RFC 9849. TLS Encrypted Client Moni

Kuyenda Pamalo Osintha Paintaneti

Kwa zaka zambiri, intaneti yakhala ikudalira kusamalidwa bwino pakati pa chitetezo ndi mawonekedwe. Ma protocol monga Transport Layer Security (TLS), mwala wapangodya wa chizindikiro cha loko mu msakatuli wanu, zathandizira kwambiri kubisa deta yathu. Komabe, chidziwitso chovuta chakhala chikuwonekera poyera: Chizindikiro cha Dzina la Server (SNI). Chikwangwani cha digito ichi, chomwe chimauza seva tsamba lomwe mukuyesera kufikira, chimatumizidwa mosabisa pakugwirana chanza koyambirira kwa TLS. Ngakhale kuli kofunikira pakuwongolera kuchuluka kwa anthu m'dziko logawana nawo, kuwonekeraku kumabweretsa kusiyana kwakukulu kwachinsinsi. Othandizira pa intaneti, oyang'anira ma netiweki, ndi omwe angamvepo amatha kuwona tsamba lililonse lomwe mumayendera, ngakhale zomwe zili pakompyutayo zili ndichinsinsi. Apa ndipamene kupita patsogolo kwakukulu, kolembedwa mu RFC 9849 komanso kodziwika kuti Encrypted Client Hello (ECH), kumalowa, ndikulonjeza kutseka njira yayikulu yomaliza pachinsinsi cha intaneti.

Kodi RFC 9849 ndi Encrypted Client Hello (ECH) ndi chiyani?

RFC 9849, yomwe idatchedwa "Service Binding and Parameter Specification kudzera pa DNS," ndiye chikalata chomwe chimatanthawuza dongosolo la Encrypted Client Hello. ECH ndi njira yowonjezera ku TLS 1.3 protocol yomwe imabisa uthenga wonse wa Client Hello, kuphatikizapo deta yachinsinsi ya SNI. M'malo mwake, imalowa m'malo mwa mawu omveka bwino akuti "Ndikufuna kulumikiza ku example.com" ndi uthenga wobisika womwe seva yomwe idafunidwa ndi tsamba la webusayiti yokha ndi yomwe ingasinthe. Izi zimatsimikizira kuti kuyambira sitepe yoyamba yolumikizira, komwe mukupita kumabisika kuti musayang'ane pamaneti. ECH sikuti amangobisa SNI; imaphimbanso zala zina zomwe zingatheke pakugwirana chanza, monga ma ciphersuites othandizidwa, kupanga kusakatula kofananako komanso kwachinsinsi. Tekinolojeyi imagwiritsa ntchito njira zachinsinsi zololeza kasitomala kupanga kiyi yapagulu kuchokera patsamba la DNS rekodi, zomwe amagwiritsa ntchito kubisa chidziwitso chokhudza kugwirana chanza.

Ubwino Wowoneka Wotengera Kutengera kwa ECH Kwafalikira

Kukhazikitsa kwa ECH ndi mphindi yofunika kwambiri pazinsinsi za digito ndi chitetezo. Ubwino wake umapitilira kubisa mbiri yanu yosakatula ku ISP yanu.

• Zizinsinsi Zazinsinsi Zawowonjezera: Polemba SNI, ECH imalepheretsa anthu ena kupanga mbiri yanu yapaintaneti kutengera mawebusayiti omwe mumawachezera. Ili ndi gawo lofunikira pakubwezeretsanso dzina la ogwiritsa ntchito pa intaneti.
• Kuletsa Kuwunika ndi Tsankho: M'madera ena, intaneti imasefedwa kutengera SNI. ECH imapangitsa kuti zikhale zovuta kwambiri kuti zosefera zapaintaneti zitseke mwayi wopezeka patsamba linalake kapena ntchito zina, kukweza intaneti yotseguka.
• Pafupifupi Pamalo Olimbana ndi Ma Cyberattacks: Zigawenga nthawi zambiri zimagwiritsa ntchito data ya SNI yosabisika kuti ikwaniritse ntchito kapena ogwiritsa ntchito ena. Posokoneza chidziwitsochi, ECH imasokoneza kusanthula kwa magalimoto ndi mitundu ina ya ziwopsezo zapakati.
• Zotsimikizira Zam'tsogolo Zam'tsogolo: ECH ikuyimira kusinthika kwachilengedwe kwa TLS, kutseka kusiyana kwachinsinsi kwa nthawi yayitali ndikugwirizanitsa ndi mfundo ya "encrypt chirichonse." Imakhazikitsa maziko atsopano a zomwe ogwiritsa ntchito ayenera kuyembekezera kuchokera ku intaneti yotetezeka.

