{"id":7923,"date":"2023-10-14T18:12:39","date_gmt":"2023-10-14T15:12:39","guid":{"rendered":"https:\/\/www.niobehosting.com\/blog\/?p=7923"},"modified":"2023-10-14T18:12:40","modified_gmt":"2023-10-14T15:12:40","slug":"hsts-nedir-kurulumu-nasil-yapilir","status":"publish","type":"post","link":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/","title":{"rendered":"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r?"},"content":{"rendered":"\n

\u0130nternette g\u00fcvenlik, b\u00fcy\u00fcyen a\u011f nedeniyle giderek daha \u00f6nemli hale gelmektedir. Bu y\u00fczden web sitelerinin ve ileti\u015fimin g\u00fcvenli kabul edilen Secure Socket Layer (SSL) veya halefi Transport Layer Security (TLS) arac\u0131l\u0131\u011f\u0131yla \u015fifrelenmesi art\u0131k vazge\u00e7ilmez bir standart olarak kabul edilmektedir, ancak bunlar t\u00fcm siber tehditlere kar\u015f\u0131 koruma sa\u011flamamaktad\u0131r. Daha fazla siber sald\u0131r\u0131ya kar\u015f\u0131 g\u00fcvenli hale gelmek i\u00e7in baz\u0131 yerle\u015fik siber sald\u0131r\u0131lar\u0131 hari\u00e7 tutan HTTP Strict Transport Security (HSTS) uzant\u0131s\u0131 kullan\u0131lmal\u0131d\u0131r.<\/p>\n\n\n\n

\u0130nternette \u015eifreleme Nas\u0131l Yap\u0131l\u0131r?<\/h2>\n\n\n\n

G\u00fcvenli \u015fifreleme, kullan\u0131lan anahtar\u0131n iki ortak aras\u0131ndaki bir de\u011fi\u015fim s\u0131ras\u0131nda \u00fc\u00e7\u00fcnc\u00fc taraflarca \u00e7al\u0131namamas\u0131n\u0131, de\u011fi\u015ftirilememesini veya okunamamas\u0131n\u0131 gerektirir. SSL’in en son s\u00fcr\u00fcm\u00fc olarak 2018’de yay\u0131nlanan TLS 1.3 standard\u0131, g\u00fcvenli DHM protokol\u00fc kullanarak bunu sa\u011flar. Bu, ilk olarak anahtar de\u011fi\u015fimi i\u00e7in asimetrik, yaln\u0131zca tek y\u00f6nl\u00fc okunabilir bir kriptografi kullan\u0131r ve ancak daha sonra simetrik, her iki taraf\u00e7a payla\u015f\u0131lan ve bu oturum i\u00e7in benzersiz bir oturum anahtar\u0131na ge\u00e7er. Sertifikalar\u0131n g\u00fcvenli\u011fi, Let’s Encrypt, Comodo veya DigiCert gibi resmi olarak tan\u0131nan, g\u00fcvenilir Certificate Authorities (CA) arac\u0131l\u0131\u011f\u0131yla kimlik do\u011frulama ile garanti edilir ve hem sahibinin kimli\u011fini hem de bir \u015fifrelemenin ge\u00e7erlili\u011fini garanti eder ve imzalar.<\/p>\n\n\n\n

2010 y\u0131l\u0131ndan bu yana, bir\u00e7ok b\u00fcy\u00fck BT grubu t\u00fcm ba\u011flant\u0131lar\u0131n tam \u015fifrelenmesini desteklemektedir, \u00e7\u00fcnk\u00fc ba\u015flang\u0131\u00e7ta parolalar veya banka verileri gibi son derece hassas bilgiler bile Hypertext Transfer Protocol (HTTP) alt\u0131nda okunabilir bir d\u00fcz metin olarak iletiliyordu. 2014 y\u0131l\u0131ndan bu yana, SSL arac\u0131l\u0131\u011f\u0131yla \u015fifreleme, arama motoru s\u0131ralamas\u0131 i\u00e7in \u00f6nemli bir fakt\u00f6r olarak kabul edildi ve bu nedenle Arama Motoru Optimizasyonu (SEO) i\u00e7in kullan\u0131lmaya ba\u015fland\u0131. Ancak, SSL 1.0’dan SSL 3.0’a kadar olan eski prosed\u00fcrler ve TLS’nin ilk iki versiyonu, bir bilgisayar korsan\u0131n\u0131n erken bir a\u015famada kendisini istemci ile web sitesi aras\u0131nda konumland\u0131rmas\u0131na olanak tan\u0131yan ve sonradan ke\u015ffedilen baz\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131na sahiptir. Bu ve di\u011fer tehlikelere kar\u015f\u0131 etkin bir savunma yapabilmek i\u00e7in Internet Engineering Task Force (IETF), 2012 y\u0131l\u0131nda yeni standart HSTS’yi yay\u0131nlam\u0131\u015ft\u0131r.<\/p>\n\n\n\n

