{"id":112279,"date":"2023-12-17T15:10:15","date_gmt":"2023-12-17T13:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predstavlen-ssh3-variant-protokola-ssh-ispolzuyushhij-http-3"},"modified":"2023-12-17T15:10:15","modified_gmt":"2023-12-17T13:10:16","slug":"predstavlen-ssh3-variant-protokola-ssh-ispolzuyushhij-http-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/predstavlen-ssh3-variant-protokola-ssh-ispolzuyushhij-http-3","title":{"rendered":"SSH3 \u00ebsht\u00eb paraqitur, variant i protokollit SSH q\u00eb p\u00ebrdor HTTP\/3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cbsht\u00eb disponuesh\u00ebm nj\u00eb publikim i par\u00eb zyrtar i implementimit eksperimental t\u00eb serverit dhe klientit p\u00ebr protokollin SSH3, i formuluar si nj\u00eb shtes\u00eb mbi protokollin HTTP\/3, duke p\u00ebrdorur QUIC (mbi UDP) dhe TLS 1.3 p\u00ebr t\u00eb vendosur nj\u00eb kanal t\u00eb sigurt komunikimi dhe mekanizma HTTP p\u00ebr identifikimin e p\u00ebrdoruesve. Projekti po zhvillohet nga Fran\u00e7ois Michel, doktorant n\u00eb Universitetin Katolik t\u00eb Leuvenit (Belgjik\u00eb), me pjes\u00ebmarrjen e Olivier Bonaventure, profesor n\u00eb t\u00eb nj\u00ebjtin universitet, i njohur p\u00ebr zhvillimin e n\u00ebnsistemit Multipath TCP dhe kodin e ruterizimit t\u00eb segment\u00ebve IPv6 p\u00ebr b\u00ebrtham\u00ebn Linux, si dhe bashk\u00ebautor i 10 RFC dhe draft-eve t\u00eb m\u00eb shum\u00eb se 60 specifikimeve rrjet\u00ebsore. Kodi i implementimit referenc\u00eb t\u00eb klientit dhe serverit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn Go dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn Apache 2.0. <\/p>\n

Zhvillimi i SSH3 \u00ebsht\u00eb rezultat i nj\u00eb rishikimi t\u00eb plot\u00eb t\u00eb protokollit SSH, b\u00ebr\u00eb nga nj\u00eb grup t\u00eb ve\u00e7ant\u00eb studiuesish, t\u00eb pavarur nga OpenSSH dhe projekte t\u00eb tjera q\u00eb zhvillojn\u00eb implementime t\u00eb protokollit klasik SSH. N\u00eb SSH3, semantika e protokollit klasik SSH implementohet p\u00ebrmes mekanizmave HTTP, duke mund\u00ebsuar disa mund\u00ebsi t\u00eb tjera dhe duke siguruar fshehjen e aktivitetit t\u00eb lidhur me SSH brenda trafikut tjet\u00ebr. <\/p>\n

Duke p\u00ebrdorur SSH3, serveri \u00ebsht\u00eb i padalluesh\u00ebm nga nj\u00eb server HTTP dhe pranon k\u00ebrkesa n\u00eb portin 443 t\u00eb rrjetit (HTTPS), nd\u00ebrsa trafiku SSH3 p\u00ebrzihet me trafikun tipik HTTP, duke v\u00ebshtir\u00ebsuar realizimin e sulmeve q\u00eb lidhen me skanimin e porteve dhe identifikimin e server\u00ebve SSH p\u00ebr t\u00eb provuar fjal\u00ebkalime. P\u00ebr t\u00eb v\u00ebshtir\u00ebsuar kryerjen e sulmeve mbi hostingut<\/a> SSH3, p\u00ebrve\u00e7 njohuris\u00eb s\u00eb informacioneve p\u00ebr pranin\u00eb e serverit n\u00eb nj\u00eb adres\u00eb IP t\u00eb caktuar, mund t\u00eb p\u00ebrcaktoj\u00eb nj\u00eb rrug\u00eb-sekret identifikimi p\u00ebr serverin SSH3. Pa trajtimin e identifikuesit t\u00eb sakt\u00eb, serveri do t\u00eb trajtoj\u00eb p\u00ebrgjigjet si nj\u00eb server standard HTTPS dhe nuk do t\u00eb tregoj\u00eb faktin e mund\u00ebsis\u00eb p\u00ebr t'u lidhur n\u00ebp\u00ebrmjet SSH3. P\u00ebr shembull, me caktimin e identifikuesit \"e6ae772cbdaafd6918865cc2ce449dae\", mund t\u00eb lidheni me serverin vet\u00ebm p\u00ebrmes URL \"https:\/\/192.0.2.0:443\/e6ae772cbdaafd6918865cc2ce449dae\", dhe n\u00ebse identifikatori \u00ebsht\u00eb caktuar gabimisht, serveri do t\u00eb jap\u00eb nj\u00eb gabim standard \"404\". <\/p>\n