ECH ndi Tsogolo Lamabizinesi Otetezedwa

Kwa mabizinesi, kusinthira ku intaneti yachinsinsi kumakhudza momwe amagwirira ntchito ndikuteteza chuma chawo cha digito. Pamene makampani akudalira kwambiri mapulaneti opangidwa ndi mtambo ndi makina ogwiritsira ntchito modular monga Mewayz kuti ayang'anire kayendedwe kawo ka ntchito, chitetezo cha mgwirizano uliwonse ndichofunika kwambiri. ECH imawonetsetsa kuti kulumikizana pakati pa chipangizo cha wogwira ntchito ndi ntchito zamabizinesi - zomwe zimagwira ntchito ngati Mewayz - zimatetezedwa kuti zisasokonezedwe ndi paketi yoyamba. Izi ndizofunikira makamaka kwa mabizinesi omwe amagwiritsa ntchito deta yodziwika bwino, chifukwa imawonjezera chitetezo chofunikira pakumvetsera mwachidwi. Kutenga matekinoloje omwe amathandizira ECH kumawonetsa kudzipereka kuchitetezo cham'mphepete, chomwe chingakhale chinthu chodalirika kwambiri kwa makasitomala ndi othandizana nawo. Monga katswiri wina wachitetezo adawonera pokambirana za tsogolo la ma protocol:

"ECH sizinthu zokhazokha; ndizokonzekera koyenera ku mapangidwe oyambirira a TLS. Imamaliza lonjezo la kubisala kumapeto kwa mapeto poonetsetsa kuti 'envelopu' ya kulankhulana kwanu ndi yachinsinsi monga kalata mkati. "Mapulatifomu omwe amaika patsogolo kupititsa patsogolo koteroko, kuphatikiza Mewayz, ali m'malo abwino kuti apereke malo otetezeka kwenikweni pamachitidwe ofunikira kwambiri abizinesi, kuwonetsetsa kuti zambiri zamakampani zimakhala zachinsinsi komanso zofunika kwambiri.

Mapeto: Intaneti Yachinsinsi Yatsala pang'ono kuyandikira

RFC 9849 ndi Encrypted Client Moni zikuyimira kudumphadumpha pakufuna intaneti yachinsinsi. Ngakhale kusinthaku kudzafuna zosintha pa asakatuli, ma seva, ndi zomangamanga za DNS, kulimbikitsako kukukulirakulira. Ogulitsa asakatuli akuluakulu ndi opereka mtambo akugwiritsa ntchito kale chithandizo. Kwa ogwiritsa ntchito kumapeto, zikutanthauza kutenganso gawo lachinsinsi chawo cha digito. Kwa mabizinesi omwe akugwiritsa ntchito nsanja zamakono, zikutanthauza maziko olimba achitetezo. Pamene mulingo uwu ukukula, timayandikira pafupi ndi intaneti pomwe mbali zonse za kulumikizana kwathu zimatetezedwa mwachisawawa, zomwe zimapangitsa kuti anthu azikhulupirirana komanso kuti azikhala otetezeka kwa aliyense pa intaneti.

💡 DID YOU KNOW?

Mewayz replaces 8+ business tools in one platform

CRM · Invoicing · HR · Projects · Booking · eCommerce · POS · Analytics. Free forever plan available.

Start Free →

Mafunso Ofunsidwa Kawirikawiri

Kuyenda Pamalo Osintha Paintaneti

Kwa zaka zambiri, intaneti yakhala ikudalira kusamalidwa bwino pakati pa chitetezo ndi mawonekedwe. Ma protocol monga Transport Layer Security (TLS), mwala wapangodya wa chizindikiro cha loko mu msakatuli wanu, zathandizira kwambiri kubisa deta yathu. Komabe, chidziwitso chovuta chakhala chikuwonekera poyera: Chizindikiro cha Dzina la Server (SNI). Chikwangwani cha digito ichi, chomwe chimauza seva tsamba lomwe mukuyesera kufikira, chimatumizidwa mosabisa pakugwirana chanza koyambirira kwa TLS. Ngakhale kuli kofunikira pakuwongolera kuchuluka kwa anthu m'dziko logawana nawo, kuwonekeraku kumabweretsa kusiyana kwakukulu kwachinsinsi. Othandizira pa intaneti, oyang'anira ma netiweki, ndi omwe angamvepo amatha kuwona tsamba lililonse lomwe mumayendera, ngakhale zomwe zili pakompyutayo zili ndichinsinsi. Apa ndipamene kupita patsogolo kwakukulu, kolembedwa mu RFC 9849 komanso kodziwika kuti Encrypted Client Hello (ECH), kumalowa, ndikulonjeza kutseka njira yayikulu yomaliza pachinsinsi cha intaneti.

