Nj\u00eb nga faktor\u00ebt e aktivizimit t\u00eb mb\u00ebshtetjes ECH n\u00eb Firefox \u00ebsht\u00eb p\u00ebrfshirja, disa dit\u00eb m\u00eb par\u00eb, e mb\u00ebshtetjes ECH nga Cloudflare n\u00eb rrjetin e saj t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes. Nga nj\u00eb k\u00ebndv\u00ebshtrim praktik, pasi t\u00eb dh\u00ebnat mbi hostet e k\u00ebrkuara n\u00eb p\u00ebrdorimin e ECH jan\u00eb t\u00eb fshehura nga analiza, p\u00ebr filtrimin dhe bllokimin e faqeve t\u00eb pad\u00ebshiruara q\u00eb p\u00ebrdorin CDN-n\u00eb e Cloudflare, tani k\u00ebrkohet bllokimi i t\u00eb gjith\u00eb rrjetit Cloudflare, bllokimi i t\u00eb gjitha k\u00ebrkesave me ECH, ose organizimi i kapjes s\u00eb HTTPS p\u00ebrmes sertifikatave rr\u00ebnj\u00ebsor\u00eb t\u00eb rrema n\u00eb sistemin e p\u00ebrdoruesit. <\/p>\n
Fillimisht, p\u00ebr t\u00eb organizuar funksionimin e disa faqeve HTTPS n\u00eb nj\u00eb adres\u00eb IP, p\u00ebrdorej zgjerimi TLS SNI, ku emri i hostit t\u00eb k\u00ebrkuar u jepet n\u00eb mesazhin ClientHello, q\u00eb d\u00ebrgohet para vendosjes s\u00eb kanalit t\u00eb fshehur t\u00eb komunikimit. Ky ve\u00e7ori jepte mund\u00ebsin\u00eb q\u00eb n\u00eb nj\u00eb faz\u00eb t\u00eb hershme t\u00eb p\u00ebrpunimit t\u00eb lidhjes t\u00eb shp\u00ebrndante k\u00ebrkesat n\u00eb hoste virtual\u00eb, por gjithashtu i lejonte ofruesit t\u00eb sh\u00ebrbimeve t\u00eb internetit t\u00eb filtrojn\u00eb n\u00eb m\u00ebnyr\u00eb selektive trafikun HTTPS dhe t\u00eb analizojn\u00eb se cilat faqe po hap p\u00ebrdoruesi, duke mos lejuar arritjen e plot\u00eb t\u00eb privat\u00ebsis\u00eb kur p\u00ebrdoret HTTPS. <\/p>\n
P\u00ebr t\u00eb zgjidhur k\u00ebt\u00eb problem dhe p\u00ebr t\u00eb parandaluar rrjedhjen e informacionit rreth faqes s\u00eb k\u00ebrkuar, m\u00eb von\u00eb u propozua zgjatimi ESNI, i cili realizon enkriptimin e t\u00eb dh\u00ebnave me emrin e hostit. Gjat\u00eb implementimit t\u00eb ESNI-t, u identifikua se mekanizmi i propozuar nuk mbulonte t\u00eb gjitha burimet e mundshme t\u00eb rrjedhjes s\u00eb t\u00eb dh\u00ebnave rreth hostit dhe p\u00ebrdorimi i tij nuk ishte i mjaftuesh\u00ebm p\u00ebr t\u00eb siguruar privat\u00ebsin\u00eb e plot\u00eb t\u00eb seancave HTTPS. N\u00eb ve\u00e7anti, gjat\u00eb rinovimit t\u00eb nj\u00eb seance t\u00eb vendosur m\u00eb par\u00eb, emri i domainit vazhdoi t\u00eb shfaqej hapur midis parametrave t\u00eb zgjatimit TLS PSK (Pre-Shared Key). P\u00ebr m\u00eb tep\u00ebr, p\u00ebrpjekjet p\u00ebr implementimin e ESNI nxorr\u00ebn n\u00eb pah probleme me p\u00ebrputhshm\u00ebrin\u00eb dhe shkall\u00ebzimin, t\u00eb cilat pengonin p\u00ebrhapjen e gjer\u00eb t\u00eb ESNI. <\/p>\n
Duke marr\u00eb parasysh mang\u00ebsit\u00eb e identifikuara, ESNI u zhvillua nj\u00eb mekaniz\u00ebm universale t\u00eb ri ECH, i cili lejon enkriptimin e parametrave t\u00eb \u00e7do zgjerimi TLS. Ndryshe nga ESNI, dallimi kryesor teknik i ECH \u00ebsht\u00eb se n\u00eb vend t\u00eb fushave t\u00eb ve\u00e7anta, e gjith\u00eb mesazhi ClientHello enkriptohet menj\u00ebher\u00eb. ECH parashikon ndarjen e ClientHello n\u00eb dy mesazhe t\u00eb ve\u00e7anta \u2014 mesazhi i enkriptuar ClientHelloInner (SNI Inner) dhe mesazhi baz\u00eb ClientHelloOuter (SNI Outer) q\u00eb nuk \u00ebsht\u00eb i enkriptuar. N\u00eb SNI Outer t\u00eb paenkriptuar kalojn\u00eb t\u00eb dh\u00ebna q\u00eb nuk prekin privat\u00ebsin\u00eb, si versioni TLS dhe lista e kriptove t\u00eb p\u00ebrdorura, si dhe emri i p\u00ebrgjithsh\u00ebm i domain-it, i cili nuk p\u00ebrputhet me emrin aktual t\u00eb domain-it t\u00eb k\u00ebrkuar. P\u00ebr shembull, p\u00ebr t\u00eb gjith\u00eb klient\u00ebt e Cloudflare n\u00eb SNI Outer t\u00eb paenkriptuar tregohet host-i i p\u00ebrgjithsh\u00ebm \"cloudflare-ech.com\", nd\u00ebrsa emri i v\u00ebrtet\u00eb i host-it t\u00eb k\u00ebrkuar transmetohet n\u00eb SNI Inner t\u00eb enkriptuar dhe nuk \u00ebsht\u00eb i disponuesh\u00ebm p\u00ebr analiz\u00eb.
