Уровень 0 · материалов: 3
В кластер входят документы, описывающие технические методы инкапсуляции и перенаправления сетевого трафика для защиты данных и обхода фильтров, но не входят общие концепции отделения шифрования от среды передачи.
Общие признаки: шифрование трафика, SSL/TLS туннелирование, обход сетевых ограничений, обеспечение конфиденциальности данных
Группа выше: Прокси-серверы и туннелирование
Смысл: The main idea is that standard SSL/TLS (HTTPS) encryption can be compromised by certificate spoofing in corporate or malicious environments, and users should employ SSH tunneling or VPNs to achieve genuine end-to-end traffic privacy.
While SSL/TLS protects data, it can be bypassed by certificate replacement attacks, making SSH tunnels and VPNs the only reliable ways to ensure total traffic privacy.
Смысл: The main idea is to demonstrate how to use the SSLH tool to consolidate multiple encrypted services on a single port (443) to evade traffic filtering and enhance privacy.
A technical tutorial on using SSLH to multiplex SSH, HTTPS, and other services through port 443 to bypass network restrictions.
Смысл: The main idea is to demonstrate how to wrap non-SSL application traffic in an encrypted SSL/TLS tunnel using Stunnel, thereby securing data transmission and implementing client-side certificate authentication to control access.
A step-by-step guide on using Stunnel to provide SSL encryption and certificate-based access control for applications that lack native SSL support.