HSTS Nedir?<\/h2>\n\n\n\n

HSTS, HTTPS ba\u011flant\u0131lar\u0131 i\u00e7in ek bir g\u00fcvenlik mekanizmas\u0131d\u0131r ve a\u00e7\u0131l\u0131m\u0131 HTTP Strict Transport Security’dir. Taray\u0131c\u0131ya, bu alan ad\u0131na yap\u0131lan ba\u011flant\u0131lar\u0131n gelecekte yaln\u0131zca HTTPS \u00fczerinden \u00e7al\u0131\u015fabilece\u011fini s\u00f6yleyen bir ba\u015fl\u0131kt\u0131r.<\/p>\n\n\n\n

HTTPS g\u00fcvenli bir ba\u011flant\u0131y\u0131 temsil eder, ancak HSTS olmadan burada bile olas\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131 vard\u0131r. \u00d6zellikle SSL stripping olarak adland\u0131r\u0131lan ve bilgisayar korsanlar\u0131n\u0131n kendilerini sunucu ile taray\u0131c\u0131 aras\u0131na soktuklar\u0131 bir ortadaki adam sald\u0131r\u0131s\u0131 sorunludur. Bu sayede SSL\/TLS \u015fifrelemesini atlayabilir ve parolalar ya da banka bilgileri gibi hassas verileri ele ge\u00e7irebilir.<\/p>\n\n\n\n

HTTP’den HTTPS’ye y\u00f6nlendirme bile art\u0131k yeterli de\u011fildir. \u00c7\u00fcnk\u00fc kullan\u0131c\u0131 g\u00fcvenli sayfaya y\u00f6nlendirilmeyi beklerken, bir bilgisayar korsan\u0131 araya girme f\u0131rsat\u0131na sahip olur. G\u00fcvenli sayfan\u0131n y\u00fcklenmesi bitmeden siber sald\u0131r\u0131 t\u00fcm h\u0131z\u0131yla devam eder ve \u00f6nemli veriler risk alt\u0131nda kal\u0131r.<\/p>\n\n\n\n

HTTP \u00dczerinden G\u00fcvensiz Veri \u0130letimi<\/h2>\n\n\n\n

Web sayfalar\u0131n\u0131n ve verilerin HTTP ba\u011flant\u0131lar\u0131 \u00fczerinden sunulmas\u0131 kullan\u0131c\u0131lar\u0131 g\u00fcvenlik risklerine maruz b\u0131rak\u0131r. Sunucular genellikle birbirlerine do\u011frudan ba\u011fl\u0131 olmad\u0131klar\u0131ndan, isteklerini ve yan\u0131tlar\u0131n\u0131 bir dizi a\u011f y\u00f6nlendiricisinden ge\u00e7irmeleri gerekir. Sunucular aras\u0131nda bulunan bu y\u00f6nlendiriciler, HTTP ba\u011flant\u0131lar\u0131 \u00fczerinden g\u00f6nderilen isteklere tam eri\u015fime sahiptir. Veriler \u015fifrelenmemi\u015f d\u00fcz metin olarak iletildi\u011finden, y\u00f6nlendiriciler ortadaki adam olarak hareket edebilir ve iletim s\u0131ras\u0131nda verileri okuyabilir veya manip\u00fcle edebilir.<\/p>\n\n\n\n

Bu, kullan\u0131c\u0131lar\u0131n manip\u00fcle edilmi\u015f bilgiler almas\u0131na veya bilgisayar korsanlar\u0131 taraf\u0131ndan parola ve kredi kart\u0131 bilgileri gibi bilgileri \u00e7almak i\u00e7in kullan\u0131lan d\u00fc\u015fman sunuculara y\u00f6nlendirilmesine neden olabilir. Sahte HTTP yan\u0131t\u0131 ger\u00e7ek bir yan\u0131ta benzedi\u011fi i\u00e7in bu t\u00fcr bir m\u00fcdahale fark edilmeyebilir.<\/p>\n\n\n\n

HSTS politikas\u0131, t\u00fcm yan\u0131tlar\u0131n d\u00fcz metin HTTP yerine HTTPS ba\u011flant\u0131lar\u0131 \u00fczerinden ge\u00e7mesini zorunlu k\u0131lar. Bu, veriler g\u00f6nderilmeden \u00f6nce t\u00fcm kanal\u0131n \u015fifrelenmesini sa\u011flar. Bu, bilgisayar korsanlar\u0131n\u0131n verileri iletilirken okumas\u0131n\u0131 veya de\u011fi\u015ftirmesini \u00f6nler.<\/p>\n\n\n\n

