ExpressVPN yakazivisa yakavhurika sosi yekushandiswa kweiyo Lightway protocol, yakagadzirirwa kuwana inokurumidza yekubatanidza nguva yekuseta uku ichichengetedza yakakwira mwero wekuchengetedza uye kuvimbika. Iyo kodhi yakanyorwa muC uye yakagoverwa pasi peGPLv2 rezinesi. Kuitwa kwacho kwakanyatso compact uye kunoenderana nezviuru zviviri zvemitsara yekodhi. Yakaziviswa rutsigiro rweLinux, Windows, macOS, iOS, Android mapuratifomu, marouters (Asus, Netgear, Linksys) uye mabhurawuza. Gungano rinoda kushandiswa kwePasi uye Ceedling musangano masisitimu. Kuitwa kwacho kwakarongedzwa seraibhurari iyo iwe yaunogona kushandisa kubatanidza VPN mutengi uye server mashandiro mumashandisirwo ako.
Iyo kodhi inoshandisa kunze-kwe-iyo-bhokisi yakasimbiswa cryptographic mabasa akapihwa newolfSSL raibhurari yakatoshandiswa muFIPS 140-2 dzakasimbiswa mhinduro. Mune yakajairika mode, iyo protocol inoshandisa UDP kuendesa data uye DTLS kugadzira yakavanzika yekutaurirana chiteshi. Sechisarudzo chekubata zvisingavimbiki kana UDP-inodzivirira mitambo, imwe yakavimbika, asi inononoka, yekufambisa nzira inopiwa nevhavha, zvichiita kuti data iendeswe pamusoro peTCP uye TLSv1.3.
Miedzo yakaitwa ne ExpressVPN yakaratidza kuti kana ichienzaniswa neyekare maprotocol (ExpressVPN inotsigira L2TP/IPSec, OpenVPN, IKEv2, PPTP, WireGuard, uye SSTP, asi kuenzanisa kwacho hakuna kutsanangurwa), kuchinjira kuLightway yakaderedzwa yekubatanidza nguva yekumisikidza neavhareji ye2.5 nguva. (mune inopfuura hafu yezviitiko, nzira yekukurukurirana inogadzirwa munguva isingasviki sekondi). Iyo itsva protocol yakaitawo kuti zvibvire kudzikisa huwandu hwekudimburwa munharembozha dzisina kuvimbika dzine matambudziko emhando yekubatanidza ne40%.
Iko kuvandudzwa kwereferensi yekuitwa kweprotocol ichaitwa paGitHub nemukana wekutora chikamu mukusimudzirwa kwevamiriri venharaunda (kuendesa shanduko, unofanirwa kusaina chibvumirano cheCLA pamusoro pekuendesa kodzero dzezvivakwa kune kodhi). Vamwe vanopa VPN vanokokwawo kuti vabatane, iyo inogona kushandisa iyo yakarongwa protocol pasina zvirambidzo.
Kuchengetedzwa kwekushandiswa kunosimbiswa nemhedzisiro yeongororo yakazvimirira yakaitwa neCure53, iyo pane imwe nguva yakaongorora NTPsec, SecureDrop, Cryptocat, F-Droid uye Dovecot. Ongororo iyi yakafukidza kusimbiswa kwemakodhi makodhi uye yaisanganisira bvunzo yekuona kusagona kuitika (nyaya dzine chekuita necryptography hadzina kutariswa). Kazhinji, hutano hwekodhi hwakanzi hwakakwirira, asi, zvisinei, kuongorora kwakaratidza hutatu hutatu hunogona kutungamirira mukuramba basa, uye humwe husina simba hunobvumira kuti protocol ishandiswe senzira yekufambisa panguva DDoS kurwisa. Aya matambudziko akatogadziriswa, uye zvakataurwa pamusoro pekuvandudza kodeti zvakatorwa. Ongororo iyi zvakare yakakwevera kutarisisa kunozivikanwa kusasimba uye nyaya mune yechitatu-bato zvikamu zvinosanganisirwa, senge libdnet, WolfSSL, Kubatana, Libuv, uye lua-crypt. Mazhinji enyaya idiki, kunze kweMITM muWolfSSL (CVE-2021-3336).
Source: opennet.ru