{"id":37106,"date":"2019-10-31T22:15:46","date_gmt":"2019-10-31T19:15:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vsyo-chto-vy-hoteli-znat-o-detsentralizovannom-internet-provajdere-medium-no-boyalis-sprosit\/"},"modified":"2019-10-31T22:15:46","modified_gmt":"2019-10-31T19:15:46","slug":"vsyo-chto-vy-hoteli-znat-o-detsentralizovannom-internet-provajdere-medium-no-boyalis-sprosit","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vsyo-chto-vy-hoteli-znat-o-detsentralizovannom-internet-provajdere-medium-no-boyalis-sprosit","title":{"rendered":"Gjith\u00e7ka q\u00eb keni dashur t\u00eb dini p\u00ebr ofruesin e decentralizuar t\u00eb internetit \u00abMedium\u00bb, por keni pasur frik\u00eb t\u00eb pyesni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mir\u00ebdita, Komunitet!<\/p>\n

Emri im \u00ebsht\u00eb Yanisav Basyuk<\/b>. Un\u00eb jam koordinator i organizat\u00ebs publike \u00abMedium\u00bb.<\/p>\n

N\u00eb k\u00ebt\u00eb artikull, p\u00ebrpiqem t\u00eb mbledh informacionin m\u00eb t\u00eb plot\u00eb rreth asaj q\u00eb \u00ebsht\u00eb ky ofrues decentralizuar i internetit q\u00eb vepron n\u00eb territorin e Federat\u00ebs Ruse. ofruesi i internetit t\u00eb decentralizuar<\/a><\/noindex>.<\/p>\n

Do t\u00eb flas:<\/p>\n

\u00a0\u00a0\u00a0\u00a0\"Gjith\u00e7ka\u00a0\u00a0\u00a0\u00c7far\u00eb \u00ebsht\u00eb \u00abMedium\u00bb
\n\u00a0\u00a0\u00a0\u00a0\"Gjith\u00e7ka\u00a0\u00a0\u00a0\u00c7far\u00eb \u00ebsht\u00eb Yggdrasil dhe pse \u00abMedium\u00bb e p\u00ebrdor at\u00eb si transportin kryesor
\n\u00a0\u00a0\u00a0\u00a0\"Gjith\u00e7ka\u00a0\u00a0\u00a0Si t\u00eb konfigurosh sakt\u00eb ambientin p\u00ebr t\u00eb p\u00ebrdorur burimet e rrjetit \u00abMedium\u00bb<\/p>\n

\"Gjith\u00e7ka
\n<\/a><\/noindex><\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb \u00abMedium\u00bb?<\/h2>\n

\nMesatar<\/b> (angl. Mesatar<\/i> \u2014 \u00abnd\u00ebrlidh\u00ebs\u00bb, slogani origjinal \u2014 Mos k\u00ebrkoni intimitetin tuaj. Merreni p\u00ebrs\u00ebri<\/i>; gjithashtu n\u00eb anglisht fjala medium<\/i> do t\u00eb thot\u00eb \u00abkujdestar\u00bb) \u2014 nj\u00eb ofrues rus i internetit t\u00eb decentralizuar, q\u00eb ofron sh\u00ebrbime qasje n\u00eb rrjet Yggdrasil<\/a><\/noindex> pa pages\u00eb.<\/p>\n

Kur, ku dhe pse u krijua \u00abMedium\u00bb?<\/h2>\n

\nFillimi e projektit ishte menduar si Rrjet me mesh<\/a><\/noindex> n\u00eb n\u00eb qytetin Kolomenskij<\/a><\/noindex>.<\/p>\n

\u00abMedium\u00bb \u00ebsht\u00eb formuar n\u00eb prill 2019 si pjes\u00eb e krijimit t\u00eb nj\u00eb mjedisi telekomunikacioni t\u00eb pavarur duke ofruar p\u00ebrdoruesve p\u00ebrfundimtar\u00eb qasje n\u00eb burimet e rrjetit Yggdrasil p\u00ebrmes teknologjis\u00eb s\u00eb transmetimit t\u00eb dh\u00ebnave Wi-Fi.<\/p>\n

Ku mund t\u00eb gjej nj\u00eb list\u00eb t\u00eb plot\u00eb t\u00eb t\u00eb gjith\u00eb pikave t\u00eb rrjetit?<\/b>Ju mund ta gjeni at\u00eb n\u00eb repozytorin n\u00eb GitHub<\/a><\/noindex>.<\/p>\n

