Nenjere Encryption DuckDuckGo's chimiro chekuzvidzoreredza kuHTTPS

Iko kushandiswa kweHTTPS mu "dzidziso" kwakauya kunyangekunyorera zvirimo pakati pekomputa yemushandisi uye sevha ine peji rewebhu kuitira kuti dzivisa MITM kurwisa kuti iyi nyaya yaizo "goneka". DuckDuckGo haitize izvi uye ndosakauye ini ndinogadzira inoshanda inonzi Smarter Encryption, yakagadzirirwa kutumira otomatiki zvikumbiro zveHTTPS kunzvimbo dzeHTTP kana iyo saiti inotsigira HTTPS uye kana iri mune runyorwa rwemasayiti anogona kuvandudzwa kubva kuDuckDuckGo.

PaSmartter Encryption pane runyorwa rurefu rwemawebhusaiti ane zvinyorwa zvakavanzika (HTTPS) yemawebhusaiti avo, ayo DuckDuckGo anoshandisa kuona kuti iwe unongobatana neaya akavharirwa vhezheni. Injini yekutsvaga inogadzira runyorwa urwu paunenge uchingotarisa pawebhu.

kunze kwaizvozvo inomutsa zviitiko zviviri zvikuru izvo zvinobvumidza kuvandudza zvakavanzika:

1. Kutanga, mazhinji mawebhusaiti anopa yakavharirwa vhezheni (HTTPS) uye isina kunyoreswa vhezheni (HTTP) yewebhusaiti yavo, asi nekuda kwezvikonzero zvakasiyana havango dzoreredza traffic kubva kune yavo yakavharidzirwa vhezheni. DuckDuckGo Nenjere Encryption inotsigira iyi mamiriro;
2. Imwe ingangove kana kunyangwe kana webhusaiti ichipa HTTPS uye mushandisi wekuvhura achiwana imwe yemawebhu kero uye iyi yekutanga kuyedza haina kunyorwa asi ichikonzera maitiro ekubhurawuza kudonha.

Izvi zvinonyanya kuonwa pasocial media., uko kwakawanda mahukama enhau anoratidzwa semasaini asina kunyorwa, achifumura ruzivo rwezvaunoverenga mune ichi chekutanga chikumbiro cheHTTP. DuckDuckGo Nenjere Encryption inotsigirawo iyi mamiriro apo inomanikidza kupinda kweHTTPS.

Aya ndiwo mashandiro eSmartter Encryption:

Kudzvanya kana kutsvaga dura risina kuchengetedzwa (http). Iyo http domeini ichatarisa pane yako yemuno runyorwa kuti uone kana ichigona kuvandudzwa ipapo. Zvikasadaro inozoshandurwa kuita SHA-1 hash

Mavara mana ekutanga eiyi hashi  anotumirwa kune isingazivikanwe DuckDuckGo sevhisi, smarter_encryption.js, iyo inovimbisa kuti matanda haana kumbobvira aine IP kero kana rumwe ruzivo rwevanhu.

Saka, sekukumbira kusingazivikanwe paDuckDuckGo Kutsvaga, muparidzi (mune dzidziso) haakwanise kuziva zvinhu nezve vanhu vari kuita izvi zvikumbiro.

Nekudaro, DuckDuckGo yakawedzera imwe nhanho yekuchengetedza zvakavanzika kune ino isingazivikanwe sevhisi nekukumbira chishandiso kutumira chete mavara mana ekutanga eiyo hash domain, kuitira kuti sevhisi isakwanise munzira ipi neipi kuratidza iyo chaiyo domeini inoshanyirwa.

Isingaazivikanwe sevhisi inodzosera ese hash domains kubva kuzere Smarter Encryption runyorwa inoenderana nemavara mana ekutanga eiyo hashi yakatumirwa. Pano chishandiso chinotarisa dzakadzoserwa hash domains kuti uone kana hashi yedomeini ini yandinoziva iri kushanya chaizvo inowirirana imwe yeakadzoserwa hash domains. Kana zvirizvo, zvinowedzeredzwa!

Iyo kambani yakagadzira runyorwa rweanopfuura mamirioni gumi emasaiti ayo airi kuramba achigadzirisa. Nekuda kweiyi yakakura saizi, iyo rondedzero haigone kunyatso chengetwa mumaapps kana ekuwedzeredzwa akaiswa pane zvishandiso. Panzvimbo iyoyo, muparidzi anochengetera nzvimbo dzakabatikana zvakanyanya munzvimbo iyi pane zvishandiso uye anochengeta zvese zvakasara pane zvinyorwa zvacho.

Ichi chimiro hachina kungobvumidzwa kune vashandisi veDuckDuckGo sezvo kodhi yakashandiswa kuSmartter Encryption izvozvi Iyo yakavhurwa sosi uye inowanikwa paGitHub pasi peApache 2.0 rezinesi.

Pinterest yatora pombi uye inoshandisa Smarter Encryption kune ayo ekunze zvinongedzo. Chikuva chacho chinoti mushure mekubatanidza iyo DuckDuckGo ficha, "inenge makumi masere muzana muzana yemigwagwa inobuda zvino inodarika HTTPS, kuwedzera kweanopfuura makumi matatu muzana."

Nezve iyo Smarter Encryption kodhi inogona kubvunzwa mune inotevera chinongedzo.

Kune avo vanofarira kuyedza Kuchenjera Kuchengeta, vanogona kurodha pasi browser kubva kuzvitoro zveApple kana iOS. Panguva yeiyo Chrome inopihwa muchimiro che plugin.

Iwo ma Links ndeaya.

• Android
• iOS
• Chrome