{"id":37106,"date":"2019-10-31T22:15:46","date_gmt":"2019-10-31T19:15:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vsyo-chto-vy-hoteli-znat-o-detsentralizovannom-internet-provajdere-medium-no-boyalis-sprosit\/"},"modified":"2019-10-31T22:15:46","modified_gmt":"2019-10-31T19:15:46","slug":"vsyo-chto-vy-hoteli-znat-o-detsentralizovannom-internet-provajdere-medium-no-boyalis-sprosit","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vsyo-chto-vy-hoteli-znat-o-detsentralizovannom-internet-provajdere-medium-no-boyalis-sprosit","title":{"rendered":"T\u00eb gjitha q\u00eb donit t\u00eb dinit p\u00ebr ofruesin e internetit t\u00eb decentralizuar \"Medium\", por frik\u00ebsoheshit t\u00eb pyesni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mir\u00ebdita, Komunitet!<\/p>\n

Un\u00eb quhem Yanislav Basyuk<\/b>. Un\u00eb jam koordinator i organizat\u00ebs s\u00eb shoq\u00ebris\u00eb \"Medium\".<\/p>\n

N\u00eb k\u00ebt\u00eb artikull kam p\u00ebrmbledhur informacionin m\u00eb t\u00eb plot\u00eb rreth asaj q\u00eb \u00ebsht\u00eb ky ofrues i internetit t\u00eb decentralizuar q\u00eb vepron n\u00eb territorin e Federat\u00ebs Ruse, oferuesi i internetit t\u00eb decentralizuar<\/a><\/noindex>.<\/p>\n

Un\u00eb do t\u00eb flas p\u00ebr:<\/p>\n

\u00a0\u00a0\u00a0\u00a0\"T\u00eb\u00a0\u00a0\u00a0\u00c7far\u00eb p\u00ebrfaq\u00ebson \"Medium\"
\n\u00a0\u00a0\u00a0\u00a0\"T\u00eb\u00a0\u00a0\u00a0\u00c7far\u00eb \u00ebsht\u00eb Yggdrasil dhe pse \"Medium\" e p\u00ebrdor at\u00eb si transportin kryesor?
\n\u00a0\u00a0\u00a0\u00a0\"T\u00eb\u00a0\u00a0\u00a0Si t\u00eb konfigurosh mjedisin p\u00ebr t\u00eb shfryt\u00ebzuar burimet e rrjetit \"Medium\"<\/p>\n

\"T\u00eb
\n<\/a><\/noindex><\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb \u00abMedium\u00bb?<\/h2>\n

\nMedium<\/b> (angl. Medium<\/i> \u2014 \"nd\u00ebrmjet\u00ebs\", slogani origjinal \u2014 Don’t ask for your privacy. Take it back<\/i>; gjithashtu n\u00eb anglisht fjala medium<\/i> do t\u00eb thot\u00eb \"nd\u00ebrmjet\u00ebs\") \u2014 ofruesi i decentralizuar i internetit n\u00eb Rusi, i cili ofron sh\u00ebrbime aksesit n\u00eb rrjet Yggdrasil<\/a><\/noindex> n\u00eb m\u00ebnyr\u00eb falas.<\/p>\n

Kur, ku dhe p\u00ebrse u krijua \"Medium\"?<\/h2>\n

\nFillimisht projekti u mendua si rrjet Mesh<\/a><\/noindex> n\u00eb n\u00eb qarkun qytetar Kolomensky<\/a><\/noindex>.<\/p>\n

\"Medium\" u themelua n\u00eb prill 2019 n\u00eb kuad\u00ebr t\u00eb krijimit t\u00eb nj\u00eb ambienti telekomunikativ t\u00eb pavarur p\u00ebrmes ofrimit t\u00eb aksesit p\u00ebr p\u00ebrdoruesit e fundit n\u00eb burimet e rrjetit Yggdrasil p\u00ebrmes p\u00ebrdorimit t\u00eb teknologjis\u00eb s\u00eb transmetimit pa tela Wi-Fi.<\/p>\n

Ku mund t\u00eb gjej nj\u00eb p\u00ebrmbledhje t\u00eb plot\u00eb t\u00eb t\u00eb gjitha pikave t\u00eb rrjetit?<\/b>Ju mund ta gjeni at\u00eb n\u00eb repo n\u00eb GitHub<\/a><\/noindex>.<\/p>\n

