RFC 9849. TLS sirilen Client Bonjour

Intɛrinɛti jamana yiriwali siratigɛ la

A san tan caman kɔnɔ , ɛntɛrinɛti y' a jigi da balansi nɔgɔlen kan lakana ni yecogo cɛ . Protocoles i n’a fɔ Transport Layer Security (TLS), n’o ye padlock taamasiyɛn jɔnjɔn ye i ka navigatɛri kɔnɔ, olu kɛra sababu ye k’an ka kunnafoniw siri. Nka, kunnafoni nafama dɔ tora kɛnɛ kan: Server Name Indication (SNI). Nin taamasiyɛn nimɔrɔma in, n’o b’a fɔ baarakɛla dɔ ye i b’a ɲini ka se siti min ma, o bɛ ci k’a sɔrɔ a ma siri, TLS bolonɔbila fɔlɔ waati. Hali n’a mago bɛ sirako siratigɛ la diɲɛ kɔnɔ min kɔnɔ, jatigila jɛlen bɛ yen, o jirali bɛ danfaraba don danbeko la. Ɛntɛrinɛti baarakɛlaw, ɛntɛrinɛti ɲɛmɔgɔw ani mɔgɔ minnu bɛ se ka kɛ i ka lamɛnnikɛlaw ye, olu bɛ se ka i ka siti o siti lajɛ, hali ni o kɔnɔkow yɛrɛ sirilen don. O yɔrɔ de la ɲɛtaa nafama dɔ, min sɛbɛnnen bɛ RFC 9849 kɔnɔ, n’a bɛ fɔ a ma ko Encrypted Client Hello (ECH), bɛ don kɛnɛ kan, ka layidu ta ko a bɛna nin bɔgɔdaga laban in datugu ɛntɛrinɛti danbeko la.

RFC 9849 ani Encrypted Client Hello (ECH) ye mun ye ?

RFC 9849, n'a tɔgɔ ye ko "Service Binding and Parameter Specification via the DNS", o ye sariyasɛbɛn ye min bɛ Encrypted Client Hello karamɔgɔya ɲɛfɔ. ECH ye TLS 1.3 protocole dɔ faralen ye min bɛ Client Hello cikan bɛɛ siri, SNI kunnafonidilanw fana sen bɛ o la. A kunba ye, a bɛ "I want to connect to example.com" sɛbɛn gansan bila a nɔ na ni cikan sirilen ye min bɛ se ka siri, siti in baarakɛla laɲinilen dɔrɔn de bɛ se ka min ɲɛfɔ. O b’a to kabini ɲɔgɔndan taabolo fɔlɔ yɛrɛ, i ka taa yɔrɔ bɛ dogo ɲɛw ɲɛ na minnu bɛ ɛntɛrinɛti kan. ECH tɛ SNI dogo dɔrɔn; a bɛ bolokɔnincinin wɛrɛw fana datugu minnu bɛ se ka kɛ bololabaara la, i n’a fɔ ciphersuites dɛmɛlenw, ka navigatiɔn kɛcogo kelen dilan min bɛ kɛ kelen ye ani min bɛ kɛ mɔgɔ kelen ta ye. O fɛɛrɛ in bɛ baara kɛ ni kriptografi fɛɛrɛw ye walasa ka sira di kiliyan ma ka foroba kilisi dɔ dilan ka bɔ siti in ka DNS sɛbɛnw kɔnɔ, o kɔfɛ, a bɛ baara kɛ ni min ye walasa ka bolonɔbila kunnafoniw siri.

ECH tali cayalenba nafa yelenw

ECH waleyali ye waati jɔnjɔn ye nizɛri danbe ni lakanani na . A nafaw bɛ tɛmɛn i ka navigatiɔn tariku dogo dɔrɔn kan i ka ISP la.

