I-VPN ne-Tor azithathi i-HTTPS: kuqeda kwesigaba ngasinye
Umhubhe uphela kumlingani wawo, futhi isekethe ye-Tor iphela kuredeli yokuphuma. I-HTTPS kuphela efinyelela isayithi, ngakho ifomu elivamile lihlala lifundeka.
I-VPN nesekethe ye-Tor zombili zibethela ukuxhumana kwakho ingxenye yohambo. Zombili ziyeka ukukubethela kumlingani ezimkhethela wona. I-HTTPS yisigaba esifinyelela isayithi ngokwaso, futhi akukho nobungako bomhubhe phambi kwayo obuguqula ukuthunyelwa kwefomu elivamile kube ngokuvikelekile. Ukulandela isigaba ngasinye kuze kufike lapho siphela khona kwenza lokho kucace.
Izigaba ezintathu, izindawo zokuqeda ezintathu ezahlukene
I-VPN ejwayelekile iqeda umhubhe wayo kuseva ye-VPN. Konke okuphakathi kwedivayisi yakho naleso seva kungaphakathi komhubhe, futhi konke okulandela lokho akukho ngaphakathi. Isekethe ye-Tor yenza ngendlela efanayo nomunye umlingani, ishiya inethiwekhi kuredeli yokuphuma edlulisela isicelo sakho endaweni ekuyiwa kuyo.
I-TLS iphela esayithini. Isitifiketi osiqinisekisile sibopha igama lomsingathi kukhiye olawulwa isayithi, futhi okhiye besikhathi bakhona phakathi kwesiphequluli sakho naleso seva. Leyo ndawo yokuqeda ingaphesheya kwesiva ye-VPN nokuphuma kwe-Tor kokubili.
Ngakho izigaba ezintathu zinemikhawulo emithathu yokuthembela ehlukene, futhi isicelo sidlula kuzo zonke ngokulandelana. Ukuqinisa esisodwa akusho lutho ngezinye, futhi esokugcina yisona kuphela indawo ekuyiwa kuyo ehlanganyela kuso.
Okudalulwa ukugxuma kokugcina
Uma uhlelo lusebenzisa i-HTTP evamile, okuqukethwe okungaphesheya kokuphuma kungafundwa yinoma ubani oqhuba lokho kugxuma. Umhubhe wangaphambili wenze umsebenzi wawo ngokuphelele futhi awusekho. Imininingwane yokungena ebhalwe efomini le-HTTP ivezwa khona kanye lapho ukuvikela kwaphela khona.
| Layer | Terminates at | Who can read the request there |
|---|---|---|
| VPN tunnel | The VPN server you selected | The operator of that server, and anyone who can compel them |
| Tor circuit | An exit relay chosen by the network | The exit relay operator, for traffic that is not otherwise protected |
| HTTPS | The website's own TLS endpoint | The site itself, and no intermediary on the path |
Nge-HTTPS eqinisekiswe kahle, umlamuli osendleleni akakwazi ukufunda noma ukushintsha ngokuthulela okuqukethwe kohlelo. Usabona ukuthi uxhume, nini futhi kuyiphi ikheli, ngoba izihloko zamaphakethe kumele zikwazi ukuhamba. Ubumfihlo bokuqukethwe kanye nedatha engemva kokuxhumana kuyizici ezahlukene, futhi eyokuqala kuphela yiyo enikezwa i-TLS.
Ubunikazi be-akhawunti yinto yesithathu futhi. Ukungena ku-akhawunti kukwenza wazi kuleyo nsizakalo noma yiliphi ikheli lokuphuma olisebenzisile, ngakho ukuphuma kuvikela indlela yenethiwekhi hhayi i-akhawunti. Lowo mehluko uhlala khona kunoma yiziphi izigaba ezingaphambi kwawo. Ukushintsha izindawo zokuphuma akulokothi kushintshe okudalulwa yisikhathi esingene kuwo. Insizakalo yayisazi ukuthi ungubani ngaphambi kokuba iphakethe lokuqala lihambe.
