🥇Konke obufuna ukukwazi mayelana nomhlinzeki we-inthanethi omisiwe “Omaphakathi”, kodwa wesaba ukukubuza

Sawubona, Mphakathi!

Igama lami ngingu Yanislav Basyuk. Ngingumxhumanisi wenhlangano yomphakathi "Medium".

Kulesi sihloko ngizame ukuqoqa ulwazi olunzulu mayelana nokuthi lokhu kusebenza endaweni yeRussian Federation. umhlinzeki we-inthanethi omisiwe.

Ngizothi:

       Iyini iMedium?
       Iyini i-Yggdrasil futhi kungani i-Medium iyisebenzisa njengokuthutha kwayo okuyinhloko
       Indlela yokulungisa kahle imvelo ukuze usebenzise izinsiza zenethiwekhi Ephakathi

Iyini iMedium?

Medium (eng. Medium - "umlamuli", isiqubulo sokuqala - Ungabuzi ubumfihlo bakho. Yibuyisele; futhi ngesiNgisi igama naphakathi lisho “okumaphakathi”) - umhlinzeki we-inthanethi ohlukaniswe waseRussia ohlinzeka ngezinsizakalo zokufinyelela kunethiwekhi I-Yggdrasil Mahhala.

Yadalwa nini, kuphi futhi kungani i-Medium?

Ekuqaleni iphrojekthi yacatshangelwa njenge Inethiwekhi ye-Mesh в Isifunda sasedolobheni saseKolomna.

I-“Medium” yasungulwa ngo-April 2019 njengengxenye yokwakhiwa kwendawo yezokuxhumana ezimele ngokunikeza abasebenzisi bokugcina ukufinyelela kuzinsiza zenethiwekhi ye-Yggdrasil ngokusebenzisa ubuchwepheshe bokudluliswa kwedatha okungenantambo kwe-Wi-Fi.

Ngingalutholaphi uhlu oluphelele lwazo zonke izindawo zenethiwekhi?Ungayithola ku amakhosombe ku-GitHub.

Iyini i-Yggdrasil futhi kungani iMedium iyisebenzisa njengokuthutha kwayo okuyinhloko?

I-Yggdrasil iwukuzihlela Inethiwekhi ye-Mesh, enekhono lokuxhuma amarutha womabili kumodi yembondela (phezu kwe-inthanethi) futhi aqondane ngokuqondile ngoxhumo olunezintambo noma olwentambo.

I-Yggdrasil iwukuqhubeka kwephrojekthi CjDNS. Umehluko omkhulu phakathi kwe-Yggdrasil ne-CjDNS ukusetshenziswa kwephrothokholi STP (iphrothokholi yesihlahla enwebekayo).

Ngokuzenzakalelayo, wonke amarutha akunethiwekhi asebenzisa ukubethela ngasemaphethelweni ukudlulisa idatha phakathi kwabanye ababambi qhaza.

Ukukhethwa kwenethiwekhi ye-Yggdrasil njengezokuthutha eziyinhloko kwakungenxa yesidingo sokwandisa isivinini sokuxhuma (kuze kube ngu-August 2019, Medium esetshenzisiwe I2P).

Ukushintshela ku-Yggdrasil kuphinde kwanikeza abahlanganyeli bephrojekthi ithuba lokuqala ukusebenzisa inethiwekhi ye-Mesh nge-topology ye-Full-Mesh. Inhlangano enjalo yenethiwekhi iyikhambi elisebenza kahle kakhulu lokucwaninga.

I-Yggdrasil isebenzisa ukubethela ngasemaphethelweni ngokuzenzakalela. Kungani izinsiza zenethiwekhi Emaphakathi zisebenzisa i-HTTPS?

Asikho isidingo sokusebenzisa i-HTTPS ukuze uxhume kumasevisi ewebhu kunethiwekhi ye-Yggdrasil uma uxhuma kuwo ngomzila wenethiwekhi ye-Yggdrasil esebenza endaweni.

