<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-2">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1595094297;
mso-list-type:hybrid;
mso-list-template-ids:-1538881888 -368905720 134807555 134807557 134807553 134807555 134807557 134807553 134807555 134807557;}
@list l0:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Po<span lang=SR-LATN-RS>štovane koleginice i kolege,<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS><o:p> </o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS>Ovo obaveštenje se odnosi na sve AMRES korisnike TCS servisa (servisa izdavanja digitalnih serverskih sertifikata) koji koriste sertifikate za svoje web sajtove.<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS><o:p> </o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS>Možda ste već upoznati sa informacijom da se SHA-1 hashing algoritam napušta jer je procenjeno da nije dovoljno siguran. Predlaže se korišćenje bilo koje verzije SHA-2 algoritma.<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS><o:p> </o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS>SHA-1 je masovno korišćen u digitalnim sertifikatima (serverskim i personalnim) a pre par godina je na nivou Internet zajednice donesena odluka da se SHA-1 polako i postepeno zameni sigurnijim hashing algoritmima. U skladu sa tim, Microsoft je doneo odluku da više neće priznavati digitalne sertifikate koji koriste SHA-1 algoritam nakon 01.01.2017. godine. Ovu odluku slede svi važniji činioci na Internetu (Google, Mozilla itd.). U skladu sa tom odlukom sertifikacione kuće su poslednjih par meseci sprovodile sledeću politiku:<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS><o:p> </o:p></span></p><p class=MsoListParagraph style='text-indent:-18.0pt;mso-list:l0 level1 lfo1'><![if !supportLists]><span lang=SR-LATN-RS><span style='mso-list:Ignore'>-<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=SR-LATN-RS>Ukoliko validnost sertifikata ističe pre 01.01.2017. godine korisnici mogu dobiti SHA-1 sertifikat<o:p></o:p></span></p><p class=MsoListParagraph style='text-indent:-18.0pt;mso-list:l0 level1 lfo1'><![if !supportLists]><span lang=SR-LATN-RS><span style='mso-list:Ignore'>-<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=SR-LATN-RS>Ukoliko validnost sertifikata ističe nakon 01.01.2017. godine korisnici po pravilu, bez obzira da li su to eksplicitno tražili ili ne, dobijaju SHA-2 sertifikat<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS><o:p> </o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS>Međutim, pojavio se mali međuprostor u prvim mesecima 2014. godine kada su pojedine sertifikacione kuće izdavale SHA-1 sertifikate čija važnost ističe nakon 01.01.2017. godine. Nažalost jedna od takvih CA kuća je i Comodo koji izdaje sertifikate u okviru AMRES TCS servisa.<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS><o:p> </o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS>Google je prepoznao ovaj problem i u najnovijem Google Chrome Internet pregledaču implementirao funkciju koja za sve SHA-1 sertifikate koji ističu nakon 01.01.2017. godine prikazuje upozorenje u vidu crvenog precrtanog HTTPS znaka. HTTPS konekcija na ovim sajtovima nije ugrožena, međutim korisnici mogu posumnjati u verodostojnost sajta i odustati od daljeg pristupa. Ideja Google-a je da natera sve web sajtove koji koriste SHA-1 sertifikate da ih zamene sa sigurnijim SHA-2 sertifikatom. Za sada je ovu funkciju implementirao samo Google Chrome, dok se na Internet Exploreru i Mozilla Firefox pregledačima ovaj problem ne može uočiti.<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS><o:p> </o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS>U skladu sa svim navedenim, AMRES preporučuje svim svojim institucijama, korisnicima AMRES TCS servisa, da provere sertifikate svojih web sajtova. Ukoliko Google Chrome pretraživač prikazuje upozorenje prilikom pristupa web sajtu, preporučuje se da institucija zatraži novi sertifikat preko AMRES TCS servisa. Institucija će potom dobiti SHA-2 sertifikat. Želimo posebno da napomenemo da se ovo odnosi SAMO na one sertifikate koji su izdati u prvim mesecima 2014. godine i čija važnost ističe nakon 01.01.2017. godine a koriste se za potrebe web sajtova.<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS><o:p> </o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS>Srdačan pozdrav,<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b><span lang=SR-LATN-RS style='color:gray;mso-fareast-language:SR-LATN-RS'>Miloš Kukoleča, </span></b><span lang=SR-LATN-RS style='font-size:10.0pt;color:gray;mso-fareast-language:SR-LATN-RS'>M.Sc.E.E. CCNP</span><b><span lang=SR-LATN-RS style='color:gray;mso-fareast-language:SR-LATN-RS'><o:p></o:p></span></b></p><p class=MsoNormal><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'>Network Security Engineer<o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS style='mso-fareast-language:SR-LATN-RS'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-GB'><img width=161 height=40 id="Picture_x0020_1" src="cid:image001.gif@01D07CEB.5B5832D0" alt="Description: bplogo"></span><span lang=SR-LATN-RS style='mso-fareast-language:SR-LATN-RS'><o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS style='mso-fareast-language:SR-LATN-RS'><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=SR-LATN-RS style='font-size:9.0pt;color:#E36C0A;mso-fareast-language:SR-LATN-RS'>Akademska mreža Republike Srbije<o:p></o:p></span></b></p><p class=MsoNormal><span lang=SR-LATN-RS style='font-size:9.0pt;color:#E36C0A;mso-fareast-language:SR-LATN-RS'>Bulevar Kralja Aleksandra 90, 11000 Beograd, Srbija</span><span lang=SR-LATN-RS style='font-size:10.0pt;color:#E36C0A;mso-fareast-language:SR-LATN-RS'><o:p></o:p></span></p><p class=MsoNormal><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'>Tel:</span></b><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'> </span><span lang=SR-LATN-RS style='font-size:9.0pt;color:#E36C0A;mso-fareast-language:SR-LATN-RS'>+381 11 7158 950<o:p></o:p></span></p><p class=MsoNormal><b><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'>Mob:</span></b><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'> </span><span lang=SR-LATN-RS style='font-size:9.0pt;color:#E36C0A;mso-fareast-language:SR-LATN-RS'>+381 66 8433 096<o:p></o:p></span></p><p class=MsoNormal><b><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'>Fax:</span></b><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'> </span><span lang=SR-LATN-RS style='font-size:9.0pt;color:#E36C0A;mso-fareast-language:SR-LATN-RS'>+381 11 3370 288</span><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'><o:p></o:p></span></p><p class=MsoNormal><b><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'>Email</span></b><span lang=SR-LATN-RS style='font-size:10.0pt;color:gray;mso-fareast-language:SR-LATN-RS'> </span><u><span lang=SR-LATN-RS style='font-size:10.0pt;color:#E36C0A;mso-fareast-language:SR-LATN-RS'>milos.kukoleca@amres.ac.rs</span></u><span lang=SR-LATN-RS style='font-size:10.0pt;color:gray;mso-fareast-language:SR-LATN-RS'><o:p></o:p></span></p><p class=MsoNormal><b><span lang=SR-LATN-RS style='font-size:9.0pt;color:gray;mso-fareast-language:SR-LATN-RS'>Internet:</span></b><span lang=SR-LATN-RS style='font-size:10.0pt;color:gray;mso-fareast-language:SR-LATN-RS'> </span><span lang=SR-LATN-RS style='font-size:10.0pt;color:#E36C0A;mso-fareast-language:SR-LATN-RS'><a href="http://www.amres.ac.rs/"><span style='color:#E36C0A'>http://www.amres.ac.rs</span></a></span><span lang=SR-LATN-RS style='font-size:10.0pt;color:gray;mso-fareast-language:SR-LATN-RS'><o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>