\"Gjith\u00e7ka
\n<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb Yggdrasil dhe pse \u00abMedium\u00bb e p\u00ebrdor at\u00eb si transportin kryesor?<\/h2>\n

\nYggdrasil<\/a><\/noindex> \u2014 \u00ebsht\u00eb nj\u00eb rrjet q\u00eb organizohet vet\u00eb Rrjet me mesh<\/a><\/noindex>, q\u00eb ka mund\u00ebsin\u00eb e lidhjes s\u00eb router\u00ebve si n\u00eb modalitetin overlay (n\u00eb sip\u00ebrfaqe t\u00eb internetit) ashtu edhe direkt me nj\u00ebri-tjetrin p\u00ebrmes nj\u00eb lidhjeje t\u00eb kabluar ose pa tela.<\/p>\n

Yggdrasil \u00ebsht\u00eb nj\u00eb vazhdim i projektit CjDNS<\/a><\/noindex>. Dallimi kryesor midis Yggdrasil dhe CjDNS \u00ebsht\u00eb p\u00ebrdorimi i protokollit STP<\/a><\/noindex> (protokolli i pem\u00ebs s\u00eb shtrirjes).<\/p>\n

\"Gjith\u00e7ka
\n
\nP\u00ebr default, t\u00eb gjith\u00eb router\u00ebt e rrjetit p\u00ebrdorin kriptimin end-to-end<\/a><\/noindex> p\u00ebr t\u00eb transmetuar t\u00eb dh\u00ebnat midis an\u00ebtar\u00ebve t\u00eb tjer\u00eb.<\/p>\n

Zgjedhja e rrjetit Yggdrasil si transporti kryesor ishte e ndikuar nga nevoja p\u00ebr t\u00eb rritur shpejt\u00ebsin\u00eb e lidhjes (deri n\u00eb gusht 2019, \u00abMedium\u00bb p\u00ebrdorte I2P<\/a><\/noindex>).<\/p>\n

Kalimi n\u00eb Yggdrasil gjithashtu u jep pjes\u00ebmarr\u00ebsve t\u00eb projektit mund\u00ebsin\u00eb p\u00ebr t\u00eb filluar zhvillimin e nj\u00eb rrjeti Mesh me topologjin\u00eb Full-Mesh. Kjo organizat\u00eb e rrjetit \u00ebsht\u00eb antidoti m\u00eb efektiv ndaj censur\u00ebs.<\/p>\n

\"Gjith\u00e7ka
\n<\/p>\n

Yggdrasil p\u00ebr default p\u00ebrdor kriptimin end-to-end. Pse sh\u00ebrbimet e rrjetit \u00abMedium\u00bb p\u00ebrdorin HTTPS?<\/h2>\n

\nNuk ka asnj\u00eb nevoj\u00eb p\u00ebr t\u00eb p\u00ebrdorur protokollin HTTPS p\u00ebr t'u lidhur me sh\u00ebrbimet n\u00eb rrjetin Yggdrasil n\u00ebse po i qaseni atyre p\u00ebrmes nj\u00eb router-i lokal t\u00eb rrjetit Yggdrasil.<\/p>\n

N\u00eb t\u00eb v\u00ebrtet\u00eb: transporti Yggdrasil n\u00eb nivel protokollit<\/a><\/noindex> lejon p\u00ebrdorimin e sigurt t\u00eb burimeve brenda rrjetit Yggdrasil \u2014 mund\u00ebsia e zhvillimit sulmit MITM<\/a><\/noindex> \u00ebsht\u00eb plot\u00ebsisht e p\u00ebrjashtuar.<\/p>\n

Situata ndryshon thelb\u00ebsisht n\u00ebse po qaseni n\u00eb burimet intra-rete Yggdrasil, jo direkt, por p\u00ebrmes nj\u00eb nyje nd\u00ebrmjet\u00ebse \u2014 pik\u00ebs s\u00eb qasjes t\u00eb rrjetit \u00abMedium\u00bb, e cila administrohet nga operatori i saj.<\/p>\n

Kush n\u00eb k\u00ebt\u00eb rast mund t\u00eb komprometoj\u00eb t\u00eb dh\u00ebnat q\u00eb po d\u00ebrgoni:<\/p>\n