\"T\u00eb
\n<\/p>\n

\u00c7far\u00eb \u00ebsht\u00eb Yggdrasil dhe pse \"Medium\" e p\u00ebrdor at\u00eb si transportin kryesor?<\/h2>\n

\nYggdrasil<\/a><\/noindex> \u2014 \u00ebsht\u00eb nj\u00eb rrjet q\u00eb organizohet vet\u00eb, rrjet Mesh<\/a><\/noindex>, i cili ka mund\u00ebsin\u00eb e lidhjes s\u00eb routerave si n\u00eb modalitetin overlay (p\u00ebrmbi rrjetin e Internetit), ashtu edhe direkt me nj\u00ebri-tjetrin p\u00ebrmes lidhjeve me kabllo ose pa kabllo.<\/p>\n

Yggdrasil \u00ebsht\u00eb vazhdim\u00ebsi e projektit CjDNS<\/a><\/noindex>. Dallimi kryesor midis Yggdrasil dhe CjDNS \u00ebsht\u00eb p\u00ebrdorimi i protokollit STP<\/a><\/noindex> (protokolli i pem\u00ebs s\u00eb shtrir\u00eb).<\/p>\n

\"T\u00eb
\n
\nSi parazgjedhje, t\u00eb gjith\u00eb routerat e rrjetit p\u00ebrdorin kriptimin end-to-end<\/a><\/noindex> p\u00ebr transferimin e t\u00eb dh\u00ebnave midis pjes\u00ebmarr\u00ebsve t\u00eb tjer\u00eb.<\/p>\n

Zgjedhja e rrjetit Yggdrasil si transportin kryesor u b\u00eb p\u00ebr shkak t\u00eb nevoj\u00ebs p\u00ebr t\u00eb rritur shpejt\u00ebsin\u00eb e lidhjes (deri n\u00eb gusht 2019 \"Medium\" p\u00ebrdorte I2P<\/a><\/noindex>).<\/p>\n

Kalimi n\u00eb Yggdrasil gjithashtu i dha pjes\u00ebmarr\u00ebsve t\u00eb projektit mund\u00ebsin\u00eb p\u00ebr t\u00eb filluar zhvillimin e rrjetit Mesh me topologjin\u00eb Full-Mesh. Kjo organizat\u00eb e rrjetit \u00ebsht\u00eb antidoti m\u00eb efektiv p\u00ebr censurimin.<\/p>\n

\"T\u00eb
\n<\/p>\n

Yggdrasil parazgjedhje p\u00ebrdor kriptimin end-to-end. Pse sh\u00ebrbimet e rrjetit \"Medium\" p\u00ebrdorin HTTPS?<\/h2>\n

\nNuk ka ndonj\u00eb nevoj\u00eb p\u00ebr t\u00eb p\u00ebrdorur protokollin HTTPS p\u00ebr lidhjen me sh\u00ebrbimet web n\u00eb rrjetin Yggdrasil, n\u00ebse ju lidheni me to p\u00ebrmes nj\u00eb routeri q\u00eb punon lokal n\u00eb rrjetin Yggdrasil.<\/p>\n

V\u00ebrtet: transporti Yggdrasil n\u00eb nivelin protokolli<\/a><\/noindex> lejon p\u00ebrdorimin e sigurt t\u00eb burimeve brenda rrjetit Yggdrasil \u2014 mund\u00ebsia e realizimit t\u00eb sulm MITM<\/a><\/noindex> \u00ebsht\u00eb plot\u00ebsisht e p\u00ebrjashtuar.<\/p>\n

Situata ndryshon n\u00eb m\u00ebnyr\u00eb thelb\u00ebsore n\u00ebse ju qaseni burimeve brenda rrjetit Yggdrasil jo direkt, por p\u00ebrmes nj\u00eb nyje nd\u00ebrmjet\u00ebse \u2014 pik\u00ebs s\u00eb qasjes n\u00eb rrjetin \"Medium\", e cila administrohet nga operatori i saj.<\/p>\n

Kush n\u00eb k\u00ebt\u00eb rast mund t\u00eb kompromentoj\u00eb t\u00eb dh\u00ebnat q\u00eb ju d\u00ebrgoni:<\/p>\n

