Okusabonwa inethiwekhi yendawo ngokusebenzisa i-VPN yakho

Ababukeli abathathu bahlangana babe umbuzo owodwa njalo lapho othile ebuza ukuthi i-VPN iyayifihla yini imithwalo yakhe: inethiwekhi adibene nayo, umshini osezandleni zakhe kanye nomqhubi womhubhe. Ngamunye ufunda okuthile okuhlukile, futhi umhubhe ushintsha lokho mbono ngakunye ngendlela ehlukile. Kuyasiza ukusebenza ngakolunye uhlangothi futhi uqale esimweni esishiwo, ngoba isimiso yisona okufanele simelane nokuhlolwa. Nquma ukuthi yisiphi isimiso osidingayo, bese uqhathanisa amathuluzi naso.

Isimiso sokuqala: akekho ongakwazi ukufunda imithwalo

Qala ngesimiso esincane kunazo zonke: umthwalo uhlala ungafundeki. Umbukeli ongenzi lutho osendleleni akakwazi ukubuka ngaphakathi kwesikhathi se-TLS, ngakho umhubhe wengeza okuncane esizeni esivele sisebenzisa i-HTTPS futhi awengezi lutho ngakulezi ziphelo ezimbili. Iqembu eliphula lesi simiso yilowo olawula idivayisi, ngoba ummeleli wokuhlola uqeda uxhumano futhi ulusayina kabusha ngomsuka umshini osewuthembayo. Yingakho ucingo lokhiye lusabonakala ngenkathi uchungechunge lwesitifiketi luthwe igama lenhlangano eyafaka umsuka.

security find-certificate -a -p /Library/Keychains/System.keychain | openssl crl2pkcs7 -nocrl -certfile /dev/stdin | openssl pkcs7 -noout -print_certs | grep subject
certutil -store Root

Ku-macOS lowo mugqa wamapayipi uphrinta umugqa wesihloko owodwa wesitifiketi ngasinye kusihluthulelo sikamshini, ngaphandle kokuvula iwindi, kanti ku-Windows i-certutil -store Root ibala isitolo esifanayo esikhonjiswa yi-certlm.msc ngomdwebo. Umsuka wengxenye yesikole, umqashi noma umkhiqizo wokuphepha kwenethiwekhi uyirekhodi okufanele ilifunwe. Ukuthola owodwa kufakazela kuphela ukuthi ukungena phakathi kungenzeka, hhayi ukuthi kuyenzeka.

Ongakwenza ngalokhu umbuzo wenqubomgomo hhayi wobuchwepheshe. Ukususa iphrofayela noma umsuka wokuhlola kuhadiwe ongeyona eyakho ngokuvamile kwephula isivumelwano sokusetshenziswa okwamukelekayo, futhi uhlelo lokuphatha luvame ukukuqaphela lukuphinde lukusebenzise, ngakho isidingo sokuthi umnikazi wedivayisi angayifundi imithwalo yakho sidinga enye idivayisi hhayi esinye isilungiselelo.

Isimiso sesibili: akekho obona ukuthi uyaphi

Indawo oya kuyo yisimiso esinzima kakhulu, ngoba ukudalulwa okubili kwenzeka ngaphambi kokulayisha ikhasi. Umbuzo uya kusixazululi uhlelo olulungiselelwe ukusisebenzisa, futhi impendulo ibonakala kunethiwekhi eyithwalayo. Bese ukuxhawulana kwe-TLS kuthwala igama lesiphakeli esiceliwe ngokusobala, ngaphandle uma i-Encrypted Client Hello isekelwa kuzo zombili iziphelo. Akukho kulokhu kudalulwa okubili okubandakanya ukususa umfihlo, ngakho umhubhe awunawo umthelela kukho kokubili.

resolvectl status | grep -A2 "Link"
nslookup example.com

Ukuthi yisiphi isixazululi esisetshenziswayo ngempela yikho okunquma ukuchayeka, futhi lokho kungalinganiswa esikhundleni sokuphikisana. Ku-Linux i-resolvectl status iphrinta amaseva e-DNS ngokuxhumana ngakunye, futhi umphumela wayo ukutshela ukuthi isixazululi sesiza siyaphendula noma esicindezelwe. I-Windows iphendula umbuzo ofanayo nge-nslookup example.com, okuyibhlokhi yayo yokuqala yomphumela iyiseva ye-DNS ephendulile.

Lapho ikhompyutha ephathekayo ibuza isixazululi sesiza ngaphambi kokuba umhubhe unyuke, noma iphrofayela ifika ngaphandle kweseva esikhundleni ngakho esidala sihlala sisetshenziswa, umphathi usaqoqa amagama okusingatha ngaphandle kokususa umfihlo walutho. I-DNS ebethelwe kusiphequluli iyayidlula isixazululi esicindezelwe noma ivinjwe ngokuphelele futhi yehluleke ivaliwe. Umqhubi wokuphuma ubona lawo magama afanayo ngakolwakhe uhlangothi. Ngakho ukushintsha isixazululi akukususi lokho kudalulwa kude nomhlinzeki womhubhe.

Isimiso sesithathu: akekho owaziyo ukuthi uxhume

Isimiso sesithathu yisona umhubhe ongakwazi ukusisekela, ngoba amaphakethe asadlula kunethiwekhi yendawo. Leyo nethiwekhi ifunda ikheli lesiphelo, umthamo olinganiselwe, isikhathi kanye nokuba khona kwesikhathi esisodwa esibethelwe esihlala isikhathi eside, okwanele ukuvimba, ukukhawulela noma ukumane kuqashelwe. Ucingo lomlilo olungakwazi ukufunda iphakethe lusengala ukuluvumela ukuba ludlule. Ukubukwa akufani nokuthi akekho obukayo: usususe umbukeli, awuzange uwususe.

Umhubhe ohlukanisiwe, kanye nanoma iyiphi insiza eshaya indiva indlela ecindezelwe, kukhiqiza ukugeleza ngaphandle komhubhe okubukeka kufana ncamashi nangaphambilini. Yikho ukugeleza umbukeli oqaphile akubona kuqala, futhi ithebula lemizila yeklayenti likhombisa ukuthi yiziphi izindawo ezikhishiwe.

Umqhubi kwelinye iziphelo uphethe isithombe sesibuko salowo mbono: ikheli lokuphuma, isikhathi, umthamo kanye namagama eziza ngokuvamile. Umhlinzeki wakho uba uhlangothi olunendawo yokubuka, okuyisivumelwano esihlukile kunokungabonakali. Ukukhetha umhlinzeki othembayo kuyisinqumo sangempela; ukubiza umphumela ngokuthi awubonwanga akusiso.

Nquma ukuthi yisiphi isimiso osidingayo

Bhala isidingo emugqeni owodwa ngaphambi kokuthinta iklayenti: fihla okuqukethwe, fihla izindawo noma fihla ukuthi uxhume noma cha. Okuqukethwe sekusingathwa yi-HTTPS kanye nomhubhe, kanti izindawo zidinga isixazululi nendlela edlula ngokuphelele imishini yesiza.

Isidingo sesithathu yisona esingakhululekile, ngoba kukhona okusaxhunyiwe ngokubonakalayo kwenye indawo, kube kubethelwe noma cha. Asikho isilungiselelo seklayenti esishintsha lokho. Uma isidingo nenqubomgomo zihlukana, lelo gebe lingelengxoxo nomnikazi wenqubomgomo, hhayi ukukhetha kuklayenti. Umuntu ongayiphendula yilowo owabhala inqubomgomo.