<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tCookie-urile pot compromite site-uri securizate cu HTTPS\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/megahost.ro\/blog\/"},{"label":"Securitate Online","link":"https:\/\/megahost.ro\/blog\/category\/securitate-online"},{"label":"Cookie-urile pot compromite site-uri securizate cu HTTPS","link":"https:\/\/megahost.ro\/blog\/cookie-urile-pot-compromite-site-uri-securizate-cu-https.html"}],"_links":{"self":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/7001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/comments?post=7001"}],"version-history":[{"count":0,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/7001\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media\/7002"}],"wp:attachment":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media?parent=7001"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/categories?post=7001"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/tags?post=7001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}