    \n
  1. Operatori i pik\u00ebs s\u00eb qasjes<\/b>. \u00cbsht\u00eb e qart\u00eb se operatori aktual i pik\u00ebs s\u00eb qasjes n\u00eb rrjetin \"Medium\" mund t\u00eb p\u00ebrgjoj\u00eb trafikun e paqart\u00eb q\u00eb kalon p\u00ebrmes pajisjeve t\u00eb tij.<\/li>\n
  2. K\u00ebrc\u00ebnuesi<\/b> (njeri n\u00eb mes<\/a><\/noindex>). \"Medium\" ka nj\u00eb problem t\u00eb ngjash\u00ebm me problemin e rrjetit Tor<\/a><\/noindex>, vet\u00ebm n\u00eb lidhje me nyjet hyr\u00ebse dhe nd\u00ebrmjet\u00ebse.<\/li>\n<\/ol>\n

    \nK\u00ebshtu duket<\/b>\"T\u00eb
    \n
    \nZgjidhja<\/b>: p\u00ebr aksesin n\u00eb sh\u00ebrbimet web brenda rrjetit Yggdrasil p\u00ebrdorni protokollin HTTPS (niveli 7     i modelit OSI<\/a><\/noindex>). Problemi \u00ebsht\u00eb se p\u00ebr sh\u00ebrbimet e rrjetit Yggdrasil \u00ebsht\u00eb e pamundur t\u00eb l\u00ebshosh nj\u00eb certifikat t\u00eb v\u00ebrtet\u00eb sigurie me mjete t\u00eb zakonshme, si\u00e7 jan\u00eb Let’s Encrypt<\/a><\/noindex>.<\/p>\n

    Prandaj ne krijuam qendr\u00ebn ton\u00eb t\u00eb certifikimit \u2014 \"Medium Root CA\".<\/a><\/noindex>Shumica d\u00ebrrmuese e sh\u00ebrbimeve t\u00eb rrjetit \"Medium\" jan\u00eb n\u00ebnshkruar nga certifikati i rr\u00ebnj\u00ebs s\u00eb siguris\u00eb t\u00eb k\u00ebsaj qendre t\u00eb certifikimit.<\/p>\n

    \"T\u00eb
    \n
    \nMund\u00ebsia e kompromentimit t\u00eb certifikat\u00ebs rr\u00ebnj\u00eb t\u00eb qendr\u00ebs s\u00eb certifikimit, sigurisht, \u00ebsht\u00eb marr\u00eb parasysh \u2014 por k\u00ebtu certifikata \u00ebsht\u00eb m\u00eb shum\u00eb e nevojshme p\u00ebr t\u00eb konfirmuar integritetin gjat\u00eb transferimit t\u00eb t\u00eb dh\u00ebnave dhe p\u00ebr t\u00eb p\u00ebrjashtuar mund\u00ebsin\u00eb e sulmeve MITM.<\/p>\n

    Sh\u00ebrbimet e rrjetit \"Medium\" nga operator\u00eb t\u00eb ndrysh\u00ebm kan\u00eb certifikata t\u00eb ndryshme sigurie, ndonj\u00ebher\u00eb t\u00eb n\u00ebnshkruara nga qendra e certifikimit t\u00eb rr\u00ebnj\u00ebs. Megjithat\u00eb, operator\u00ebt e qendr\u00ebs s\u00eb certifikimit t\u00eb rr\u00ebnj\u00ebs nuk kan\u00eb mund\u00ebsi t\u00eb p\u00ebrgjojn\u00eb trafikun e enkriptuar t\u00eb sh\u00ebrbimeve p\u00ebr t\u00eb cilat ata kan\u00eb n\u00ebnshkruar certifikata sigurie (shih \"\u00c7far\u00eb \u00ebsht\u00eb CSR?\"<\/a><\/noindex>).<\/p>\n

    Ata q\u00eb mendojn\u00eb shum\u00eb p\u00ebr sigurin\u00eb e tyre mund t\u00eb p\u00ebrdorin si mbrojtje t\u00eb shtuar mjete si PGP<\/a><\/noindex> dhe t\u00eb ngjash\u00ebm<\/a><\/noindex>.<\/p>\n