HSTS Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/h2>\n\n\n
\n
\"\"
Kaynak: acunetix<\/figcaption><\/figure>\n<\/div>\n\n\n

HSTS, web hosting, sanal veya \u00f6zel sunucu veya bulut olup olmad\u0131\u011f\u0131na bak\u0131lmaks\u0131z\u0131n sa\u011flay\u0131c\u0131 aras\u0131nda do\u011frudan bir ba\u011flant\u0131 sa\u011flamak i\u00e7in tasarlanm\u0131\u015f bir prosed\u00fcrd\u00fcr. Bu ama\u00e7la, HTTPS protokol\u00fcnde, istemciye ilk aramadan itibaren yaln\u0131zca SSL veya TLS \u015fifrelemesini kullanmas\u0131 i\u00e7in kesin talimat veren ek bir ba\u015fl\u0131k kullan\u0131r. Kullan\u0131m\u0131 a\u015fa\u011f\u0131daki ko\u015fullara neden olur:<\/p>\n\n\n\n

    \n
  • HTTP \u00fczerinden yap\u0131lan her ba\u011flant\u0131 otomatik olarak HTTPS’ye y\u00f6nlendirilir.<\/li>\n\n\n\n
  • G\u00fcvenlik garanti edilmezse, ileti\u015fim sonland\u0131r\u0131l\u0131r.<\/li>\n\n\n\n
  • \u0130lk \u00e7a\u011fr\u0131da, istemci HSTS varsay\u0131lanlar\u0131n\u0131 al\u0131r.<\/li>\n\n\n\n
  • Taray\u0131c\u0131 t\u00fcm bilgileri belirli bir s\u00fcre boyunca saklar.<\/li>\n\n\n\n
  • HSTS taraf\u0131ndan belirtilen s\u00fcre boyunca \u015fifreleme zorunludur.<\/li>\n\n\n\n
  • \u015eifreleme ba\u015far\u0131s\u0131z olursa, g\u00fcvensiz bir standarda veya \u015fifrelenmemi\u015f ileti\u015fime ge\u00e7mek m\u00fcmk\u00fcn de\u011fildir.<\/li>\n<\/ul>\n\n\n\n

    Somut olarak HSTS, ilk \u00e7a\u011fr\u0131dan itibaren s\u00fcrekli olarak standard\u0131 kullanma y\u00f6nergesi ile ba\u015fl\u0131ktaki basit bir talimattan olu\u015fur. Bu a\u015fa\u011f\u0131daki ifadeden olu\u015fur:<\/p>\n\n\n\n

    Strict-Transport-Security: max-age=time in seconds.<\/p>\n\n\n\n

    \u00d6rne\u011fin, yayg\u0131n bir zaman aral\u0131\u011f\u0131 3153600 saniyedir ve bu da tam bir takvim y\u0131l\u0131na kar\u015f\u0131l\u0131k gelir. Buna ek olarak, HSTS ba\u015fl\u0131\u011f\u0131na iste\u011fe ba\u011fl\u0131 ba\u015fka bilgiler eklemek de m\u00fcmk\u00fcnd\u00fcr. Bunlar noktal\u0131 virg\u00fclle ayr\u0131l\u0131r ve temel olarak test.example.org gibi di\u011fer alt sayfalar i\u00e7in includeSubDomain ek talimatlar\u0131ndan ve ilk ziyarette HTTPS kullan\u0131m\u0131n\u0131 zaten \u00f6ng\u00f6ren \u00f6n y\u00fckleme uzant\u0131s\u0131ndan olu\u015fur.<\/p>\n\n\n\n