Akukho lutho kulolu hlelo olwephukayo ngokwengeza umhubhe wesibili. Okushintshayo ukuthi yimuphi umqaphi obona ukugxuma kokuqala, hhayi ukuthi ukugxuma kokugcina kubethelwe yini.
Ukulandelana kweshintsha abaqaphi, hhayi indawo yokuqeda
Ukuxhumanisa i-VPN ne-Tor kuyindlela esemthethweni yokushintsha ukuthi ubani ubona ini ezingeni lenethiwekhi. Ukusebenzisa i-Tor phezu kwe-VPN kufihla inethiwekhi yakho yokungena iqiniso lokuthi usebenzisa i-Tor, kanti ukusebenzisa i-VPN phezu kwe-Tor kufihla ikheli lakho kumhlinzeki we-VPN. Zombili izindlela zokulandelana zichaziwe emibhalweni yomphakathi futhi zombili zinezingxabano ekusebenzeni nasekuziphatheni kokwehluleka.
Akukho kulandelana okuhambisa indawo yokuqeda ye-TLS. Kuzo zombili izimo isiphequluli sisahlola isitifiketi segama lomsingathi eliceliwe, futhi kuzo zombili izimo ikheli le-HTTP lisathumela okuqukethwe kwalo obala ngaphesheya kwereli yokugcina. Ukuhlangana kushintsha uhlu lwabaqaphi; akushintshi inani lezigaba endaweni ekuyiwa kuyo.
Yingakho izeluleko mayelana nokuxhumanisa zivame ukuba mayelana namamodeli ezinsongo hhayi ngokuphepha jikelele. Uchungechunge olude aluyona inguqulo enamandla kakhulu yento efanayo, futhi aluthathi indawo yephrothokholi eyakhethwa uhlelo.
curl -sSI https://example.net | head -3
openssl s_client -connect example.net:443 -servername example.net -briefYomibili imiyalo ikhombisa isigaba esibalulekile endaweni ekuyiwa kuyo. Eyesibili iphrinta iphrothokholi okuvunyelwene ngayo ngaphandle kokufaka noma yimuphi umhubhe. Akukho kuyo ekutshela lutho mayelana nokuphuma okusebenzisile.
Gcina ukuqinisekisa kusebenza ngenkathi uhlola izinkinga
Isixwayiso sesitifiketi silwazi mayelana nokuxhumana osezokwenza. Kungase kusho ukungafani kwegama lomsingathi, inkinga yewashi, uchungechunge olungathembekile noma umzamo wokugenca. Ukwengeza okuhlukile okungapheli ngenxa yokuthi i-VPN ixhunyiwe kususa uphawu olulodwa olwaluzohlukanisa lezo zimo.
Izici zokuxhumana okuphephile ze-Tor Browser nezixwayiso zayo zikhona ngesizathu esifanayo, futhi ukuzivala ukuze ikhasi lilayishe kushintsha ukwehluleka okubonakalayo ngokungabonakali. Uma isayithi singafinyeleleki ngaphandle kokuhlukile, isiphetho esithembekile ukuthi ukuxhumana akukwazi ukuqinisekiswa, hhayi ukuthi umhubhe kukwenzile kwaphepha.
Ukubethela futhi akusho lutho ngenhloso. Ukuxhumana kwe-HTTPS okuvumelekile nesayithi elikhohlisayo kudlulisela idatha yakho kuleso sayithi ngobumfihlo obuphelele. Hlola ikheli nalokho okuthumelayo, hhayi kuphela ukuthi isikhiya sikhona.
Izinsizakalo ze-Onion ziyimodeli ehluke ngempela. Zifinyelelwa ngenethiwekhi ye-Tor ngaphandle kokuphuma komphakathi okuvamile, lokho akufani nokufinyelela isayithi lomphakathi nge-Tor. Kubheke lokho njengendaba ehlukile enezinto ezilindelekile zayo, hhayi njengenguqulo enamandla kakhulu yokuvakasha okufanayo.
Umthetho ohlala ukhona kuyo yonke imihlelwano mfushane. Gcina ukuqinisekiswa kwesiphequluli kungaphazamisekile. Ahlulele isigaba ngasinye ngendawo esiphela kuyo ngempela.