ExpressVPN yalengeza kukhazikitsidwa kwa gwero lotseguka la protocol ya Lightway, yopangidwa kuti ikwaniritse nthawi zochepa zolumikizirana ndikusunga chitetezo chambiri komanso kudalirika. Khodiyo imalembedwa m'chinenero cha C ndikugawidwa pansi pa layisensi ya GPLv2. Kukhazikitsa ndikokwanira kwambiri ndipo kumagwirizana ndi mizere zikwi ziwiri zamakhodi. Adalengezedwa kuthandizira kwa Linux, Windows, macOS, iOS, nsanja za Android, ma router (Asus, Netgear, Linksys) ndi asakatuli. Kusonkhana kumafuna kugwiritsa ntchito machitidwe osonkhana a Earthly and Ceedling. Kukhazikitsa kumayikidwa ngati laibulale yomwe mungagwiritse ntchito kuphatikiza kasitomala wa VPN ndi magwiridwe antchito a seva muzofunsira zanu.
Khodiyo imagwiritsa ntchito ntchito zomangidwa kale, zotsimikizika zachinsinsi zoperekedwa ndi laibulale ya wolfSSL, yomwe imagwiritsidwa ntchito kale muzoyeserera za FIPS 140-2. Munjira yabwinobwino, protocol imagwiritsa ntchito UDP potumiza deta ndi DTLS kupanga njira yolumikizirana yobisika. Monga njira yowonetsetsera ntchito pa maukonde osadalirika kapena oletsa a UDP, seva imapereka njira yodalirika, koma yochepetsetsa, yosakanikirana yomwe imalola kuti deta isamutsidwe pa TCP ndi TLSv1.3.
Mayesero opangidwa ndi ExpressVPN adawonetsa kuti poyerekeza ndi ma protocol akale (ExpressVPN imathandizira L2TP/IPSec, OpenVPN, IKEv2, PPTP, WireGuard ndi SSTP, koma silinena mwatsatanetsatane zomwe zidafaniziridwa), kusinthira ku Lightway kuchepetsedwa nthawi yolumikizira nthawi pafupifupi 2.5 kuposa theka la milandu njira yolumikizirana imapangidwa pasanathe sekondi imodzi). Protocol yatsopanoyi idapangitsanso kuti kuchepetsa kuchuluka kwa kulumikizidwa kolumikizidwa ndi 40% pama network osadalirika omwe ali ndi vuto la kulumikizana.
Kupititsa patsogolo kukhazikitsidwa kwa ndondomekoyi kudzachitidwa pa GitHub, ndi mwayi woimira anthu ammudzi kutenga nawo mbali pa chitukuko (kutengera kusintha, muyenera kusaina mgwirizano wa CLA pa kusamutsidwa kwa ufulu wa katundu ku code). Othandizira ena a VPN amapemphedwanso kuti agwirizane, chifukwa amatha kugwiritsa ntchito protocol yomwe akufuna popanda zoletsa.
Chitetezo cha kukhazikitsidwa chinatsimikiziridwa ndi zotsatira za kafukufuku wodziyimira pawokha wochitidwa ndi Cure53, yemwe nthawi ina adawunikira NTPsec, SecureDrop, Cryptocat, F-Droid ndi Dovecot. Kufufuzaku kunakhudza kutsimikizika kwa magwero a magwero ndikuphatikizanso mayeso kuti azindikire zovuta zomwe zingatheke (nkhani zokhudzana ndi cryptography sizinaganiziridwe). Kawirikawiri, khalidwe la kachidindo lidawerengedwa kuti ndi lapamwamba, koma, komabe, mayeserowa adavumbulutsa zowonongeka zitatu zomwe zingayambitse kukana ntchito, ndi chiwopsezo chimodzi chomwe chimalola kuti protocol igwiritsidwe ntchito ngati amplifier pa nthawi ya DDoS. Mavutowa adakonzedwa kale, ndipo ndemanga zomwe zaperekedwa pakuwongolera kachidindozo zaganiziridwa. Kafukufukuyu amayang'ananso zovuta zomwe zimadziwika kuti ndizovuta komanso zovuta zomwe zili mgulu lachitatu, monga libdnet, WolfSSL, Unity, Libuv ndi lua-crypt. Nkhanizi ndi zazing'ono, kupatula MITM ku WolfSSL (CVE-2021-3336).
Source: opennet.ru