    HSTS Uygulamas\u0131na \u00d6rnek<\/h2>\n\n\n\n

    Bir kullan\u0131c\u0131 halka a\u00e7\u0131k bir WLAN \u00fczerinden bankas\u0131n\u0131n \u00e7evrimi\u00e7i bankac\u0131l\u0131k platformuna ba\u011flanmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131nda, eri\u015fim noktas\u0131 bankan\u0131n platformu de\u011fil, bir bilgisayar korsan\u0131n\u0131n bilgisayar\u0131 olabilir. Hacker, banka m\u00fc\u015fterisinin taray\u0131c\u0131s\u0131ndan gelen orijinal HTTP talebini ele ge\u00e7irir ve kullan\u0131c\u0131y\u0131 bankan\u0131n web sitesinin bir klonuna y\u00f6nlendirir. Bu, kredi kart\u0131 bilgileri ve \u015fifre gibi kullan\u0131c\u0131n\u0131n t\u00fcm \u00f6zel verilerini g\u00f6r\u00fcnt\u00fcler ve bilgisayar korsan\u0131 taraf\u0131ndan okunabilir ve su\u00e7 amac\u0131yla k\u00f6t\u00fcye kullan\u0131labilir. HTTP Strict Transport Security politikas\u0131 bu g\u00fcvenlik sorununu ortadan kald\u0131r\u0131r. kullan\u0131c\u0131 bankan\u0131n web sitesine web sitesinden \u00f6nce bir HTTPS ba\u011flant\u0131s\u0131 \u00fczerinden eri\u015fti\u011fi s\u00fcrece, taray\u0131c\u0131 bu t\u00fcr ortadaki adam sald\u0131r\u0131lar\u0131n\u0131 \u00f6nlemek i\u00e7in otomatik olarak HTTPS kullan\u0131r.<\/p>\n\n\n\n

    HSTS G\u00fcvenli\u011fi \u0130\u00e7in \u00d6rnek \u00dcst Bilgiler<\/h2>\n\n\n\n

    Strict-Transport-Security: max-age = 631138519; includeSubdomains<\/p>\n\n\n\n

    Bu ba\u015fl\u0131k, mevcut ve gelecekteki t\u00fcm alt alan adlar\u0131na ba\u011flant\u0131lar da dahil olmak \u00fczere \u00f6n\u00fcm\u00fczdeki 20 y\u0131l boyunca HTTPS kullan\u0131m\u0131n\u0131 zorunlu k\u0131lar.<\/p>\n\n\n\n

    Strict-Transport-Security: max-age = 31536000<\/p>\n\n\n\n

    Bu, bir y\u0131l boyunca HTTPS kullan\u0131m\u0131n\u0131 zorunlu k\u0131lar, ancak alt alan adlar\u0131n\u0131 i\u00e7ermez.<\/p>\n\n\n\n

    HSTS Ne T\u00fcr Siber Sald\u0131r\u0131lar\u0131 \u00d6nler?<\/h2>\n\n\n\n

    IETF, 2009 y\u0131l\u0131nda HTTPS protokol\u00fcndeki g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n yay\u0131nlanmas\u0131na do\u011frudan bir yan\u0131t olarak HSTS’yi geli\u015ftirdi. Bilgisayar korsanlar\u0131 taraf\u0131ndan ger\u00e7ekle\u015ftirilen bu ortadaki adam sald\u0131r\u0131lar\u0131nda, \u00fc\u00e7\u00fcnc\u00fc bir taraf kendisini istemci ile sunucu aras\u0131na sokar ve ileti\u015fim i\u00e7in ilk bak\u0131\u015fta d\u0131\u015far\u0131dan g\u00f6r\u00fcnmeyen bir d\u00fc\u011f\u00fcm sa\u011flar. Web sunucusuna kar\u015f\u0131 me\u015fru \u015fifreleme kullan\u0131r, ancak istemciye kar\u015f\u0131 kendi ba\u011flant\u0131s\u0131n\u0131 kullan\u0131r ve bu \u015fekilde g\u00fcvenli ve kesintisiz eri\u015fim gibi davran\u0131r. Bu y\u00f6ntemle bir bilgisayar korsan\u0131, veri trafi\u011fini yo\u011fun bir \u015fekilde incelemeden, hedeflenen ki\u015fi ya da muhatab\u0131 bunu fark etmeden t\u00fcm ileti\u015fimi kesebilir ve de\u011fi\u015ftirebilir.<\/p>\n\n\n\n

    HSTS, kat\u0131 \u00f6zellikleri sayesinde, baz\u0131lar\u0131 uzun zamand\u0131r bilinen ve baz\u0131lar\u0131 yeni geli\u015ftirilen di\u011fer senaryolar\u0131 da \u00f6nler. Bunlardan biri, art\u0131k g\u00fcvensiz olarak kabul edilen ve eski sistemlerle kapsaml\u0131 uyumluluk sa\u011flamak i\u00e7in taray\u0131c\u0131lar\u0131n ve web sunucular\u0131n\u0131n desteklemeye devam etti\u011fi SSL \u015fifrelemesine d\u0131\u015far\u0131dan zorla ba\u015fvurulmas\u0131d\u0131r. \u0130kinci bir varyant ise, \u00fc\u00e7\u00fcnc\u00fc bir taraf\u0131n oturum numaras\u0131 gibi kimlik verilerine dayanarak bir istemcinin kimli\u011fini \u00fcstlendi\u011fi ve web sunucusunun kimlik do\u011frulama zaten ger\u00e7ekle\u015fmi\u015f oldu\u011fu i\u00e7in me\u015fru olarak yorumlad\u0131\u011f\u0131 istemci ad\u0131na paketler g\u00f6nderdi\u011fi oturumlar\u0131n “ele ge\u00e7irilmesidir”.<\/p>\n\n\n\n