• Baarakɛlaw ka danbe yiriwali : SNI sirili fɛ , ECH bɛ mɔgɔ sabananw bali ka i ka ɛntɛrinɛti baara kɛcogo ɲɛfɔlenw dilan ka da i bɛ taa siti minnu kan . Nin ye fɛɛrɛ jɔnjɔn ye walasa ka baarakɛlaw tɔgɔko seginni na ɛntɛrinɛti kan.
• Sensɔri ni danfara balili : mara dɔw la , ɛntɛrinɛti sɔrɔli bɛ filɛri kɛ ka da SNI kan . ECH b’a gɛlɛya kosɛbɛ ɛntɛrinɛti kan filɛriw ma walasa ka se ka don ɛntɛrinɛti yɔrɔ kɛrɛnkɛrɛnnenw walima baarakɛminɛn kɛrɛnkɛrɛnnenw na, ka ɛntɛrinɛti dafalen yiriwa.
• Sɔrɔdasi dɔgɔyara ɛntɛrinɛti binkanniw kama : Binkannikɛlaw ka teli ka baara kɛ ni SNI kunnafonidilanw ye minnu ma siri walasa ka baarakɛyɔrɔ kɛrɛnkɛrɛnnenw walima baarakɛlaw laɲini . Ni ECH ye nin kunnafoniw datugu, a bɛ sirako sɛgɛsɛgɛli ni cɛ cɛmancɛ binkanni suguya dɔw gɛlɛya.
• Ɛntɛrinɛti sariyasun minnu bɛ siniko ɲɛnabɔ : ECH bɛ TLS ka sɛgɛsɛgɛli dafalen jira , ka danbe dantigɛlen dɔ datugu min bɛ senna kabini tuma jan ani ka bɛn sariyakolo ma min ye « fɛn bɛɛ siri ». A bɛ basigi kura sigi senkan baarakɛlaw ka kan ka min makɔnɔ jɛɲɔgɔnya lakananen na.

ECH ani jagokɛcogo lakananen nataw

Jagokɛlaw fɛ , jiginni ka taa ɛntɛrinɛti kan min ka ca ni mɔgɔ kelen ta ye , o bɛ nɔ bila u ka baara kɛcogo la ani u ka nafolo nimɔrɔmaw lakanani cogo la . Ikomi tɔnw bɛ ka u jigi da sankaba-sɛnɛyɔrɔw kan ani baarakɛminɛnw modulariw kan i n’a fɔ Mewayz walasa k’u ka baarakɛcogo ɲɛnabɔ, jɛɲɔgɔnya bɛɛ lakanani de ka bon kosɛbɛ. ECH b’a janto ko kumaɲɔgɔnya min bɛ baarakɛla dɔ ka minɛn ni jagokɛminɛnw cɛ — min bɛ mara baarakɛminɛnw kan i n’a fɔ Mewayz — o bɛ lakana ka bɔ fɛn minɛcogo la ka bɔ pake fɔlɔ yɛrɛ la. O nafa ka bon kosɛbɛ jagokɛlaw bolo minnu bɛ kunnafonidilanw ɲɛnabɔ, bawo a bɛ lakanani sira nafama dɔ fara a kan ka bɔ lamɛnni kɛcogo gɛlɛnw na. Fɛɛrɛ minnu bɛ ECH dɛmɛ, olu tali, o b’a jira ko i cɛsirilen don lakana kuntaalajan na, o min bɛ se ka kɛ dannayaba ye kiliyanw ni jɛɲɔgɔnw bolo. I n’a fɔ lakana dɔnnikɛla dɔ y’a jira cogo min na baro dɔ kɔnɔ min kɛra ɛntɛrinɛti protocolw nata kan :

"ECH tɛ fɛn ye dɔrɔn; a ye ladilanni wajibiyalen ye TLS dilancogo fɔlɔ la. A bɛ layidu dafa laban-ni-dakun sirili la, a kɛtɔ k'a lajɛ ko i ka kumaɲɔgɔnya 'anvɛrisite' ye dankan ye i n'a fɔ kɔnɔ bataki."

