US senator calls on the NSA to give guidance for use of VPNs
摘要
美国一位知名参议员呼吁国家安全局就虚拟专用网络（VPN）的使用向公众提供最佳实践指导，以防范外国对手的间谍活动。VPN通过加密连接将用户流量传输至远程服务器，可隐藏IP地址，但存在局限：加密隧道可能在单一服务器处终止，解密后的流量或IP地址易被恶意员工或黑客截获；同时，VPN无法加密时间戳等元数据，国家行为体仍可借此构建情报画像。此前美国机构虽建议使用VPN
A prominent US senator is asking the National Security Agency to provide guidance to the general public on best practices for using virtual private networks to secure their communications from spying by foreign adversaries.
VPNs funnel all of a user’s Internet traffic through an encrypted connection to a remote server. The design provides strong assurances that no one between the user and the server can read the encrypted contents. VPNs also allow users to hide their IP addresses from the destination servers they communicate with. While US agencies have previously recommended use of VPNs, none have given recommendations on which ones provide adequate protection.
It's all in the nuances
There are a host of limitations that can undo many of the protections users may think their VPN provides them. For instance, the encrypted tunnel often terminates once a single server decrypts the traffic and sends it on to its final destination. That means the decrypted traffic or the sending and destination IP addresses may be available for snooping by rogue employees or attackers who hack the server. VPNs also don’t encrypt certain types of metadata, such as time stamps, allowing nation-states to build profiles that can be useful in intelligence gathering.
转载信息
评论 (0)
暂无评论，来留下第一条评论吧