    HSTS Ne Kadar G\u00fcvenli?<\/h2>\n\n\n\n

    HSTS-Header, \u00e7e\u015fitli siber sald\u0131r\u0131lar\u0131 \u00f6nlemeye yard\u0131mc\u0131 olur. Bunlar aras\u0131nda bir t\u00fcr ortadaki adam sald\u0131r\u0131s\u0131 (MITM) olan SSL-Stripping, oturum ele ge\u00e7irme giri\u015fimleri (\u00e7erez ele ge\u00e7irme veya sidejacking olarak da bilinir) ve \u00e7e\u015fitli siber sald\u0131r\u0131lar yer al\u0131r. Bu durum \u00f6zellikle bir web sitesi \u00f6n y\u00fckleme listelerine eklendi\u011finde s\u00f6z konusudur.<\/p>\n\n\n\n

    Ancak, \u00f6ny\u00fckleme se\u00e7ene\u011fi mevcut olmad\u0131\u011f\u0131nda bile belirli s\u0131n\u0131rlamalar ve g\u00fcvenlik a\u00e7\u0131klar\u0131 mevcuttur. \u00d6rne\u011fin, bir web sitesine yap\u0131lan ilk istek HTTPS’ye y\u00f6nlendirilse bile d\u00fcz HTTP gibi g\u00fcvensiz bir protokol kullan\u0131l\u0131yorsa siber sald\u0131r\u0131ya a\u00e7\u0131kt\u0131r. Bu sorun i\u00e7in \u00e7ok az ge\u00e7ici \u00e7\u00f6z\u00fcm vard\u0131r. Bu sorunu \u00e7\u00f6zmenin bir yolu, HSTS politikas\u0131n\u0131 bildiren DNS kay\u0131tlar\u0131n\u0131 kullanmak ve bu kay\u0131tlara DNSSEC arac\u0131l\u0131\u011f\u0131yla g\u00fcvenli bir \u015fekilde eri\u015fmektir.<\/p>\n\n\n\n

    HSTS-Header, nas\u0131l ayarland\u0131\u011f\u0131ndan ba\u011f\u0131ms\u0131z olarak, kullan\u0131c\u0131lar\u0131 kendilerini ziyaret etmeleri i\u00e7in kand\u0131ran sahte alan adlar\u0131n\u0131n kullan\u0131m\u0131n\u0131 engelleyemez. Bu, ba\u015fka bir MITM t\u00fcr\u00fc olan DNS sahtekarl\u0131\u011f\u0131 veya bir web sitesinin alan ad\u0131na \u00e7ok benzeyen alan adlar\u0131 kullanan bilgisayar korsanlar\u0131 taraf\u0131ndan ger\u00e7ekle\u015ftirilebilir.<\/p>\n\n\n\n

    Son olarak, HSTS TLS protokol\u00fcn\u00fcn kendisine y\u00f6nelik sald\u0131r\u0131lar\u0131 \u00f6nleyemez. BEAST ve CRIME gibi sald\u0131r\u0131lar, TLS’nin belirli s\u00fcr\u00fcmlerinde veya uygulamalar\u0131nda bulunan g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 hedef al\u0131r ve bu politika kapsam\u0131nda de\u011fildir.<\/p>\n\n\n\n

    HSTS’nin Avantajlar\u0131 ve Dezavantajlar\u0131 Nelerdir?<\/h2>\n\n\n\n

    Temel olarak HSTS, HTTPS alt\u0131ndaki ola\u011fan g\u00fcvenlik kurallar\u0131n\u0131 geni\u015fletir ve istemcinin mevcut y\u00f6nergelere s\u0131k\u0131 s\u0131k\u0131ya uymas\u0131n\u0131 gerektirir. Bu \u015fekilde, daha sonraki bir zamanda, \u00f6rne\u011fin daha eski ve zaten tehlikeye at\u0131lm\u0131\u015f veya \u015fifrelemeyi ge\u00e7ici olarak ask\u0131ya alarak g\u00fcvenli\u011fi zay\u0131flatma olas\u0131l\u0131\u011f\u0131n\u0131 \u00f6nler. Bu da \u00e7e\u015fitli avantajlar sa\u011flar:<\/p>\n\n\n\n

