Okukufihlwa umhubhe nokushiye kufundeka

Umhubhe wakho uvuliwe, ithebhu eyodwa ikhombisa ingidi eluhlaza, kanti ikhasi le-HTTP elivamile kwelinye ithebhu lisaxwayisa ngokuthi ukuxhumana akuphephile. Le nhlanganisela idida abantu ngoba lezi zivikelo ezimbili zihlanganisa amabanga ahlukene. I-VPN ivikela ithrafikhi phakathi kweziphetho zayo, futhi ngale kokuphuma ithrafikhi iba ejwayelekile futhi. I-HTTPS ivikela ukuxhumana okukodwa kuze kufike iwebhusayithi. Ukubeka la maqiniso amabili ndawonye kuchaza imibuzo eminingi mayelana nokuthi i-VPN ifihla ini ngempela.

Umhubhe uhlanganisa ini ngempela

Phakathi kweklayenti nomlingani we-VPN, umbonisi ubona amabhayithi ashifriwe hhayi isicelo esifundekayo. Lokhu kuhlanganisa ingxenye umhubhe owudlulayo, futhi ngokuvamile yingxenye ongayilawuliyo. Akufinyeleli ekuxhumaneni phakathi kokuphuma kwe-VPN newebhusayithi, ngoba umhubhe waphela lapho kuphuma khona. Amabhayithi ayafundeka futhi kusukela ngesikhathi umhubhe uphela. Akukho lutho kulokhu okuwukulungiselelwa okungalungile.

Ukuphuma kuwumshini odedela ukushifra futhi udlulisele, futhi i-VPN yenzelwe lokho. Konke okudluliselayo kuyabonakala kuyo ngendlela eyakuthola ngayo, ngakho isicelo se-HTTP esivamile sihlala siwumbhalo ocacile kusukela kokuphuma kuya phambili.

Funda lokhu njengesici hhayi njengephutha. Ukushifra kukhawulelwe emzileni owodwa, futhi umzila uphela lapho isevisi iqala khona.

Izikhiye, ama-nonce kanye nobuqotho ngamazwi alula

Ithrafikhi eqhubekayo ivikelwa ngokushifra okulinganayo, futhi iziphetho zombili zithola noma zikhiqiza impahla yokhiye ngesikhathi sokuxhawulana. Ukushifra okuqinisekisiwe, okuchazwa ngokujwayelekile yi-RFC 5116, kunikeza imfihlo nobuqotho esakhiweni esisodwa. Umamukeli wenqaba amabhayithi ashintshiwe esikhundleni sokwehluleka ukuwafunda, futhi yilokhu abantu abakukhohlwayo lapho becabanga ukuthi ukushifra kusho ukuxuba.

Izikhiye zivela kulolo shintsho, hhayi kwiphasiwedi eyolotshwa lapho kungena. Iphasiwedi iqinisekisa ubunikazi, bese iphrothokholi isungula impahla yesikhathi. Ukushintshana kokhiye kwesikhashana kunikeza imfihlo eya phambili, ngakho isikhathi esiqoshiwe sihlala singafundeki ngisho uma ukhiye wesikhathi eside uvuza kamuva.

Inombolo enkulu encazelweni ayiphenduli imibuzo leyo, futhi ukuqhathanisa izinombolo phakathi kwama-algorithm angahlobene akulona uhlu lwamazinga. Buza esikhundleni salokho ukuthi ukushintshana kokhiye kunikeza ini.

Umhubhe uphela kuphi

Isiphetho esiqeda umhubhe singafunda lokho okudluliselayo. Lokhu kusebenza ngokulinganayo kusango lebhizinisi, umhlinzeki wezentengiselwano kanye neseva ezihosha yona. Lokhu kuwumklamo, hhayi iphutha kuwo. Ukushifra okuqinile akukwazi ukuvimbela isiphetho esihlaselwe ukuthi sifunde umbhalo ocacile ofika kuso, ngoba isiphetho yilapho ukuvikelwa kuphela khona.

I-HTTPS iyaqhubeka ngale kwalelo phuzu, yingakho isayithi lingaphepha ngisho ngaphandle kwe-VPN kunethiwekhi enobutha. Izivikelo ezimbili ziyahlangana engxenyeni yokuqala futhi kungenye kuphela eqhubekayo ngemuva kokuphuma.

Yingakho futhi ukwenza buthaka ukuqinisekiswa kwesitifiketi ukuze ukuxhumana kusebenze akulona uvivinyo lomhubhe. Kucisha esinye isivikelo futhi kukushiya nengcosana kunesikhathi uqala.

Kungani ubungazi bungomunye umkhiqizo

Amakheli, isikhathi kanye nomthamo kuhlala kubonakala ngaphandle komhubhe. Umbonisi angabona ukuthi ithrafikhi igeleza iya esiphethweni se-VPN, cishe ingakanani futhi nini. Okuqukethwe kungase kungafundeki kuyilapho iphethini isanikeza ulwazi.

Umhlinzeki uphinde ahlale kwenye indawo kunenethiwekhi yakho, futhi lokho ukushintsha kombonisi hhayi ukususa ukubona. Amakhukhi, ukungena kanye nezihlonzi zekhasi kusasebenza ngendlela efanayo nasemandulo, ngoba umhubhe awuzange uthembise ukuwushintsha.

Khetha umhlinzeki ngokwenqubomgomo yakhe yokuloga kanye nokubusa kwayo uma lokho kuyisidingo, bese ufunda inqubomgomo ngokwayo. Amakhasi okumaketha awavamile ukuphendula lowo mbuzo ngendlela umuntu angayiqinisekisa ngayo.

Hlola umhubhe nesayithi ngokwehlukana

Qala uqinisekise umhubhe, ukuze wazi ukuthi uvivinya esiphi isivikelo. Bese uqinisekisa ukuthuthwa kwesayithi ngokwakho, futhi uqhathanise imiphumela emibili esikhundleni sokucabanga ukuthi eyodwa isho enye. Umhubhe othwala i-HTTP evamile kanye nesayithi elihlinzeka nge-HTTPS zombili zenza ngqo lokho ezazilungiselelwe kona.

Gijimisa ukuhlola kumbungazi ovunyelwe ukuwuvivinya, futhi ufunde okukhiphayo hhayi isifinyezo.

wg show
ip -brief addr show tun0
curl -sS -o /dev/null -w '%{http_code} %{url_effective}\n' https://example.com

Lapho umhubhe uvuliwe futhi isayithi liyi-HTTPS, unezivikelo ezimbili engxenyeni yokuqala nelilodwa kwesibili. Lapho isayithi liyi-HTTP evamile, ingxenye yesibili iyafundeka kunoma ubani okhona, kuhlanganise nokuphuma okwedlulise isicelo. Ukwazi ukuthi yikuphi kulezi ezimbili okungekho kuwukuxilongwa okuphelele, futhi kudinga imiyalo emibili hhayi iklayenti elisha.