Ingabe i-ECH ithatha indawo ye-VPN? Yini ngayinye eyifihla ngempela

Unika amandla i-Encrypted Client Hello, uvula isayithi, futhi uxhumano luyasebenza. Othile uyabuza ukuthi ingabe i-VPN isadingeka, futhi impendulo eqotho ukuthi lezi zici ezimbili zifihla izinto ezahlukene kubantu abahlukene. I-ECH ivikela izingxenye ze-TLS handshake ezingase zidalule igama leseva olicelile. I-VPN ibeka ithrafikhi yakho ngaphakathi komhubhe ogcina endaweni yokugcina yomhlinzeki. Ukudida lezi ezimbili kuholela ekutheni ukhokhe kakhulu ngokuvikelwa osevele unakho, noma ukholwe ukuthi unokuvikelwa ongakaze ube nakho.

Yini i-handshake eyidalulayo ngaphandle kwe-ECH

Uxhumano lwe-TLS luqala nge-ClientHello, futhi esimweni esidala igama leseva elihlosiwe lihamba obala ngaphakathi kwayo. Noma ubani osesimweni sokubuka i-handshake, kusukela kumhlinzeki wenethiwekhi kuya kunzwa engasebenzi endleleni, angalifunda lelo gama nakuba idatha yohlelo lokusebenza ilubhaliwe ngokufihla ngemuva kwalokho. Ikheli lendawo eya kuyo nalo liyabonakala, ngakho igama ngokuvamile liwulwazi oluqinisekisayo hhayi uphawu kuphela.

Yilokho ukuvuza okuqondile i-ECH ekuqondise kukho. Kuwukuvuza okuncane, futhi ukukunciphisa kufanelekile, kodwa akufani nokufihla ukuthi ithrafikhi yakho iyaphi.

Yini i-ECH eyishintshayo ngempela

Ngokusekelwa okuhambisanayo kweklayenti neseseva kanye nokumiswa okudingekayo, i-ECH ibhala ngokufihla i-ClientHello yangaphakathi ngezinkinobho ezishicilelwe iseva, ngakho umbukisi ubona i-handshake yangaphandle engayithwali igama langempela leseva. Ithrafikhi isahamba iya ekhelini elifanayo, ngezikhathi ezifanayo, ngamanani acishe afane. Isikhathi nosayizi kuhlala kubonakala, futhi i-IP yendawo eya kuyo ayizange ibe yingxenye yalokho i-ECH ekubhalayo ngokufihla.

Nokusekelwa akukho emhlabeni wonke. Akuzona zonke iklayenti, isevisi noma uxhumano ngalunye olusebenzisa i-ECH, futhi awukwazi ukucabanga ukuba khona kwayo esithombeni sengidi noma ekushintsheni izwe le-VPN. Ukuxilonga kudinga ukubheka i-handshake, hhayi umhlobiso wesiphequluli.

Yini i-VPN eyishintshayo esikhundleni salokho

I-VPN ihambisa ithrafikhi emboziwe ngaphakathi komhubhe iya endaweni yokugcina, ngakho umbukisi oseduze nawe ubona uxhumano oluya ku-VPN hhayi endaweni eya kuyo. Lokho kushintsha ukuthi ubani angabuka ini, futhi kushintsha ikheli indawo eya kuyo elibonayo. Akubhali ngokufihla lutho uhlelo lokusebenza olungakabhali ngokufihla, futhi akufihli uxhumano kumhlinzeki we-VPN, lowo ngokwakheka usendleleni.

Lezi ezimbili zihlangana ngokwemvelo: uhlelo lokusebenza lungasebenzisa i-TLS ne-ECH kuyilapho umhubhe uvikelwa ingxenye yenethiwekhi eyizungezile. Akekho kubo obeka ukuthi iqembu ngalinye lingabona noma ligcine ini, ngoba amaqembu asezindaweni ezahlukene endleleni.

I-DNS ingena kuphi

Umbuzo we-DNS ongavikelwe udalula igama kusixazululi nakunoma ubani obuka leyo ndlela, okuwukuchayeka okuhlukile ku-TLS handshake. I-ECH ayibhali i-DNS ngokufihla, futhi i-VPN ishintsha ubunikazi besixazululi kuphela uma futhi uthumela imibuzo yakho ngomhubhe noma usebenzisa isixazululi esibhalwe ngokufihla. Abantu banika amandla okukodwa kokuthathu futhi bacabanga ukuthi ezinye ezimbili zilandelile.

Hlola indlela yesixazululi ngokwehlukile endleleni ye-handshake. Ziyehluleka ngokuzimela futhi zilungiselelwa ezindaweni ezahlukene.

Ungazi kanjani ukuthi ubuka isendlalelo esiphi

Buza ukuthi ukubuka kungadalula ini. Uma umbuzo uwukuthi yiliphi igama leseva eliceliwe, i-handshake nesixazululi yizingqimba ezifanele. Uma umbuzo uwukuthi ithrafikhi yaya kunethiwekhi iphi nokuthi ubani wayengayibona endleleni, lowo ngumhubhe. Uma umbuzo uwukuthi iyiphi i-akhawunti eyenza ini kusayithi, akekho kubo osiza, ngoba isayithi lisathola isicelo nanoma yibuphi ubunikazi obunikezile.

Gcina ukuqinisekiswa kwesitifiketi nenqubomgomo ye-DNS kungaphazamisekile ngenkathi uphenya ukuhambisana. Ukukhubaza ukuhlola ukuze ukuhlolwa kuphumelele kushintsha incazelo yomphumela esikhundleni sokukhombisa ukuthi i-ECH ivikela ini.

Bhala phansi ukuthi isiphi isendlalelo osinike amandla ngempela ngaphambi kokwengeza esinye. Iningi lokudideka lapha livela ekucabangeni ukuthi ukulawula okukodwa kumboza isicelo, igama laso, indawo esiya kuyo nobunikazi baso ngasikhathi sinye.