Platifɔmu minnu bɛ o ɲɛtaa suguw bila jɔyɔrɔ fɔlɔ la, Mewayz fana sen bɛ o la, olu jɔyɔrɔ ka fisa walasa ka sigida lakananen lakika di jagokow ma minnu nafa ka bon kosɛbɛ, k’a lajɛ ko tɔn ka kunnafoniw bɛ to gundo la ani ka kɛ fɛn bɛɛ ye.

kuncɛli : Ɛntɛrinɛti kɛrɛnkɛrɛnnen dɔ bɛ senna

RFC 9849 ani Encrypted Client Hello bɛ ɲɛtaa kabakoma jira ɛntɛrinɛti ɲinini na min ye mɔgɔ kelen ta ye tiɲɛ na. Hali n’a y’a sɔrɔ ko jiginni bɛna kɛ sababu ye ka fɛn kuraw don navigatɔrɔw, baarakɛminɛnw ani DNS infrastructures (dakunw) kɔnɔ, fanga bɛ ka bonya. Navigatɛri feerela ŋanaw ni sankaba dilanbagaw bɛ ka dɛmɛ waleya kaban. Baarakɛla labanw fɛ, o kɔrɔ ye k’u ka nizɛri danbe yɔrɔ dɔ sɔrɔ kokura. Jagokɛlaw fɛ minnu bɛ bi plateformew ta, o kɔrɔ ye lakana jusigilanw barikamaw ye. Ni nin sariya in bɛ ka sɔn kosɛbɛ, an bɛ gɛrɛ ɛntɛrinɛti la, an ka kumaɲɔgɔnya fan bɛɛ bɛ lakana yɔrɔ min na ka kɛɲɛ ni a daminɛ ye, ka dannaya ni lakanaba sabati bɛɛ bolo ɛntɛrinɛti kan.

Ɲininkali minnu bɛ kɛ tuma caman na

Intɛrinɛti jamana yiriwali siratigɛ la

A san tan caman kɔnɔ , ɛntɛrinɛti y' a jigi da balansi nɔgɔlen kan lakana ni yecogo cɛ . Protocoles i n’a fɔ Transport Layer Security (TLS), n’o ye padlock taamasiyɛn jɔnjɔn ye i ka navigatɛri kɔnɔ, olu kɛra sababu ye k’an ka kunnafoniw siri. Nka, kunnafoni nafama dɔ tora kɛnɛ kan: Server Name Indication (SNI). Nin taamasiyɛn nimɔrɔma in, n’o b’a fɔ baarakɛla dɔ ye i b’a ɲini ka se siti min ma, o bɛ ci k’a sɔrɔ a ma siri, TLS bolonɔbila fɔlɔ waati. Hali n’a mago bɛ sirako siratigɛ la diɲɛ kɔnɔ min kɔnɔ, jatigila jɛlen bɛ yen, o jirali bɛ danfaraba don danbeko la. Ɛntɛrinɛti baarakɛlaw, ɛntɛrinɛti ɲɛmɔgɔw ani mɔgɔ minnu bɛ se ka kɛ i ka lamɛnnikɛlaw ye, olu bɛ se ka i ka siti o siti lajɛ, hali ni o kɔnɔkow yɛrɛ sirilen don. O yɔrɔ de la ɲɛtaa nafama dɔ, min sɛbɛnnen bɛ RFC 9849 kɔnɔ, n’a bɛ fɔ a ma ko Encrypted Client Hello (ECH), bɛ don kɛnɛ kan, ka layidu ta ko a bɛna nin bɔgɔdaga laban in datugu ɛntɛrinɛti danbeko la.

RFC 9849 ani Encrypted Client Hello (ECH) ye mun ye ?

RFC 9849, n'a tɔgɔ ye ko "Service Binding and Parameter Specification via the DNS", o ye sariyasɛbɛn ye min bɛ Encrypted Client Hello karamɔgɔya ɲɛfɔ. ECH ye TLS 1.3 protocole dɔ faralen ye min bɛ Client Hello cikan bɛɛ siri, SNI kunnafonidilanw fana sen bɛ o la. A kunba ye, a bɛ "I want to connect to example.com" sɛbɛn gansan bila a nɔ na ni cikan sirilen ye min bɛ se ka siri, siti in baarakɛla laɲinilen dɔrɔn de bɛ se ka min ɲɛfɔ. O b’a to kabini ɲɔgɔndan taabolo fɔlɔ yɛrɛ, i ka taa yɔrɔ bɛ dogo ɲɛw ɲɛ na minnu bɛ ɛntɛrinɛti kan. ECH tɛ SNI dogo dɔrɔn; a bɛ bolokɔnincinin wɛrɛw fana datugu minnu bɛ se ka kɛ bololabaara la, i n’a fɔ ciphersuites dɛmɛlenw, ka navigatiɔn kɛcogo kelen dilan min bɛ kɛ kelen ye ani min bɛ kɛ mɔgɔ kelen ta ye. O fɛɛrɛ in bɛ baara kɛ ni kriptografi fɛɛrɛw ye walasa ka sira di kiliyan ma ka foroba kilisi dɔ dilan ka bɔ siti in ka DNS sɛbɛnw kɔnɔ, o kɔfɛ, a bɛ baara kɛ ni min ye walasa ka bolonɔbila kunnafoniw siri.