Ngempela: Ukuthutha kwe-Yggdrasil kusezingeni umthetho olandelwayo ikuvumela ukuthi usebenzise ngokuphephile izinsiza ngaphakathi kwenethiwekhi ye-Yggdrasil - ikhono lokuqhuba Ukuhlaselwa kwe-MITM kukhishwe ngokuphelele.

Isimo sishintsha kakhulu uma ufinyelela izinsiza ze-intranethi ze-Yggdarsil hhayi ngokuqondile, kodwa nge-node ephakathi nendawo - indawo yokufinyelela yenethiwekhi Emaphakathi, elawulwa u-opharetha wayo.

Kulesi simo, ubani ongafaka engozini idatha oyidluliselayo:

U-opharetha wephoyinti lokufinyelela. Kusobala ukuthi u-opharetha wamanje wendawo yokufinyelela yenethiwekhi Emaphakathi angalalela ithrafikhi engabhaliwe edlula ezintweni zayo.
isigebengu (indoda phakathi). Okumaphakathi kunenkinga efana ne Inkinga yenethiwekhi ye-Tor, kuphela ngokuphathelene namanodi okokufaka kanye namaphakathi.

Lokhu kubukeka kanjani

Isixazululo: ukuze ufinyelele izinsiza zewebhu ngaphakathi kwenethiwekhi ye-Yggdrasil, sebenzisa iphrothokholi ye-HTTPS (izinga lesi-7 Amamodeli we-OSI). Inkinga ukuthi akwenzeki ukukhipha isitifiketi sokuphepha sangempela samasevisi enethiwekhi ye-Yggdrasil ngezindlela ezivamile ezifana Masibhale.

Ngakho-ke, sasungula isikhungo sethu sokunikeza izitifiketi - "Medium Root CA". Iningi lezinsizakalo zenethiwekhi Emaphakathi zisayinwa yisitifiketi sokuphepha esiyizimpande salesi siphathimandla sesitifiketi.

Amathuba okuphazamisa isitifiketi sempande yesiphathimandla sesitifiketi, yiqiniso, kucatshangelwe - kodwa lapha isitifiketi sidingeka kakhulu ukuze kuqinisekiswe ubuqotho bokudluliswa kwedatha nokuqeda amathuba okuhlaselwa kwe-MITM.

Amasevisi enethiwekhi amaphakathi avela ku-opharetha abahlukene anezitifiketi zokuphepha ezihlukene, ngandlela thize ezisayinwe yiziphathimandla zokunikeza izitifiketi. Kodwa-ke, opharetha be-Root CA abakwazi ukulalela ithrafikhi ebethelwe kusukela kumasevisi abasayine kuwo izitifiketi zokuphepha (bona "Iyini i-CSR?").

Labo abakhathazeke ngokukhethekile ngokuphepha kwabo bangasebenzisa izindlela ezinjalo njengesivikelo esengeziwe, njenge I-PGP и ezifanayo.

Njengamanje, ingqalasizinda yokhiye womphakathi yenethiwekhi Emaphakathi inamandla okuhlola isimo sesitifiketi kusetshenziswa iphrothokholi I-OCSP noma ngokusebenzisa I-CRL.

Ingabe i-Medium inesistimu yayo yegama lesizinda?

Ekuqaleni, inethiwekhi Emaphakathi yayingenayo iseva yegama lesizinda emaphakathi eyayingavumela ababambiqhaza benethiwekhi ukuthi bafinyelele izinsiza ezivakashelwa kakhulu ngendlela elula nejwayeleke kakhudlwana (ngokuphambene nokusebenzisa ikheli le-IPv6 leseva ethile).

Thina eMedium sanquma ukuphefumula impilo kulo mbono - futhi, sibheka phambili kancane, siphumelele!

Ukubhaliswa kwegama lesizinda kwenzeka ngokuzenzakalelayo - udinga nje ukucacisa ikheli le-IPv6 leseva lapho isevisi isebenza khona. Irobhothi lizohlola ukuthi ingabe leli kheli elomuntu ozama ukubhalisa igama lesizinda.