    Aktualisht infrastruktura e \u00e7el\u00ebsit publik t\u00eb rrjetit \"Medium\" ka mund\u00ebsin\u00eb p\u00ebr t\u00eb verifikuar statusin e certifikat\u00ebs p\u00ebrmes protokollit OCSP<\/a><\/noindex> apo p\u00ebrmes p\u00ebrdorimit t\u00eb CRL<\/a><\/noindex>.<\/p>\n

    A ka nj\u00eb sistem t\u00eb emrave t\u00eb domenit n\u00eb \"Medium\"?<\/h2>\n

    \nFillimisht, rrjeti \"Medium\" nuk kishte nj\u00eb server t\u00eb centralizuar t\u00eb emrave t\u00eb domeneve q\u00eb t\u00eb lejonte pjes\u00ebmarr\u00ebsit e rrjetit t\u00eb qasjejn\u00eb burimet m\u00eb t\u00eb vizituara n\u00eb nj\u00eb form\u00eb m\u00eb t\u00eb thjesht\u00eb dhe t\u00eb njohur (n\u00eb krahasim me p\u00ebrdorimin e adres\u00ebs IPv6 t\u00eb nj\u00eb serveri specifik).<\/p>\n

    Ne n\u00eb \"Medium\" vendos\u00ebm t\u00eb japim jet\u00eb k\u00ebsaj ideje \u2014 dhe, duke u futur paksa p\u00ebrpara, \u2014 arrit\u00ebm ta realizojm\u00eb!<\/p>\n

    \"T\u00eb
    \n
    \nRegjistrimi i emrave t\u00eb domeneve ndodh n\u00eb m\u00ebnyr\u00eb automatike \u2014 mjafton t\u00eb specifikoni adres\u00ebn IPv6 t\u00eb serverit, ku \u00ebsht\u00eb aktiv sh\u00ebrbimi. Nj\u00eb robot do t\u00eb kontrolloj\u00eb n\u00ebse kjo adres\u00eb i p\u00ebrket v\u00ebrtet personit q\u00eb po p\u00ebrpiqet t\u00eb regjistroj\u00eb emrin e domenit.<\/p>\n

    N\u00eb rast suksesi, emri i domenit do t\u00eb shtohet n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb emrave t\u00eb domeneve brenda 24 or\u00ebve. N\u00ebse serveri ndalon s\u00eb p\u00ebrgjiguri robotit dhe b\u00ebhet i paqassh\u00ebm p\u00ebr m\u00eb shum\u00eb se 72 or\u00eb, emri i domenit do t\u00eb lirohet.<\/p>\n

    Nuk do t\u00eb mund t\u00eb regjistroni nj\u00eb em\u00ebr domenu mbi ::1<\/b>\"T\u00eb
    \n
    \nNj\u00eb kopje e plot\u00eb e list\u00ebs s\u00eb emrave t\u00eb domeneve t\u00eb regjistruara ndodhet n\u00eb     repo n\u00eb GitHub<\/a><\/noindex>. Kjo siguron transparenc\u00ebn maksimale n\u00eb lidhje me gjendjen aktuale t\u00eb emrave t\u00eb domeneve dhe p\u00ebrjashton bllokimin e tyre p\u00ebr shkak t\u00eb mund\u00ebsis\u00eb s\u00eb shfaqjes s\u00eb situatave ambivalente t\u00eb shkaktuara nga faktori njer\u00ebzor. N\u00ebse ndonj\u00eb gj\u00eb nuk i p\u00eblqen operuesit t\u00eb DNS<\/i>.<\/p>\n

    \"T\u00eb
    \n<\/p>\n

    Dhe \u00e7far\u00eb \u00ebsht\u00eb e v\u00ebrteta p\u00ebr l\u00ebshimin e certifikatave SSL p\u00ebr sh\u00ebrbimet web?<\/h2>\n

    \nKrijimi i serverit t\u00eb emrave t\u00eb domeneve ishte gjithashtu i nevojsh\u00ebm p\u00ebr t\u00eb vendosur infrastruktur\u00ebn e \u00e7el\u00ebsave t\u00eb hapur \u2014 p\u00ebr t\u00eb l\u00ebshuar nj\u00eb certifikat\u00eb, nevojitet nj\u00eb fush\u00eb CN (Emri i P\u00ebrbashk\u00ebt), e cila \u00ebsht\u00eb emri i domenit p\u00ebr t\u00eb cilin l\u00ebshohet certifikata.<\/p>\n