    \n
  1. Operatori i pik\u00ebs s\u00eb qasjes<\/b>. S\u00eb bashku, \u00ebsht\u00eb e qart\u00eb se operatori aktual i pik\u00ebs s\u00eb qasjes t\u00eb rrjetit \u00abMedium\u00bb mund t\u00eb p\u00ebrgjoj\u00eb trafikun jo t\u00eb koduar q\u00eb kalon p\u00ebrmes pajisjeve t\u00eb tij.<\/li>\n
  2. Keqb\u00ebr\u00ebsi<\/b> (njeri nd\u00ebrmjet\u00ebs<\/a><\/noindex>). \u00abMedium\u00bb ka nj\u00eb problem t\u00eb ngjash\u00ebm me problemin e rrjetit Tor<\/a><\/noindex>, vet\u00ebm n\u00eb lidhje me nyjet hyr\u00ebse dhe nd\u00ebrmjet\u00ebse.<\/li>\n<\/ol>\n

    \nJa si duket kjo \u00e7\u00ebshtje<\/b>\"Gjith\u00e7ka
    \n
    \nZgjidhja<\/b>: p\u00ebr t\u00eb qasur sh\u00ebrbimet e uebit brenda rrjetit Yggdrasil, p\u00ebrdorni protokollin HTTPS (niveli 7     modeli OSI<\/a><\/noindex>). Problemi \u00ebsht\u00eb se p\u00ebr sh\u00ebrbimet e rrjetit Yggdrasil nuk \u00ebsht\u00eb e mundur t\u00eb l\u00ebshosh nj\u00eb certifikat\u00eb t\u00eb v\u00ebrtet\u00eb sigurie me mjete t\u00eb zakonshme, si\u00e7 jan\u00eb Let’s Encrypt<\/a><\/noindex>.<\/p>\n

    Prandaj kemi krijuar qendr\u00ebn ton\u00eb t\u00eb certifikimit \u2014 \u00abMedium Root CA\u00bb<\/a><\/noindex>. Shumica d\u00ebrrmuese e sh\u00ebrbimeve t\u00eb rrjetit \u00abMedium\u00bb jan\u00eb n\u00ebnshkruar me certifikat\u00ebn rr\u00ebnj\u00ebsore t\u00eb k\u00ebtij qendre certifikimi.<\/p>\n

    \"Gjith\u00e7ka
    \n
    \nMund\u00ebsia e komprometimit t\u00eb certifikat\u00ebs rr\u00ebnj\u00ebsore t\u00eb qendr\u00ebs s\u00eb certifikimit absolutisht \u00ebsht\u00eb marr\u00eb parasysh \u2014 por k\u00ebtu certifikata \u00ebsht\u00eb m\u00eb shum\u00eb e nevojshme p\u00ebr t\u00eb konfirmuar integritetin gjat\u00eb kalimit t\u00eb t\u00eb dh\u00ebnave dhe p\u00ebr t\u00eb p\u00ebrjashtuar mund\u00ebsin\u00eb e sulmeve MITM.<\/p>\n

    Sh\u00ebrbimet e rrjetit \u00abMedium\u00bb nga operator\u00eb t\u00eb ndrysh\u00ebm kan\u00eb certifikata t\u00eb ndryshme sigurie, t\u00eb cilat jan\u00eb n\u00ebnshkruar n\u00eb nj\u00eb m\u00ebnyr\u00eb ose tjet\u00ebr nga nj\u00eb qend\u00ebr rr\u00ebnj\u00ebsore e certifikimit. Megjithat\u00eb, operator\u00ebt e qendr\u00ebs rr\u00ebnj\u00ebsore t\u00eb certifikimit nuk kan\u00eb mund\u00ebsi t\u00eb monitorojn\u00eb trafikun e enkriptuar t\u00eb sh\u00ebrbimeve p\u00ebr t\u00eb cilat ata kan\u00eb n\u00ebnshkruar certifikata sigurie (shih. \u00ab\u00c7far\u00eb \u00ebsht\u00eb CSR?\u00bb<\/a><\/noindex>).<\/p>\n

    Ata q\u00eb jan\u00eb t\u00eb shqet\u00ebsuar p\u00ebr sigurin\u00eb e tyre mund t\u00eb p\u00ebrdorin si nj\u00eb mbrojtje shtes\u00eb mjete t\u00eb tilla si PGP<\/a><\/noindex> dhe projektet e ngjashme<\/a><\/noindex>.<\/p>\n

    Aktualisht, infrastruktura e \u00e7el\u00ebsit publik t\u00eb rrjetit \u00abMedium\u00bb ka mund\u00ebsin\u00eb p\u00ebr t\u00eb verifikuar statusin e certifikat\u00ebs n\u00ebp\u00ebrmjet protokollit OCSP<\/a><\/noindex> ose n\u00ebp\u00ebrmjet p\u00ebrdorimit t\u00eb CRL<\/a><\/noindex>.<\/p>\n

