Kungani i-HTTPS isabalulekile ngemva kokuphela komhubhe we-VPN

Isikhombisi se-VPN esiluhlaza, umuzwa wokuba yimfihlo, bese kuthi isiphequluli sikhombise isixwayiso sesitifiketi kuwebhusayithi yasebhange. Akukho lutho kuleso sixwayiso okuba ngcono ngenxa yomhubhe. I-VPN ivikela indlela esuka kudivayisi yakho iya kuseva yayo; i-HTTPS ivikela isicelo esisuka kusiphequluli sakho siya endaweni yokugcina ye-TLS yewebhusayithi. Zombili zihlanganisa izingxenye ezahlukene zohambo, futhi enye ayithathi indawo yomunye.

Imihubhe emibili eneziphetho ezimbili ezihlukene

Umhubhe we-VPN uphela kuseva ye-VPN. Ngale kwalelo phuzu, ukuhamba kwakho kuqhubeka ku-inthanethi evamile kuya endaweni okuyiwa kuyo. Umqhubi we-VPN uyabona imethadatha yoxhumano nakuba engakwazi ukufunda okuqukethwe.

I-HTTPS iqala kusiphequluli sakho futhi iphelela endaweni yokugcina ye-TLS yewebhusayithi. Ayinandaba nokuthi iphakethe lafika kanjani kuseva, futhi ayincikile ekubeni khona kwe-VPN.

Yingakho lezi zivikelo ezimbili ziyagcwalisa kunokuba ziqhudelane. I-VPN ifihla isicelo kunethiwekhi yasendaweni nakunkampani yakho ye-inthanethi kuze kufike ekuphumeni kwayo. I-HTTPS isifihla kubo bonke ababukeli ngemva kwalokho kuphuma, kuhlanganise nomhlinzeki we-VPN uqobo. Akukho okusibekela isikhala somunye. Lowo okuqondayo uyeka ukubuza ukuthi yikuphi okwanele.

Ifomu le-HTTP elivamile lihlala livamile ngemva kokuphuma

Iwebhusayithi endala eyamukela ifomu nge-HTTP ayivikelwe ngale kwe-seva ye-VPN. Umhubhe uthwala ifomu kuze kufike ekuphumeni, futhi indlela esele iyithwala obala.

Sebenzisa inguqulo ye-HTTPS yangempela noma esinye isiteshi esisemthethweni kunoma yini ebucayi.

Isikhombisi esixhunyiwe asishintshi ukuthuthwa kohlelo lokusebenza. Imodi ye-HTTPS kuphela yesiphequluli ingasiza ukuvimbela ukuhlehla okungahlosiwe, kodwa ayikwazi ukulungisa iwebhusayithi engakaze inikeze i-TLS.

Isixwayiso sesitifiketi aselashwa yi-VPN

Igama lomsingathi elingalungile, isitifiketi esiphelelwe yisikhathi, iwashi ledivayisi eligobile noma ukugqilazwa konke kungabangela ukwehluleka kokuqinisekisa. I-VPN ayikwenzi lokho kube nokungalimazi.

Hlola ikheli eliqondile kanye newashi lohlelo ngaphambi kwanoma yini enye.

Uma kubandakanyeka ikhasi lokungena kunethiwekhi, sebenzisa ukugeleza okuvamile kwengosi eboshiwe yepulatifomu. Unganiki ukukhululwa okungapheli kuwebhusayithi ye-akhawunti engahlobene ngoba inethiwekhi yehhotela ikucele.

Kudivayisi ephethwe, buza ukuthi kufakiwe yini isitifiketi sokuhlola. Lokho kushintsha ukuhlelwa kokwethemba okuvamile futhi kufanelwe incazelo eqondile esikhundleni sokunyusa amahlombe. Buza ngenjongo yesitifiketi nokuthi ingubani umnikazi waso.

Ukubethela akukuvimbi ukulandelela

Iseshini ithwala amakhukhi, ukungena kanye nedatha yamafomu kuyo iwebhusayithi ngendlela ebihlosiwe. Umlandeleli naye angagibela uxhumano olubethelwe, futhi iningi liyenza lokho.

I-VPN ishintsha indlela kanye nekheli lokuphuma elibonakalayo. Ayishintshi ubunikazi obunikeza nge-akhawunti, futhi ayisusi ikhukhi elikulandela phakathi kwewebhusayithi.

Gcina izivikelo zesiphequluli osevele uzisebenzisa. I-VPN iyisengezo kuzo, hhayi esikhundleni.

Hlola ikheli, hhayi isikhombisi

Qinisekisa igama lomsingathi kubha yekheli kanye nesitifiketi esethulwa yiwebhusayithi. Ihhiya lisho ukuthi uxhumano lubethelwe kuze kufike endaweni ethile yokugcina; akusho ukuthi leyo ndawo yokugcina yiyo obuyihlosile.

Imiyalo emibili ikhombisa isitifiketi kanye nochungechunge lokudlulisela kabusha:

curl -sSI https://bank.example/ | head -5
openssl s_client -connect bank.example:443 -servername bank.example < /dev/null 2>/dev/null | openssl x509 -noout -subject -dates

Uma isitifiketi sisho omunye umsingathi, yima. Uma iwashi lingalungile, lilungise ngaphambi kokuzama futhi. Uma ukudlulisela kabusha kukuthumela ku-HTTP evamile, thatha lokho njengokwehluleka kwevebhusayithi hhayi njengesizathu sokucisha ukuqinisekisa. Isixwayiso sesiphequluli sikhona ngoba enye indlela ukuqagela ukuthi iyiphi indawo yokugcina eyathola iphasiwedi yakho.