Nga funksionaliteti i avancuar i SSH3 p\u00ebrmendet mund\u00ebsia e p\u00ebrdorimit t\u00eb certifikatave X.509 p\u00ebr autentifikim dhe metodave OAuth 2.0\/OpenID Connect, p\u00ebrve\u00e7 metodave klasike t\u00eb SSH; mb\u00ebshtetje p\u00ebr ridrejtimin e porteve UDP p\u00ebrmes tunelit SSH p\u00ebrve\u00e7 mund\u00ebsive t\u00eb ridrejtimit t\u00eb porteve TCP (p\u00ebr shembull, p\u00ebr t\u00eb kaluar QUIC, DNS dhe RTP); p\u00ebrdorimi i funksioneve t\u00eb avancuara t\u00eb protokollit QUIC, si migrimi i lidhjeve pa nd\u00ebrprerje t\u00eb lidhjes dhe vendosja e lidhjeve multipath p\u00ebr paralelizimin e trafik\u00ebs p\u00ebrmes disa rrugeve. <\/p>\n

Ve\u00e7an\u00ebrisht v\u00ebrehet reduktimi i konsideruesh\u00ebm t\u00eb koh\u00ebs p\u00ebr krijimin e lidhjes gjat\u00eb p\u00ebrdorimit t\u00eb SSH3. Kur lidheni me serverin SSH3, k\u00ebrkohen vet\u00ebm 3 iteracione rrjetesh (Round Trip), nd\u00ebrsa p\u00ebr SSHv2 kryhen 5-7 iteracione shk\u00ebmbimi paketash. Koha e reagimit ndaj hyrjes nga tastiera p\u00ebr seancat tashm\u00eb t\u00eb krijuara n\u00eb SSH3 dhe SSHv2 \u00ebsht\u00eb n\u00eb t\u00eb nj\u00ebjtin nivel.

\"SSH3<\/center> <\/p>\n

P\u00ebr enkriptimin e kanalit t\u00eb komunikimit n\u00eb SSH3, p\u00ebrdoret protokolli TLS 1.3, dhe p\u00ebr autentifikimin mund t\u00eb p\u00ebrdoren metodat klasike t\u00eb bazuara n\u00eb fjal\u00ebkalime dhe \u00e7el\u00ebsa publik\u00eb (RSA dhe EdDSA\/ed25519). P\u00ebr m\u00eb tep\u00ebr, n\u00eb SSH3 mund t\u00eb aplikohen metoda t\u00eb bazuara n\u00eb protokollin OAuth 2.0, duke lejuar q\u00eb autentifikimi t\u00eb b\u00ebhet p\u00ebrmes ofruesve t\u00eb jasht\u00ebm, p\u00ebr shembull, p\u00ebr t\u00eb mund\u00ebsuar hyrjen me konfirmimin p\u00ebrmes llogarive n\u00eb sh\u00ebrbimet Google, Microsoft dhe GitHub. P\u00ebr lidhjet me server\u00ebt p\u00ebrmes \u00e7el\u00ebsave, p\u00ebrve\u00e7 \u00e7el\u00ebsave SSH, mund t\u00eb p\u00ebrdoren certifikata X.509, t\u00eb cilat p\u00ebrdoren p\u00ebr HTTPS. <\/p>\n

Implementimi i publikuar i klientit dhe serverit SSH3 mb\u00ebshtet shum\u00eb mund\u00ebsi baz\u00eb t\u00eb OpenSSH, mes t\u00eb cilave: <\/p>\n