HTTPS yana kare abun ciki na shafi, amma ba koyaushe yana \u0253oye sunan rukunin yanar gizon mai binciken da ke \u0199o\u0199arin isa ba. Wannan gibin yana da mahimmanci akan Wi-Fi na jama’a, makaranta, otal, wurin aiki, da kuma cibiyoyin sadarwa masu \u0199untatawa inda za’a iya tace dama ta hanyar ha\u0257in kai.<\/p>\n
Salo Abokin Ciniki Sannu, ko ECH, yana rage wannan fallasa. Yana kare sassa masu mahimmanci na TLS ClientHello, gami da sunan mai masaukin da aka saba gani ta alamar sunan uwar garke. ECH ba fasalin VPN ba ne, baya sanya masu amfani a \u0253oye, kuma baya bada garantin samun dama. Yana rufe tazarar metadata mai mahimmanci guda \u0257aya yayin da VPNs, rufaffen DNS, saitunan burauza, da halayen asusu na hankali sun kasance daban-daban.<\/p>\n
Mai bincike yawanci yana duba yanki ta hanyar DNS sannan ya fara musafaha TLS. TLS yana taimakawa \u0253oye abun cikin shafi, kalmomin shiga, sa\u0199onni, da fayiloli. Shekaru da yawa, sunan mai masauki a waccan musafaha ya kasance a bayyane azaman SNI. SNI ya wanzu saboda yawancin gidajen yanar gizo suna raba adireshin IP \u0257aya kuma uwar garken yana bu\u0199atar sanin takaddun shaida zai gabatar.<\/p>\n
Wannan \u0199imar TLS SNI da ake iya gani na iya bayyana yankin wane yanki ne na’ura ke \u0199o\u0199arin ziyarta, koda lokacin da abun cikin shafin ya kasance a \u0253oye.<\/p>\n
SNI tacewa yana nufin ba da izini, toshewa, ko katse ha\u0257in HTTPS dangane da sunan mai masaukin da ake gani a farkon musafikar TLS. Mai aiki na cibiyar sadarwa na iya bincika SNI, kwatanta shi da jeri, da sake saita ko toshe ha\u0257in ba tare da yanke cikakken zaman HTTPS ba. Ga masu amfani, sakamakon zai yi kama da gazawar ha\u0257in kai.<\/p>\n
Rufaffen Abokin Ciniki Sannu yana rufawa ClientHello asiri mai mahimmanci tare da ma\u0253allin jama’a na uwar garken. Mai binciken yana aika da \u0199arancin bayyanawa ClientHello da rufaffen ClientHello na ciki wanda kayan aikin gefen uwar garken kawai zai iya karantawa. Mai kallo na iya ganin ha\u0257in kai zuwa abubuwan ha\u0257in kai, amma bai kamata ya ga sunan mai masaukin da aka kare kai tsaye ba.<\/p>\n
Wannan shine mahimmin \u0199imar rufaffen abokin ciniki hello: yana rage zubewar sunan mai masauki kai tsaye yayin musabahan TLS mai goyan baya. Har ila yau, yana bayyana matakin da ya wuce \u0253oyayyen SNI. Rufaffen SNI shine farkon tunanin rufaffen SNI kawai; ECH yana kare \u0199arin ClientHello, gami da SNI da sauran sigogi masu mahimmanci.<\/p>\n
ECH ba cikakken sirri bane. Tambayoyin DNS na iya bayyana yankuna idan ba a yi amfani da \u0253oyayyen DNS ba. Adireshin IP suna nan a bayyane don tu\u0199i. Lokacin zirga-zirga da \u0199arar har yanzu na iya ba da alamu. Asusun da aka shiga, kukis, sawun yatsa na burauza, da halayyar app na iya gano ko wa\u0199a da masu amfani. ECH yana aiki ne kawai lokacin da mai lilo, hanyar DNS, da sabis na manufa suka goyi bayansa.<\/p>\n
SNI tacewa ya zama mai amfani ga masu tace bayanai saboda daidai ne. Idan sunan mai masaukin yana bayyane, tacewa zai iya kaiwa wani yanki hari ba tare da toshe kowane rukunin yanar gizo akan adireshin IP iri \u0257aya ba. ECH na iya sanya waccan gajeriyar hanyar ta zama \u0199asa da abin dogaro idan an sami cikakken goyan baya. Duk da haka, ba ta kayar da aikin tantancewa da kanta ba. Cibiyoyin sadarwa na iya amfani da toshewar DNS, toshewar IP, sarrafawar \u0199arshen \u0199arshen, nazarin zirga-zirga, ko toshe zirga-zirgar ababen hawa kai tsaye na ECH.<\/p>\n
