Abokin ɓoyayyen Sannu Sannu da Tacewar SNI: Abin da Keɓaɓɓu-Masu Amfani da VPN yakamata su sani

HTTPS yana kare abun ciki na shafi, amma ba koyaushe yana ɓoye sunan rukunin yanar gizon mai binciken da ke ƙoƙarin isa ba. Wannan gibin yana da mahimmanci akan Wi-Fi na jama’a, makaranta, otal, wurin aiki, da kuma cibiyoyin sadarwa masu ƙuntatawa inda za’a iya tace dama ta hanyar haɗin kai.

Salo Abokin Ciniki Sannu, ko ECH, yana rage wannan fallasa. Yana kare sassa masu mahimmanci na TLS ClientHello, gami da sunan mai masaukin da aka saba gani ta alamar sunan uwar garke. ECH ba fasalin VPN ba ne, baya sanya masu amfani a ɓoye, kuma baya bada garantin samun dama. Yana rufe tazarar metadata mai mahimmanci guda ɗaya yayin da VPNs, rufaffen DNS, saitunan burauza, da halayen asusu na hankali sun kasance daban-daban.

Gap Sirrin HTTPS: SNI

Mai bincike yawanci yana duba yanki ta hanyar DNS sannan ya fara musafaha TLS. TLS yana taimakawa ɓoye abun cikin shafi, kalmomin shiga, saƙonni, da fayiloli. Shekaru da yawa, sunan mai masauki a waccan musafaha ya kasance a bayyane azaman SNI. SNI ya wanzu saboda yawancin gidajen yanar gizo suna raba adireshin IP ɗaya kuma uwar garken yana buƙatar sanin takaddun shaida zai gabatar.

Wannan ƙimar TLS SNI da ake iya gani na iya bayyana yankin wane yanki ne na’ura ke ƙoƙarin ziyarta, koda lokacin da abun cikin shafin ya kasance a ɓoye.

Me SNI Tace Yanayi

SNI tacewa yana nufin ba da izini, toshewa, ko katse haɗin HTTPS dangane da sunan mai masaukin da ake gani a farkon musafikar TLS. Mai aiki na cibiyar sadarwa na iya bincika SNI, kwatanta shi da jeri, da sake saita ko toshe haɗin ba tare da yanke cikakken zaman HTTPS ba. Ga masu amfani, sakamakon zai yi kama da gazawar haɗin kai.

Abin da Abokin ciniki ya ɓoye Sannu Canje-canje

Rufaffen Abokin Ciniki Sannu yana rufawa ClientHello asiri mai mahimmanci tare da maɓallin jama’a na uwar garken. Mai binciken yana aika da ƙarancin bayyanawa ClientHello da rufaffen ClientHello na ciki wanda kayan aikin gefen uwar garken kawai zai iya karantawa. Mai kallo na iya ganin haɗin kai zuwa abubuwan haɗin kai, amma bai kamata ya ga sunan mai masaukin da aka kare kai tsaye ba.

Wannan shine mahimmin ƙimar rufaffen abokin ciniki hello: yana rage zubewar sunan mai masauki kai tsaye yayin musabahan TLS mai goyan baya. Har ila yau, yana bayyana matakin da ya wuce ɓoyayyen SNI. Rufaffen SNI shine farkon tunanin rufaffen SNI kawai; ECH yana kare ƙarin ClientHello, gami da SNI da sauran sigogi masu mahimmanci.

Abin da ECH baya Boyewa

ECH ba cikakken sirri bane. Tambayoyin DNS na iya bayyana yankuna idan ba a yi amfani da ɓoyayyen DNS ba. Adireshin IP suna nan a bayyane don tuƙi. Lokacin zirga-zirga da ƙarar har yanzu na iya ba da alamu. Asusun da aka shiga, kukis, sawun yatsa na burauza, da halayyar app na iya gano ko waƙa da masu amfani. ECH yana aiki ne kawai lokacin da mai lilo, hanyar DNS, da sabis na manufa suka goyi bayansa.