    A ka rrjeti \u00abMedium\u00bb nj\u00eb sistem t\u00eb tij t\u00eb emrave t\u00eb domenit?<\/h2>\n

    \nN\u00eb fillim, rrjeti \u00abMedium\u00bb nuk kishte nj\u00eb server t\u00eb centralizuar t\u00eb emrave t\u00eb domenit, i cili mund t\u2018i lejonte pjes\u00ebmarr\u00ebsve t\u00eb rrjetit t\u00eb qasen n\u00eb burimet m\u00eb t\u00eb vizituara n\u00eb nj\u00eb form\u00eb m\u00eb t\u00eb thjesht\u00eb dhe m\u00eb t\u00eb njohur (n\u00eb krahasim me p\u00ebrdorimin e adres\u00ebs IPv6 t\u00eb nj\u00eb serveri t\u00eb caktuar).<\/p>\n

    Ne n\u00eb \u00abMedium\u00bb vendos\u00ebm t\u00eb jepnim jet\u00eb n\u00eb k\u00ebt\u00eb ide \u2014 dhe duke u hedhur pak p\u00ebrpara, \u2014 na doli!<\/p>\n

    \"Gjith\u00e7ka
    \n
    \nRegjistrimi i emrave t\u00eb domenit ndodh n\u00eb m\u00ebnyr\u00eb automatike - mjafton t\u00eb \u0443\u043a\u0430\u0437\u0438\u0442\u0435 vet\u00ebm adres\u00ebn IPv6 t\u00eb serverit n\u00eb t\u00eb cilin \u00ebsht\u00eb aktivizuar sh\u00ebrbimi. Robot do t\u00eb verifikoj\u00eb n\u00ebse kjo adres\u00eb i p\u00ebrket v\u00ebrtet personit q\u00eb po mundohet t\u00eb regjistroj\u00eb emrin e domenit.<\/p>\n

    N\u00eb rast suksesi, emri i domenit do t\u00eb shtohet n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb emrave t\u00eb domenit brenda 24 or\u00ebve. N\u00eb rast se serveri nuk i p\u00ebrgjigjet robotit dhe \u00ebsht\u00eb i pamundur p\u00ebr m\u00eb shum\u00eb se 72 or\u00eb, emri i domenit do t\u00eb lirohet.<\/p>\n

    Nuk do t\u00eb jet\u00eb e mundur t\u00eb regjistrohet emri i domenit n\u00eb ::1<\/b>\"Gjith\u00e7ka
    \n
    \nNj\u00eb kopje e plot\u00eb e list\u00ebs s\u00eb emrave t\u00eb regjistruar t\u00eb domenit ndodhet n\u00eb     repozytorin n\u00eb GitHub<\/a><\/noindex>. Kjo lejon t\u00eb sigurohet transparenc\u00eb maksimale n\u00eb lidhje me gjendjen aktuale t\u00eb emrave t\u00eb domenit dhe t\u00eb p\u00ebrjashtoj\u00eb bllokimin e tyre bazuar n\u00eb mund\u00ebsin\u00eb e shfaqjes s\u00eb nj\u00eb situate ambivalente, e cila vjen nga veprimi i faktor\u00ebve njer\u00ebzor\u00eb. Papritur, ndonj\u00eb gj\u00eb nuk i p\u00eblqen operatorit DNS<\/i>.<\/p>\n

    \"Gjith\u00e7ka
    \n<\/p>\n

    Dhe si q\u00ebndron me l\u00ebshimin e certifikatave SSL p\u00ebr sh\u00ebrbimet n\u00eb ueb?<\/h2>\n

    \nKrijimi i serverit t\u00eb emrave t\u00eb domenit gjithashtu u p\u00ebrcaktua nga nevoja p\u00ebr t\u00eb zhvilluar infrastruktur\u00ebn e \u00e7elq\u00ebve t\u00eb hapura - p\u00ebr t\u00eb l\u00ebshuar nj\u00eb certifikat\u00eb, \u00ebsht\u00eb e nevojshme q\u00eb ajo t\u00eb ket\u00eb fush\u00ebn CN (Emri i zakonsh\u00ebm), e cila \u00ebsht\u00eb emri i domenit p\u00ebr t\u00eb cilin l\u00ebshohet certifikata.<\/p>\n

