Isici se-Smarter Encryption DuckDuckGo sokuqondisa kabusha ngokuzenzakalela ku-HTTPS

Ukusetshenziswa kwe-HTTPS ku- "theory" kwafika ngishoukubethela okuqukethwe phakathi kwekhompyutha yomsebenzisi neseva equkethe ikhasi lewebhu ukuze gwema ukuhlaselwa kweMITM ukuthi leli cala "alinakwenzeka". DuckDuckGo akaphunyuki kulokhu yingakhofuthi ngakha umsebenzi obizwa ngokuthi Ukubethela Okuhlakaniphile, okwenzelwe ukuthumela ngokuzenzakalela izicelo ze-HTTPS kumasayithi we-HTTP uma isayithi lisekela i-HTTPS futhi uma lisohlwini lwamasayithi angavuselelwa kusuka ku-DuckDuckGo.

Ku-Smarter Encryption kunohlu olude lwamawebhusayithi aqukethe izinhlobo ezibethelwe (HTTPS) yamawebhusayithi ayo, iDuckDuckGo ewasebenzisayo ukuqinisekisa ukuthi uxhumana kuphela nalezi zinguqulo ezibethelwe. Injini yokusesha ikhiqiza lolu hlu ngokuzenzekelayo njengoba uqhubeka upheqa iwebhu.

Ngaphandle kwalokho iphakamisa izimo ezimbili eziyinhloko lapho ivumela khona ukuthuthukisa ubumfihlo:

1. Okokuqala, amawebhusayithi amaningi anikela ngohlobo olubethelwe (i-HTTPS) kanye nenguqulo engabetheliwe (i-HTTP) yewebhusayithi yabo, kepha ngenxa yezizathu ezahlukahlukene abazithumeli ngokuzenzakalela ithrafikhi kusuka enguqulweni yabo ebethelwe. I-DuckDuckGo Encryption Encryption isekela lesi simo;
2. Okunye kungaba ukuthi noma ngabe iwebhusayithi inikezela nge-HTTPS futhi umsebenzisi wokuphequlula afinyelela kwelinye lamakheli ewebhu futhi lo mzamo wokuqala awubetheliwe okwenza ukuthi ukuphequlula kuvuze.

Lokhu kuvame ukubonakala ezinkundleni zokuxhumana., lapho izixhumanisi eziningi zezindaba zikhonjiswa njengezixhumanisi ezingabhalwanga, ziveza imininingwane yalokho okufunde kulesi sicelo sokuqala se-HTTP. I-DuckDuckGo Encryption Encryption futhi isekela lesi simo lapho iphoqa ukufinyelela ku-HTTPS.

Le ndlela isebenza kanjani ngokubethela okuhlakaniphile:

Ukuchofoza noma ukusesha isizinda esingaphephile (http). Isizinda se-http kuzobukeka ohlwini lwakho lwendawo ukubona uma ingabuyekezwa ngokushesha. Ngaphandle kwalokho izoguqulelwa ku-SHA-1 hash

Izinhlamvu ezine zokuqala zale hashi  zithunyelwa kwinsizakalo ye-DuckDuckGo engaziwa, smarter_encryption.js, okuqinisekisa ukuthi izingodo azinawo amakheli e-IP noma eminye imininingwane yomuntu.

Ngakho-ke, njengezicelo ezingaziwa ku-DuckDuckGo Search, umshicileli (ngombono) akakwazi ukwazi izinto ngabantu abenza lezi zicelo.

Kodwa-ke, i-DuckDuckGo ingeze olunye ungqimba lokuvikela ubumfihlo kule sevisi engaziwa ngokucela idivaysi ukuthi ithumele kuphela izinhlamvu ezine zokuqala zesizinda se-hash, ukuze insizakalo ingakwazi ngandlela thile ukukhombisa isizinda esivakashelwe ngqo.

Isevisi engaziwa ibuyisa zonke izizinda ze-hash kusuka kuhlu oluphelele lokubethela ngobuchule ehambelana nezinhlamvu ezine zokuqala ze-hashi ethunyelwe. Lapha idivayisi ihlola izizinda ezibuyisiwe ze-hash ukubona ukuthi i-hashi yesizinda engiyaziyo ivakashela ngqo yini enye yezizinda ezibuyisiwe ze-hash. Uma kunjalo, iyabuyekezwa!

Le nkampani idale uhlu lwamasayithi angaphezu kwezigidi eziyi-10 eqhubeka nokuvuselela. Ngenxa yalolu sayizi omkhulu, uhlu alukwazi ukugcinwa ngokuphelele kuzinhlelo zokusebenza noma izandiso ezifakwe kumadivayisi. Esikhundleni salokho, umshicileli ugcina amasayithi amatasa kakhulu endaweni kumadivayisi futhi agcine lonke uhlu luseva kumaseva alo.

Lesi sici asigcini kubasebenzisi be-DuckDuckGo selokhu ikhodi esetshenziselwe Ukubethela Okuhlakaniphile manje Kungumthombo ovulekile futhi uyatholakala kwi-GitHub ngaphansi kwelayisense le-Apache 2.0.

I-Pinterest ithathe i-plunge futhi isebenzisa ukubethela okuhlakaniphile kwezixhumanisi zayo zangaphandle. Ipulatifomu ithi ngemuva kokuhlanganisa isici seDuckDuckGo, "cishe amaphesenti angama-80 omgwaqo ophumayo manje udlula i-HTTPS, ukwanda okungaphezu kwamaphesenti angama-30."

Mayelana nekhodi yokubhala ngobuchule kungaboniswana kusixhumanisi esilandelayo.

Kulabo abanentshisekelo yokuzama Ukubethela Okuhlakaniphile, bangalanda isiphequluli ezitolo ze-Android noma ze-iOS. Ngenkathi ye-Chrome inikezwa ngesimo se-plugin.

Izixhumanisi yilezi.

• Android
• iOS
• Chrome