      \n
    • Mevcut HTTPS standard\u0131nda yer alan g\u00fcvenlik \u00f6nlemlerinin garantili bir \u015fekilde uygulanmas\u0131.<\/li>\n\n\n\n
    • \u015eifrelenmemi\u015f ba\u011flant\u0131lar\u0131n yanl\u0131\u015fl\u0131kla kullan\u0131lmas\u0131 m\u00fcmk\u00fcn de\u011fildir.<\/li>\n\n\n\n
    • \u015eifreleme ba\u015flamadan \u00f6nce verilerin dinlenmesi art\u0131k m\u00fcmk\u00fcn de\u011fildir.<\/li>\n\n\n\n
    • D\u00fc\u015f\u00fck ek y\u00fck ve performansta d\u00fc\u015f\u00fc\u015f yoktur.<\/li>\n\n\n\n
    • Bir y\u0131l veya daha uzun bir s\u00fcre boyunca garantili veri g\u00fcvenli\u011fi sa\u011flar.<\/li>\n\n\n\n
    • \u015eifrelenmemi\u015f HTTP protokol\u00fc \u00fczerinden ba\u011flant\u0131ya izin verilmez.<\/li>\n\n\n\n
    • WordPress veya Joomla gibi farkl\u0131 CMS taraf\u0131ndan i\u015flevsellik k\u0131s\u0131tlamas\u0131 yoktur.<\/li>\n<\/ul>\n\n\n\n

      Buna kar\u015f\u0131l\u0131k, dezavantajlar\u0131 da nispeten d\u00fc\u015f\u00fckt\u00fcr. Bir kerelik kurulum ve Google Chromium \u00d6n Y\u00fckleme listesine kay\u0131ttan sonra HSTS g\u00fcnl\u00fck kullan\u0131mda olumsuz bir etkiye sahip de\u011fildir ve kaynak t\u00fcketiminin artmas\u0131na neden olmaz. Bununla birlikte, eri\u015fim olanaklar\u0131nda belirli bir k\u0131s\u0131tlama vard\u0131r. \u00d6rne\u011fin eski cihazlar, i\u015fletim sistemleri veya yaz\u0131l\u0131mlar HSTS taraf\u0131ndan belirlenen gereksinimleri kar\u015f\u0131lamayabilir. Bununla birlikte, \u00f6rne\u011fin her ziyaret\u00e7inin HTTPS kullanmas\u0131n\u0131 veya do\u011frudan buna y\u00f6nlendirmesini gerektiren alternatifler vard\u0131r.<\/p>\n\n\n\n

      HSTS Web Hosting \u00dczerinde Nas\u0131l Etkinle\u015ftirilebilir?<\/h2>\n\n\n\n

      HSTS’yi bir web hosting veya herhangi bir sunucu ile kullanabilmek i\u00e7in, HTTP ba\u015fl\u0131\u011f\u0131nda ilgili bir girdi olu\u015fturmak teknik olarak yeterlidir. Bunu yapmak i\u00e7in, Apache 2 web sunucusunda Headers mod\u00fcl\u00fc etkinle\u015ftirilmelidir. Bu, \u00f6rne\u011fin sanal veya \u00f6zel bir sunucuda SSH arac\u0131l\u0131\u011f\u0131yla a\u015fa\u011f\u0131daki komutlar kullan\u0131larak yap\u0131labilir:<\/p>\n\n\n\n

      \u201csudo a2enmod headers\u201d<\/strong><\/p>\n\n\n\n

      Aktivasyon i\u00e7in <\/p>\n\n\n\n

      \u201csudo service apache restart\u201d<\/strong><\/p>\n\n\n\n

      yeniden ba\u015flatma i\u00e7in. <\/p>\n\n\n\n

      Son olarak, operat\u00f6r a\u015fa\u011f\u0131daki sat\u0131r\u0131 ekleyerek HSTS implante edebilir.<\/p>\n\n\n\n

      Ba\u015fl\u0131k her zaman Strict-Transport-Security “max-age=4838400; includeSubdomains;” olarak ayarlan\u0131r.<\/p>\n\n\n\n

      global httpd.conf i\u00e7inde. Yaln\u0131zca s\u00f6zde sanal ana bilgisayar\u0131n yerel yap\u0131land\u0131rmas\u0131na eri\u015fime izin veren bir web hosting\u2019de ise, bu, 443 numaral\u0131 ba\u011flant\u0131 noktas\u0131 alt\u0131ndaki HTTPS protokol\u00fc i\u00e7in ilgili b\u00f6l\u00fcme eklenerek de yap\u0131labilir. SSH eri\u015fimi olmayan kullan\u0131c\u0131lar i\u00e7in bir ba\u015fka olas\u0131l\u0131k da ilgili giri\u015fle bir .htaccess dosyas\u0131 olu\u015fturmakt\u0131r. Ancak bunun performans \u00fczerinde olumsuz bir etkisi vard\u0131r.<\/p>\n\n\n\n

