Cikakken sirrin gaba (PFS) ya bayyana

Perfect forward secrecy (PFS) sigar tsaro ce da ake amfani da ita a cikin tsarin bayanan sirri (misali. VPNhaɗi) don kare bayanai daga lalacewa, ko da an karɓi maɓallan ɓoyewa ko wani ɓangare na uku mara izini.

PFS samu ta hanyar canza maɓallan ɓoyewa akai-akai da ake amfani da su a cikin ɓoyayyen. Ta wannan hanyar, ƙayyadaddun adadin bayanai ne kawai ke fallasa idan wani ɓangare na uku mara izini ya sami maɓallan ɓoyewa.

Perfect forward secrecy yana ƙara aminci VPN-haɗi

Daya daga cikin mafi yawan amfani da perfect forward secrecy kun kasance VPN- haɗi (Virtual Private Network). VPNhaɗin kai yana bawa masu amfani damar kafa amintacciyar hanyar haɗi, rufaffen haɗi zuwa wata hanyar sadarwa ta Intanet.

Wannan na iya zama da amfani don tabbatar da cewa ba za a iya katse bayanai yayin da ake watsawa ba, ko don ba wa masu amfani damar shiga hanyoyin sadarwar da ba za a iya samun su ba.

Lokacin a VPNan kafa haɗin kai, an samar da maɓallan ɓoyewa guda biyu: maɓallin jama'a da maɓalli na sirri. Ana amfani da maɓallan jama'a don ɓoye bayanan da aka aika ta Intanet, yayin da ake amfani da maɓallan sirri don yanke bayanan lokacin da aka karɓa. Ana musayar waɗannan maɓallan tsakanin VPN- abokin ciniki kuma VPNuwar garken, kuma ana amfani da su don kafa amintaccen, rufaffen haɗi tsakanin su biyun.

PFS yana aiki ta hanyar canza maɓallan da ake amfani da su don ɓoye bayananku akai-akai. Maimakon amfani da maɓalli ɗaya don ɓoye duk bayanan da aka wuce VPNhaɗi, sabon maɓalli na wucin gadi an ƙirƙira don kowane mutum canja wurin bayanai. Lokacin da aka aika da bayanai, ana rufaffen su da wannan maɓalli na wucin gadi, sannan mai karɓa zai iya yanke shi da maɓalli iri ɗaya.

Ta wannan hanyar, wani ɓangare na uku mara izini wanda ya sami maɓallan ɓoyewa zai iya samun dama ga hanyar canja wurin bayanan mutum ɗaya kawai. Sauran bayanan har yanzu suna da aminci kamar yadda aka rufaffen su da wasu maɓallai. makullai.

VPN-Haɗuwa galibi suna amfani da maɓallan ephemeral don PFS

Akwai dabaru daban-daban da za a iya amfani da su don cimma wannan perfect forward secrecy i VPN-haɗi. Ɗaya daga cikin dabarun da aka fi sani shine amfani ephemeral makullin, waɗanda maɓallan wucin gadi ne da aka samar don kowane zama.

Lokacin a VPNan kafa haɗin kai, an samar da sabon maɓallin ephemeral, wanda ake amfani da shi don ɓoye duk bayanan da aka aika akan haɗin. Lokacin da zaman ya ƙare, maɓallin zai daina aiki kuma sabon maɓalli yana samuwa akan haɗi na gaba.

Kara karantawa game da PFS i ExpressVPNs blog post.