Kodi RFC 9849 and Encrypted Client Hello (ECH) ndi chiyani?

RFC 9849, yomwe idatchedwa "Service Binding and Parameter Specification kudzera pa DNS," ndiye chikalata chomwe chimatanthawuza dongosolo la Encrypted Client Hello. ECH ndi njira yowonjezera ku TLS 1.3 protocol yomwe imabisa uthenga wonse wa Client Hello, kuphatikizapo deta yachinsinsi ya SNI. M'malo mwake, imalowa m'malo mwa mawu omveka bwino akuti "Ndikufuna kulumikiza ku example.com" ndi uthenga wobisika womwe seva yomwe idafunidwa ndi tsamba la webusayiti yokha ndi yomwe ingasinthe. Izi zimatsimikizira kuti kuyambira sitepe yoyamba yolumikizira, komwe mukupita kumabisika kuti musayang'ane pamaneti. ECH sikuti amangobisa SNI; imaphimbanso zala zina zomwe zingatheke pakugwirana chanza, monga ma ciphersuites othandizidwa, kupanga kusakatula kofananako komanso kwachinsinsi. Tekinolojeyi imagwiritsa ntchito njira zachinsinsi zololeza kasitomala kupanga kiyi yapagulu kuchokera patsamba la DNS rekodi, zomwe amagwiritsa ntchito kubisa chidziwitso chokhudza kugwirana chanza.

Ubwino Wowoneka Wotengera Kutengera kwa ECH Kwafala

Kukhazikitsa kwa ECH ndi mphindi yofunika kwambiri pazinsinsi za digito ndi chitetezo. Ubwino wake umapitilira kubisa mbiri yanu yosakatula ku ISP yanu.

ECH ndi Tsogolo Lamabizinesi Otetezedwa

Kwa mabizinesi, kusinthira ku intaneti yachinsinsi kumakhudza momwe amagwirira ntchito ndikuteteza chuma chawo cha digito. Pamene makampani akudalira kwambiri mapulaneti opangidwa ndi mtambo ndi makina ogwiritsira ntchito modular monga Mewayz kuti ayang'anire kayendedwe kawo ka ntchito, chitetezo cha mgwirizano uliwonse ndichofunika kwambiri. ECH imawonetsetsa kuti kulumikizana pakati pa chipangizo cha wogwira ntchito ndi ntchito zamabizinesi - zomwe zimagwira ntchito ngati Mewayz - zimatetezedwa kuti zisasokonezedwe ndi paketi yoyamba. Izi ndizofunikira makamaka kwa mabizinesi omwe amagwiritsa ntchito deta yodziwika bwino, chifukwa imawonjezera chitetezo chofunikira pakumvetsera mwachidwi. Kutenga matekinoloje omwe amathandizira ECH kumawonetsa kudzipereka kuchitetezo cham'mphepete, chomwe chingakhale chinthu chodalirika kwambiri kwa makasitomala ndi othandizana nawo. Monga katswiri wina wachitetezo adawonera pokambirana za tsogolo la ma protocol:

Mapeto: Intaneti Yachinsinsi Yatsala pang'ono kuyandikira

RFC 9849 ndi Encrypted Client Moni zikuyimira kudumphadumpha pakufuna intaneti yachinsinsi. Ngakhale kusinthaku kudzafuna zosintha pa asakatuli, ma seva, ndi zomangamanga za DNS, kulimbikitsako kukukulirakulira. Ogulitsa asakatuli akuluakulu ndi opereka mtambo akugwiritsa ntchito kale chithandizo. Kwa ogwiritsa ntchito kumapeto, zikutanthauza kutenganso gawo lachinsinsi chawo cha digito. Kwa mabizinesi omwe akugwiritsa ntchito nsanja zamakono, zikutanthauza maziko olimba achitetezo. Pamene mulingo uwu ukukula, timayandikira pafupi ndi intaneti pomwe mbali zonse za kulumikizana kwathu zimatetezedwa mwachisawawa, zomwe zimapangitsa kuti anthu azikhulupirirana komanso kuti azikhala otetezeka kwa aliyense pa intaneti.

Sakanizani Bizinesi Yanu ndi Mewayz

Mewayz imabweretsa magawo 207 abizinesi mupulatifomu imodzi — CRM, ma invoice, kasamalidwe ka projekiti, ndi zina zambiri. Lowani nawo ogwiritsa ntchito 138,000+ omwe adachepetsa kachitidwe kawo ka ntchito.

Yambani Kwaulere Lero →