      Pop\u00fcler sunucu NGINX ile de prosed\u00fcr benzerdir, ancak burada sat\u0131r<\/p>\n\n\n\n

      add_header Strict-Transport-Security “max-age=4838400; includeSubDomains”;<\/p>\n\n\n\n

      global yap\u0131land\u0131rmaya ya da yerel sunucu blo\u011funa eklenir.<\/p>\n\n\n\n

      Microsoft IIS web sunucusunun yan\u0131 s\u0131ra baz\u0131 web hosting sa\u011flay\u0131c\u0131lar\u0131 veya Plesk gibi y\u00f6netim ara\u00e7lar\u0131, HSTS’nin do\u011frudan grafik aray\u00fcz \u00fczerinden etkinle\u015ftirilmesine izin verir. Ancak Webmin veya DirectAdmin gibi di\u011fer ara\u00e7larda, kullan\u0131c\u0131lar\u0131n yap\u0131land\u0131rma dosyalar\u0131 i\u00e7in dahili d\u00fczenleyici arac\u0131l\u0131\u011f\u0131yla sat\u0131r\u0131 manuel olarak eklemesi ve ilgili buton arac\u0131l\u0131\u011f\u0131yla de\u011fi\u015fiklikleri etkinle\u015ftirmesi gerekir. Olas\u0131 alternatifler, WordPress, TYPO3 veya Joomla gibi CMS’ler i\u00e7in ba\u015fl\u0131\u011f\u0131 etkinle\u015ftiren ve her istekte ekleyen eklentilerdir.<\/p>\n","protected":false},"excerpt":{"rendered":"