    Procedura e l\u00ebshimit t\u00eb certifikatave t\u00eb n\u00ebnshkruara nga nj\u00eb qend\u00ebr e certifikimit ndodh n\u00eb m\u00ebnyr\u00eb automatike - nj\u00eb robot kontrollon sakt\u00ebsin\u00eb dhe v\u00ebrtet\u00ebsin\u00eb e t\u00eb dh\u00ebnave t\u00eb futura nga p\u00ebrdoruesi. N\u00eb rast suksesi, p\u00ebrdoruesi i fundit d\u00ebrgohet nj\u00eb email q\u00eb p\u00ebrmban certifikat\u00ebn e n\u00ebnshkruar.<\/p>\n

    Ja k\u00ebshtu<\/b>\"Gjith\u00e7ka
    \n
    \n\"Gjith\u00e7ka
    \n<\/p>\n

    Si ta konfiguroni si\u00e7 duhet ambientin p\u00ebr t\u00eb p\u00ebrdorur burimet e rrjetit \"Medium\"?<\/h2>\n

    \nVe\u00e7orit\u00eb e procesit t\u00eb konfigurimit t\u00eb ambientit t\u00eb pun\u00ebs varen nga sistemi operativ q\u00eb po p\u00ebrdorni.<\/p>\n

    Zgjidhni me men\u00e7uri (imazhi \u00ebsht\u00eb i klikuar):<\/p>\n

    \"Gjith\u00e7ka<\/a><\/noindex>\"Gjith\u00e7ka<\/a><\/noindex><\/p>\n

    Interneti i lir\u00eb n\u00eb Rusi fillon me ju<\/h2>\n

    \nJu mund t\u00eb jepni q\u00eb sot nj\u00eb ndihm\u00eb t\u00eb vlefshme p\u00ebr zhvillimin e internetit t\u00eb lir\u00eb n\u00eb Rusi. Ne kemi p\u00ebrgatitur nj\u00eb list\u00eb t\u00eb plot\u00eb se si sakt\u00ebsisht mund ta ndihmoni rrjetin:<\/p>\n

    \u00a0\u00a0\u00a0\u00a0\"Gjith\u00e7ka\u00a0\u00a0\u00a0Tregojuni miqve dhe koleg\u00ebve tuaj p\u00ebr rrjetin \u00abMedium\u00bb
    \n\u00a0\u00a0\u00a0\u00a0\"Gjith\u00e7ka\u00a0\u00a0\u00a0Ndani     lidhjen<\/a><\/noindex> e k\u00ebtij artikulli n\u00eb rrjetet sociale ose n\u00eb blogun tuaj personal
    \n\u00a0\u00a0\u00a0\u00a0\"Gjith\u00e7ka\u00a0\u00a0\u00a0Merrni pjes\u00eb n\u00eb diskutimin e \u00e7\u00ebshtjeve teknike t\u00eb rrjetit \u00abMedium\u00bb     n\u00eb GitHub<\/a><\/noindex>
    \n\u00a0\u00a0\u00a0\u00a0\"Gjith\u00e7ka\u00a0\u00a0\u00a0Krijoni sh\u00ebrbimin tuaj n\u00eb internet n\u00eb rrjetin Yggdrasil dhe shtoni at\u00eb n\u00eb     DNS-n\u00eb e rrjetit \"Medium\"<\/a><\/noindex>
    \n\u00a0\u00a0\u00a0\u00a0\"Gjith\u00e7ka\u00a0\u00a0\u00a0Ngrini     pik\u00ebn tuaj t\u00eb aksesit<\/a><\/noindex> n\u00eb rrjetin \u00abMedium\u00bb<\/p>\n

    \nLexoni gjithashtu:<\/p>\n

    E dashur, po e vrasim internetin<\/a><\/noindex>
    \n     Furnizuesi i internetit t\u00eb decentralizuar \"Medium\" - tri muaj m\u00eb von\u00eb<\/a><\/noindex>
    \n    \u00abMedium\u00bb - ofruesi i par\u00eb decentralizuar i internetit n\u00eb Rusi<\/a><\/noindex><\/p>\n

    Jemi n\u00eb Telegram: @medium_isp<\/a><\/noindex><\/p>\n

    Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. Hyni<\/a><\/noindex>, ju lutem.<\/p>\n

    Votim alternativ: p\u00ebr ne \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb dim\u00eb mendimin e atyre q\u00eb nuk kan\u00eb nj\u00eb llogari t\u00eb plot\u00eb n\u00eb Habr<\/h2>\n