Ga masu karanta tauraron dan adam na VPN, ECH da VPN suna amfani da amsa sassa daban-daban na matsalar sirri. ECH yana rage bayyanar sunan mai masaukin baki a cikin musafaha mai goyan bayan HTTPS. VPN yana canza hanyar zirga-zirga ta gida ta hanyar aika zirga-zirga ta hanyar rufaffiyar rami zuwa uwar garken VPN. Tare da VPN Unlimited ta KeepSolid, cibiyar sadarwar Wi-Fi ta gida ko ISP yakamata ta ga ha\u0257in VPN gaba\u0257aya maimakon raba ha\u0257in kai tsaye zuwa kowane rukunin yanar gizo.<\/p>\n
VPN na iya zama da amfani akan Wi-Fi na jama’a, cibiyoyin sadarwar otal, cibiyoyin harabar jami’a, gidajen da aka raba, da sauran hanyoyin sadarwar da ba ku sarrafawa. Ba ya sa ku zama abin \u0253oye ga gidajen yanar gizon da kuka shiga, cire kukis, ba da garantin samun dama ga kowane sabis, yanke shawara ko gidan yanar gizon yana goyan bayan ECH, ko maye gurbin tsabtace mai bincike da wayar da kan doka.<\/p>\n
Masu bincike na zamani suna da yuwuwar ha\u0257awa da sabbin ha\u0253aka sirrin TLS, kodayake tallafi ya bambanta ta dandamali da saituna.<\/p>\n
HTTPS yana kare abun ciki. Sirri na metadata yana da ala\u0199a amma daban, kuma SNI \u0257aya ce daga cikin gibin da ECH ke nufi don ragewa.<\/p>\n
ECH sau da yawa ya dogara da bayanan DNS. Idan an katange DNS, gyaggyarawa, ko bayyane a bayyane, \u0253angaren fa’idar ke\u0253antawa na iya raunana.<\/p>\n
VPN ya fi dacewa lokacin da cibiyar sadarwar gida ita ce babbar damuwa. Zai iya rage ganuwa kai tsaye ga waccan hanyar sadarwar, amma Layer \u0257aya ce, ba cikakkiyar hanyar sirri ba.<\/p>\n
Shigar da gwada kayan aikin ke\u0253antawa kafin ku kasance kan hanyar sadarwa mai \u0199untatawa. Bincika dokokin gida, saboda wannan labarin shine ilimin fasaha kuma ba shawara na doka ba.<\/p>\n
A’a. ECH tsarin sirri ne na TLS don ha\u0257in ha\u0257in HTTPS masu goyan bayan. VPN yana bibiyar zirga-zirgar na’urar ta hanyar rufaffen rami zuwa uwar garken VPN.<\/p>\n
A’a. Zai iya rage amfanin tace tushen SNI lokacin da aka goyan baya, amma cibiyoyin sadarwa na iya amfani da wasu hanyoyin tacewa.<\/p>\n
Sabar tana bu\u0199atar sanin wace takardar shaidar da zata gabatar kafin rufaffen zaman ya kasance cikakke.<\/p>\n
ECH yana kare yanki na metadata na yanar gizo wanda ya tsaya fallasa na dogon lokaci. Darasi mai amfani shine sirrin sirri: HTTPS yana kare abun ciki, ECH yana taimakawa kare musafiha, rufaffen DNS yana rage \u0257igon DNS, kuma VPN yana rage abin da cibiyar sadarwar gida ke gani game da hanyar zirga-zirga.<\/p>\n","protected":false},"excerpt":{"rendered":"
Encrypted Client Hello na taimakawa wajen boye wani bangare na HTTPS metadata da ya dade yana bayyana: hostname da ake aika wa yayin TLS handshake. Wannan ya bayyana abin da ECH ke canzawa, abin da baya boyewa, da yadda masu amfani da VPN za su fahimce shi.<\/p>\n","protected":false},"author":0,"featured_media":51,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[75,79,77,18,76,78,59],"class_list":["post-50","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-online-privacy","tag-encrypted-client-hello","tag-encrypted-dns","tag-https-privacy","tag-internet-censorship","tag-sni-filtering","tag-tls","tag-vpn-privacy"],"yoast_head":"\n