    Procedura e l\u00ebshimit t\u00eb certifikatave t\u00eb n\u00ebnshkruara nga q\u00ebndra e certifikimit ndodh n\u00eb m\u00ebnyr\u00eb automatike \u2014 nj\u00eb robot kontrollon sakt\u00ebsin\u00eb dhe autentikimin e t\u00eb dh\u00ebnave t\u00eb futur nga p\u00ebrdoruesi. N\u00eb rast suksesi, p\u00ebrdoruesi final merr nj\u00eb email q\u00eb p\u00ebrmban certifikat\u00ebn e n\u00ebnshkruar.<\/p>\n

    Ja \u00e7far\u00eb<\/b>\"T\u00eb
    \n
    \n\"T\u00eb
    \n<\/p>\n

    Si t\u00eb konfiguroni sakt\u00eb ambientin p\u00ebr t\u00eb p\u00ebrdorur burimet e rrjetit \"Medium\"?<\/h2>\n

    \nVe\u00e7orit\u00eb e procesit t\u00eb konfigurimit t\u00eb ambientit t\u00eb pun\u00ebs varen nga sistemi operativ q\u00eb po p\u00ebrdorni.<\/p>\n

    Zgjidhni me men\u00e7uri (imazhi \u00ebsht\u00eb i klikuesh\u00ebm):<\/p>\n

    \"T\u00eb<\/a><\/noindex>\"T\u00eb<\/a><\/noindex><\/p>\n

    Internet i lir\u00eb n\u00eb Rusi fillon me ju<\/h2>\n

    \nJu mund t\u00eb ndihmoni procesin e krijimit t\u00eb nj\u00eb Interneti t\u00eb lir\u00eb n\u00eb Rusi q\u00eb sot. Ne kemi p\u00ebrgatitur nj\u00eb list\u00eb t\u00eb plot\u00eb t\u00eb gj\u00ebrave me t\u00eb cilat mund t\u00eb ndihmoni rrjetin:<\/p>\n

    \u00a0\u00a0\u00a0\u00a0\"T\u00eb\u00a0\u00a0\u00a0Flisni p\u00ebr rrjetin \"Medium\" me miqt\u00eb dhe koleg\u00ebt tuaj
    \n\u00a0\u00a0\u00a0\u00a0\"T\u00eb\u00a0\u00a0\u00a0Ndani     linkun<\/a><\/noindex> n\u00eb k\u00ebt\u00eb artikel n\u00eb rrjetet sociale ose blogun tuaj personal
    \n\u00a0\u00a0\u00a0\u00a0\"T\u00eb\u00a0\u00a0\u00a0Merrni pjes\u00eb n\u00eb diskutimin e \u00e7\u00ebshtjeve teknike t\u00eb rrjetit \"Medium\"     n\u00eb GitHub<\/a><\/noindex>
    \n\u00a0\u00a0\u00a0\u00a0\"T\u00eb\u00a0\u00a0\u00a0Krijoni sh\u00ebrbimin tuaj web n\u00eb rrjetin Yggdrasil dhe shtojeni n\u00eb     DNS e rrjetit \"Medium\"<\/a><\/noindex>
    \n\u00a0\u00a0\u00a0\u00a0\"T\u00eb\u00a0\u00a0\u00a0Krijoni     pik\u00ebn tuaj t\u00eb aksesit<\/a><\/noindex> n\u00eb rrjetin \"Medium\"<\/p>\n

    \nLexoni gjithashtu:<\/p>\n

    E dashur, ne po vrasim Internetin<\/a><\/noindex>
    \n     Ofertuesi i decentralizuar i internetit \"Medium\" \u2014 tri muaj pas<\/a><\/noindex>
    \n    \u00abMedium\u00bb \u2014 ofruesi i par\u00eb i decentralizuar i internetit n\u00eb Rusi<\/a><\/noindex><\/p>\n

    Ne jemi n\u00eb Telegram: @medium_isp<\/a><\/noindex><\/p>\n

    Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. Hyni<\/a><\/noindex>, ju lutemi.<\/p>\n

    Votimi alternativ: na intereson mendimi i atyre q\u00eb nuk kan\u00eb nj\u00eb llogari t\u00eb plot\u00eb n\u00eb Habr<\/h2>\n