      \u0130nternette g\u00fcvenlik, b\u00fcy\u00fcyen a\u011f nedeniyle giderek daha \u00f6nemli hale gelmektedir. Bu y\u00fczden web sitelerinin ve ileti\u015fimin g\u00fcvenli kabul edilen Secure Socket Layer (SSL) veya halefi…<\/p>\n","protected":false},"author":11,"featured_media":7963,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[49],"tags":[],"class_list":["post-7923","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guvenlik"],"yoast_head":"\nHSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r? - Niobe Hosting<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r? - Niobe Hosting\" \/>\n<meta property=\"og:description\" content=\"\u0130nternette g\u00fcvenlik, b\u00fcy\u00fcyen a\u011f nedeniyle giderek daha \u00f6nemli hale gelmektedir. Bu y\u00fczden web sitelerinin ve ileti\u015fimin g\u00fcvenli kabul edilen Secure Socket Layer (SSL) veya halefi...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/\" \/>\n<meta property=\"og:site_name\" content=\"Niobe Hosting\" \/>\n<meta property=\"article:published_time\" content=\"2023-10-14T15:12:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-14T15:12:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/hsts-nedir-kurulumu-nasil-yapilir.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Sibel Ho\u015f\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sibel Ho\u015f\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/\"},\"author\":{\"name\":\"Sibel Ho\u015f\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#\\\/schema\\\/person\\\/9edcd33ccd851c17242fa59c562c1f26\"},\"headline\":\"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r?\",\"datePublished\":\"2023-10-14T15:12:39+00:00\",\"dateModified\":\"2023-10-14T15:12:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/\"},\"wordCount\":2346,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/hsts-nedir-kurulumu-nasil-yapilir.jpeg\",\"articleSection\":[\"G\u00fcvenlik\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/\",\"name\":\"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r? - Niobe Hosting\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/hsts-nedir-kurulumu-nasil-yapilir.jpeg\",\"datePublished\":\"2023-10-14T15:12:39+00:00\",\"dateModified\":\"2023-10-14T15:12:40+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/hsts-nedir-kurulumu-nasil-yapilir.jpeg\",\"contentUrl\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/hsts-nedir-kurulumu-nasil-yapilir.jpeg\",\"width\":1000,\"height\":500},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/hsts-nedir-kurulumu-nasil-yapilir\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/\",\"name\":\"Niobe Hosting\",\"description\":\"Niobe Hosting\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#organization\",\"name\":\"Niobe Hosting\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/blog-logo.png\",\"contentUrl\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/wp-content\\\/uploads\\\/blog-logo.png\",\"width\":332,\"height\":49,\"caption\":\"Niobe Hosting\"},\"image\":{\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/#\\\/schema\\\/person\\\/9edcd33ccd851c17242fa59c562c1f26\",\"name\":\"Sibel Ho\u015f\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g\",\"caption\":\"Sibel Ho\u015f\"},\"sameAs\":[\"https:\\\/\\\/www.instagram.com\\\/bismoothie\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/sibelhos\\\/\"],\"url\":\"https:\\\/\\\/www.niobehosting.com\\\/blog\\\/author\\\/sibel\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r? - Niobe Hosting","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/","og_locale":"tr_TR","og_type":"article","og_title":"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r? - Niobe Hosting","og_description":"\u0130nternette g\u00fcvenlik, b\u00fcy\u00fcyen a\u011f nedeniyle giderek daha \u00f6nemli hale gelmektedir. Bu y\u00fczden web sitelerinin ve ileti\u015fimin g\u00fcvenli kabul edilen Secure Socket Layer (SSL) veya halefi...","og_url":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/","og_site_name":"Niobe Hosting","article_published_time":"2023-10-14T15:12:39+00:00","article_modified_time":"2023-10-14T15:12:40+00:00","og_image":[{"width":1000,"height":500,"url":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/hsts-nedir-kurulumu-nasil-yapilir.jpeg","type":"image\/jpeg"}],"author":"Sibel Ho\u015f","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Sibel Ho\u015f","Tahmini okuma s\u00fcresi":"10 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/#article","isPartOf":{"@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/"},"author":{"name":"Sibel Ho\u015f","@id":"https:\/\/www.niobehosting.com\/blog\/#\/schema\/person\/9edcd33ccd851c17242fa59c562c1f26"},"headline":"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r?","datePublished":"2023-10-14T15:12:39+00:00","dateModified":"2023-10-14T15:12:40+00:00","mainEntityOfPage":{"@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/"},"wordCount":2346,"commentCount":0,"publisher":{"@id":"https:\/\/www.niobehosting.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/#primaryimage"},"thumbnailUrl":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/hsts-nedir-kurulumu-nasil-yapilir.jpeg","articleSection":["G\u00fcvenlik"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/","url":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/","name":"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r? - Niobe Hosting","isPartOf":{"@id":"https:\/\/www.niobehosting.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/#primaryimage"},"image":{"@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/#primaryimage"},"thumbnailUrl":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/hsts-nedir-kurulumu-nasil-yapilir.jpeg","datePublished":"2023-10-14T15:12:39+00:00","dateModified":"2023-10-14T15:12:40+00:00","breadcrumb":{"@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/"]}]},{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/#primaryimage","url":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/hsts-nedir-kurulumu-nasil-yapilir.jpeg","contentUrl":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/hsts-nedir-kurulumu-nasil-yapilir.jpeg","width":1000,"height":500},{"@type":"BreadcrumbList","@id":"https:\/\/www.niobehosting.com\/blog\/hsts-nedir-kurulumu-nasil-yapilir\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/www.niobehosting.com\/blog\/"},{"@type":"ListItem","position":2,"name":"HSTS Nedir? Kurulumu Nas\u0131l Yap\u0131l\u0131r?"}]},{"@type":"WebSite","@id":"https:\/\/www.niobehosting.com\/blog\/#website","url":"https:\/\/www.niobehosting.com\/blog\/","name":"Niobe Hosting","description":"Niobe Hosting","publisher":{"@id":"https:\/\/www.niobehosting.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.niobehosting.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":"Organization","@id":"https:\/\/www.niobehosting.com\/blog\/#organization","name":"Niobe Hosting","url":"https:\/\/www.niobehosting.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/www.niobehosting.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/blog-logo.png","contentUrl":"https:\/\/www.niobehosting.com\/blog\/wp-content\/uploads\/blog-logo.png","width":332,"height":49,"caption":"Niobe Hosting"},"image":{"@id":"https:\/\/www.niobehosting.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.niobehosting.com\/blog\/#\/schema\/person\/9edcd33ccd851c17242fa59c562c1f26","name":"Sibel Ho\u015f","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/secure.gravatar.com\/avatar\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f925f03d20ff0803ddb37c96d39d3793c085014ce56421050f24823c23db1c2a?s=96&d=mm&r=g","caption":"Sibel Ho\u015f"},"sameAs":["https:\/\/www.instagram.com\/bismoothie\/","https:\/\/www.linkedin.com\/in\/sibelhos\/"],"url":"https:\/\/www.niobehosting.com\/blog\/author\/sibel\/"}]}},"_links":{"self":[{"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/posts\/7923","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/comments?post=7923"}],"version-history":[{"count":3,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/posts\/7923\/revisions"}],"predecessor-version":[{"id":7966,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/posts\/7923\/revisions\/7966"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/media\/7963"}],"wp:attachment":[{"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/media?parent=7923"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/categories?post=7923"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.niobehosting.com\/blog\/wp-json\/wp\/v2\/tags?post=7923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}