![\"N\u00eb](\"\/wp-content\/uploads\/2023\/10\/225939d0c0a33fb32a262a3e104079dc.png\")
<\/center> <\/p>\nECH gjithashtu p\u00ebrdor nj\u00eb skem\u00eb t\u00eb ndryshme t\u00eb shp\u00ebrndarjes s\u00eb \u00e7el\u00ebsit p\u00ebr enkriptimin \u2014 informata mbi \u00e7el\u00ebsin publik transmetohet n\u00eb regjistrat DNS HTTPSSVC, dhe jo n\u00eb regjistrat me lloj TXT. P\u00ebr marrjen dhe enkriptimin e \u00e7el\u00ebsit p\u00ebrdoret enkriptimi i besuar i fundme n\u00eb baz\u00eb t\u00eb mekanizmit HPKE (Enkriptimi me \u00c7el\u00ebs Publik Hibrid). ECH gjithashtu mb\u00ebshtet p\u00ebrs\u00ebritjen e sigurt t\u00eb \u00e7el\u00ebsit nga serveri, q\u00eb mund t\u00eb aplikohet n\u00eb rastin e rotacionit t\u00eb \u00e7el\u00ebsave. serveri<\/a> dhe p\u00ebr t\u00eb zgjidhur problemet n\u00eb marrjen e \u00e7el\u00ebsave t\u00eb skaduar nga cache DNS. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 Firefox \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 ECH (Encrypted Client Hello), \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ESNI (Encrypted Server Name Indication) \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 TLS-\u0441\u0435\u0430\u043d\u0441\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0435 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0435 \u0438\u043c\u044f. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043a\u043e\u0434 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 ECH \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u044b\u043f\u0443\u0441\u043a Firefox 85, \u043d\u043e \u0431\u044b\u043b \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":110432,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110431","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47N\u00eb Firefox dhe Cloudflare \u00ebsht\u00eb p\u00ebrfshir\u00eb mb\u00ebshtetje p\u00ebr ECH p\u00ebr t\u00eb fshehur domenin n\u00eb trafik HTTPS | ProHoster","description":"Kompania Mozilla shpalli p\u00ebrfshirjen e mb\u00ebshtetjes p\u00ebr mekanizmin ECH (Encrypted Client Hello) p\u00ebr p\u00ebrdoruesit e deg\u00ebs stabile t\u00eb Firefox, duke vazhduar zhvillimin e teknologjis\u00eb ESNI (Encrypted Server Name Indication) dhe q\u00eb ka p\u00ebr q\u00ebllim enkriptimin e informacionit mbi parametrat e seancave TLS, si\u00e7 \u00ebsht\u00eb emri i domeneve t\u00eb k\u00ebrkuara. Fillimisht, kodi p\u00ebr t\u00eb punuar me ECH u shtua n\u00eb daljen e Firefox 85, por ishte i \u00e7aktivizuar si e zakonshme. N\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-firefox-i-cloudflare-vklyuchena-podderzhka-ech-dlya-skrytiya-domena-v-https-trafike","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Firefox \u0438 Cloudflare \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 ECH \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 Firefox \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 ECH (Encrypted Client Hello), \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ESNI (Encrypted Server Name Indication) \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 TLS-\u0441\u0435\u0430\u043d\u0441\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0435 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0435 \u0438\u043c\u044f. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043a\u043e\u0434 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 ECH \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u044b\u043f\u0443\u0441\u043a Firefox 85, \u043d\u043e \u0431\u044b\u043b \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-firefox-i-cloudflare-vklyuchena-podderzhka-ech-dlya-skrytiya-domena-v-https-trafike","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-04T13:10:16+00:00","article:modified_time":"2023-10-04T13:10:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110431","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:39:44","updated":"2026-02-09 21:46:41","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=110431"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110431\/revisions"}],"predecessor-version":[{"id":160302,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110431\/revisions\/160302"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/110432"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=110431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=110431"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=110431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"