Hacker News

RFC 9849. TLS Yabitswe Umukiriya Muraho

Ibitekerezo

6 min read Via www.rfc-editor.org

Mewayz Team

Editorial Team

Hacker News

Kugendagenda kuri interineti igenda ihinduka

Mu myaka mirongo, interineti yashingiye ku buringanire bworoshye hagati yumutekano no kugaragara. Porotokole nka Transport Layeri Umutekano (TLS), ibuye rikomeza imfuruka ya paji yo gufunga muri mushakisha yawe, yagize uruhare runini mu guhisha amakuru yacu. Nyamara, igice cyingenzi cyamakuru cyagumye kugaragara: Seriveri Yerekana Izina (SNI). Iki kimenyetso cya digitale, kibwira seriveri urubuga ugerageza kugeraho, rwoherejwe rutabifunguye mugihe cyambere TLS yo guhana. Mugihe bikenewe muguhuza ibinyabiziga mwisi isanganywe kwakira, uku kumenyekanisha gutera icyuho gikomeye cyibanga. Abatanga serivise za interineti, abayobozi bumuyoboro, hamwe nabashobora gutega amatwi barashobora kubona urubuga rwose wasuye, nubwo ibirimo ubwabyo ari ibanga. Aha niho iterambere ryibanze, ryanditswe muri RFC 9849 kandi rizwi nka Encrypted Client Mwaramutse (ECH), ryinjira kuri stage, risezeranya kuziba icyuho gikomeye cyanyuma mubuzima bwite bwurubuga.

Niki RFC 9849 na Encrypted Client Muraho (ECH)?

> ECH niyagurwa kuri protocole ya TLS 1.3 ihishe ubutumwa bwose bwabakiriya Mwaramutse, harimo amakuru ya SNI yunvikana. Mubusanzwe, isimbuza imvugo isobanutse "Ndashaka guhuza kurugero.com" hamwe nubutumwa bwabitswe bwerekana gusa seriveri yagenewe urubuga gusa. Ibi byemeza ko guhera ku ntambwe yambere yuburyo bwo guhuza, aho ujya uhishe amaso yubusa kuri neti. ECH ntabwo ihisha SNI gusa; itwikiriye kandi izindi ntoki zishobora gutunga urutoki muguhana intoki, nka ciphersuite zishyigikiwe, gukora uburambe bumwe kandi bwihariye bwo gushakisha. Ikoranabuhanga rikoresha uburyo bwa kriptografiya kugirango yemere umukiriya gutanga urufunguzo rusange ruvuye kurubuga rwa DNS rwurubuga, hanyuma rukoresha muguhisha amakuru yoroheje yo guhana intoki.

Inyungu zifatika zo kwaguka kwa ECH kwinshi

Ishyirwa mu bikorwa rya ECH ryerekana umwanya wingenzi kubuzima bwite bwa digitale n'umutekano. Inyungu zayo zirenze kure guhisha amateka yawe yo kureba muri ISP.