Dalilin da yasa yake da mahimmanci don Resistance Censorship

SNI tacewa ya zama mai amfani ga masu tace bayanai saboda daidai ne. Idan sunan mai masaukin yana bayyane, tacewa zai iya kaiwa wani yanki hari ba tare da toshe kowane rukunin yanar gizo akan adireshin IP iri ɗaya ba. ECH na iya sanya waccan gajeriyar hanyar ta zama ƙasa da abin dogaro idan an sami cikakken goyan baya. Duk da haka, ba ta kayar da aikin tantancewa da kanta ba. Cibiyoyin sadarwa na iya amfani da toshewar DNS, toshewar IP, sarrafawar ƙarshen ƙarshen, nazarin zirga-zirga, ko toshe zirga-zirgar ababen hawa kai tsaye na ECH.

Inda VPN yayi amfani da shi

Ga masu karanta tauraron dan adam na VPN, ECH da VPN suna amfani da amsa sassa daban-daban na matsalar sirri. ECH yana rage bayyanar sunan mai masaukin baki a cikin musafaha mai goyan bayan HTTPS. VPN yana canza hanyar zirga-zirga ta gida ta hanyar aika zirga-zirga ta hanyar rufaffiyar rami zuwa uwar garken VPN. Tare da VPN Unlimited ta KeepSolid, cibiyar sadarwar Wi-Fi ta gida ko ISP yakamata ta ga haɗin VPN gabaɗaya maimakon raba haɗin kai tsaye zuwa kowane rukunin yanar gizo.

VPN na iya zama da amfani akan Wi-Fi na jama’a, cibiyoyin sadarwar otal, cibiyoyin harabar jami’a, gidajen da aka raba, da sauran hanyoyin sadarwar da ba ku sarrafawa. Ba ya sa ku zama abin ɓoye ga gidajen yanar gizon da kuka shiga, cire kukis, ba da garantin samun dama ga kowane sabis, yanke shawara ko gidan yanar gizon yana goyan bayan ECH, ko maye gurbin tsabtace mai bincike da wayar da kan doka.

Lissafin Mahimmanci

Rike burauzar ku a halin yanzu

Masu bincike na zamani suna da yuwuwar haɗawa da sabbin haɓaka sirrin TLS, kodayake tallafi ya bambanta ta dandamali da saituna.

Yi amfani da HTTPS, amma fahimtar metadata

HTTPS yana kare abun ciki. Sirri na metadata yana da alaƙa amma daban, kuma SNI ɗaya ce daga cikin gibin da ECH ke nufi don ragewa.

Bi da rufaffiyar DNS azaman ɓangaren hoton

ECH sau da yawa ya dogara da bayanan DNS. Idan an katange DNS, gyaggyarawa, ko bayyane a bayyane, ɓangaren fa’idar keɓantawa na iya raunana.

Yi amfani da VPN akan hanyoyin sadarwar da ba ku amince da su ba

VPN ya fi dacewa lokacin da cibiyar sadarwar gida ita ce babbar damuwa. Zai iya rage ganuwa kai tsaye ga waccan hanyar sadarwar, amma Layer ɗaya ce, ba cikakkiyar hanyar sirri ba.

Yi shiri kafin tafiya

Shigar da gwada kayan aikin keɓantawa kafin ku kasance kan hanyar sadarwa mai ƙuntatawa. Bincika dokokin gida, saboda wannan labarin shine ilimin fasaha kuma ba shawara na doka ba.

FAQ

Shin Abokin Ciniki Sannu iri ɗaya ne da VPN?

A’a. ECH tsarin sirri ne na TLS don haɗin haɗin HTTPS masu goyan bayan. VPN yana bibiyar zirga-zirgar na’urar ta hanyar rufaffen rami zuwa uwar garken VPN.

Shin ECH ta daina duk wani tacewa SNI?

A’a. Zai iya rage amfanin tace tushen SNI lokacin da aka goyan baya, amma cibiyoyin sadarwa na iya amfani da wasu hanyoyin tacewa.

Me yasa ake ganin SNI idan an rufaffen HTTPS?

Sabar tana buƙatar sanin wace takardar shaidar da zata gabatar kafin rufaffen zaman ya kasance cikakke.

Layin Kasa

ECH yana kare yanki na metadata na yanar gizo wanda ya tsaya fallasa na dogon lokaci. Darasi mai amfani shine sirrin sirri: HTTPS yana kare abun ciki, ECH yana taimakawa kare musafiha, rufaffen DNS yana rage ɗigon DNS, kuma VPN yana rage abin da cibiyar sadarwar gida ke gani game da hanyar zirga-zirga.