ECH tali cayalenba nafa yelenw

ECH waleyali ye waati jɔnjɔn ye nizɛri danbe ni lakanani na . A nafaw bɛ tɛmɛn i ka navigatiɔn tariku dogo dɔrɔn kan i ka ISP la.

ECH ani jagokɛcogo lakananen nataw

Jagokɛlaw fɛ , jiginni ka taa ɛntɛrinɛti kan min ka ca ni mɔgɔ kelen ta ye , o bɛ nɔ bila u ka baara kɛcogo la ani u ka nafolo nimɔrɔmaw lakanani cogo la . Ikomi tɔnw bɛ ka u jigi da sankaba-sɛnɛyɔrɔw kan ani baarakɛminɛnw modulariw kan i n’a fɔ Mewayz walasa k’u ka baarakɛcogo ɲɛnabɔ, jɛɲɔgɔnya bɛɛ lakanani de ka bon kosɛbɛ. ECH b’a janto ko kumaɲɔgɔnya min bɛ baarakɛla dɔ ka minɛn ni jagokɛminɛnw cɛ — min bɛ mara baarakɛminɛnw kan i n’a fɔ Mewayz — o bɛ lakana ka bɔ fɛn minɛcogo la ka bɔ pake fɔlɔ yɛrɛ la. O nafa ka bon kosɛbɛ jagokɛlaw bolo minnu bɛ kunnafonidilanw ɲɛnabɔ, bawo a bɛ lakanani sira nafama dɔ fara a kan ka bɔ lamɛnni kɛcogo gɛlɛnw na. Fɛɛrɛ minnu bɛ ECH dɛmɛ, olu tali, o b’a jira ko i cɛsirilen don lakana kuntaalajan na, o min bɛ se ka kɛ dannayaba ye kiliyanw ni jɛɲɔgɔnw bolo. I n’a fɔ lakana dɔnnikɛla dɔ y’a jira cogo min na baro dɔ kɔnɔ min kɛra ɛntɛrinɛti protocolw nata kan :

kuncɛli : Ɛntɛrinɛti kɛrɛnkɛrɛnnen dɔ bɛ senna

RFC 9849 ani Encrypted Client Hello bɛ ɲɛtaa kabakoma jira ɛntɛrinɛti ɲinini na min ye mɔgɔ kelen ta ye tiɲɛ na. Hali n’a y’a sɔrɔ ko jiginni bɛna kɛ sababu ye ka fɛn kuraw don navigatɔrɔw, baarakɛminɛnw ani DNS infrastructures (dakunw) kɔnɔ, fanga bɛ ka bonya. Navigatɛri feerela ŋanaw ni sankaba dilanbagaw bɛ ka dɛmɛ waleya kaban. Baarakɛla labanw fɛ, o kɔrɔ ye k’u ka nizɛri danbe yɔrɔ dɔ sɔrɔ kokura. Jagokɛlaw fɛ minnu bɛ bi plateformew ta, o kɔrɔ ye lakana jusigilanw barikamaw ye. Ni nin sariya in bɛ ka sɔn kosɛbɛ, an bɛ gɛrɛ ɛntɛrinɛti la, an ka kumaɲɔgɔnya fan bɛɛ bɛ lakana yɔrɔ min na ka kɛɲɛ ni a daminɛ ye, ka dannaya ni lakanaba sabati bɛɛ bolo ɛntɛrinɛti kan.