Uma yimpumelelo, igama lesizinda niyozenezelelwa database igama lesizinda phakathi 24 amahora. Uma iseva iyeka ukuphendula irobhothi futhi ingatholakali amahora angaphezu kwangu-72, igama lesizinda lizokhishwa.

Ngeke kwenzeke ukubhalisa igama lesizinda ku-::1

Ikhophi yohlu oluphelele lwamagama esizinda esibhalisiwe iyatholakala ku amakhosombe ku-GitHub. Lokhu kusivumela ukuthi siqinisekise ukucaca okuphezulu mayelana nesimo samanje samagama wesizinda futhi sisuse ukuvinjelwa kwabo ngokusekelwe ekutheni kungenzeka kube nesimo esingaqondakali esivela ngenxa yesenzo sesici somuntu. Kuthiwani uma u-opharetha we-DNS engathandi okuthile?.

Kuthiwani ngokukhipha izitifiketi ze-SSL zezinsizakalo zewebhu?

Ukudalwa kweseva yegama lesizinda nakho kwakungenxa yesidingo sokuphakelwa kwengqalasizinda yokhiye womphakathi - ukuze kukhishwe isitifiketi, kufanele kube nenkambu ye-CN (Igama Elivamile), okuyigama lesizinda lapho isitifiketi sikhishelwa khona.

Inqubo yokukhipha izitifiketi ezisayinwe isiphathimandla sokunikeza izitifiketi izenzekela - irobhothi lihlola ukulunga nobuqiniso bedatha efakwe umsebenzisi. Uma kuphumelele, i-imeyili ithunyelwa kumsebenzisi wokugcina ehlanganisa nesitifiketi esisayiniwe.

Nakhu

Indlela yokumisa kahle imvelo ukuze usebenzise izinsiza zenethiwekhi ye-Medium?

Izici zenqubo yokusetha indawo yokusebenza zincike ohlelweni lokusebenza olusebenzisayo.

Khetha ngokuhlakanipha (isithombe siyachofozeka):

I-inthanethi yamahhala e-Russia iqala ngawe

Unganikeza lonke usizo olungenzeka ekusungulweni kwe-inthanethi yamahhala eRussia namuhla. Sihlanganise uhlu olubanzi lokuthi ungasiza kanjani inethiwekhi:

       Tshela abangani bakho nosebenza nabo mayelana nenethiwekhi ye-Medium
       Yabelana ngereferensi kulesi sihloko ezinkundleni zokuxhumana noma ibhulogi yomuntu siqu
       Bamba iqhaza engxoxweni yezinkinga zobuchwepheshe kunethiwekhi Ephakathi ku-GitHub
       Dala isevisi yakho yewebhu kunethiwekhi ye-Yggdrasil futhi uyengeze kuyo I-DNS yenethiwekhi Emaphakathi
       Phakamisa eyakho indawo yokungena kunethiwekhi ye-Medium

Funda futhi:

Sthandwa, sibulala i-inthanethi
Umhlinzeki we-inthanethi omisiwe "Medium" - ezinyangeni ezintathu kamuva
I-"Medium" ingumhlinzeki we-inthanethi wokuqala ohlukaniselwe izwe eRussia

Siku-Telegram: @medium_isp

Abasebenzisi ababhalisiwe kuphela abangabamba iqhaza kuhlolovo. Ngena ngemvume, wamukelekile.

Okunye ukuvota: kubalulekile ngathi ukuthi sazi umbono walabo abangenayo i-akhawunti ephelele ngo-Habré

Bangu-138 abasebenzisi abavotile. Abasebenzisi abangu-65 bagobile.

Source: www.habr.com

Konke obufuna ukukwazi mayelana nomhlinzeki we-inthanethi ohlukaniselwe i-Medium, kodwa wesaba ukukubuza