{"id":16214,"date":"2026-08-07T10:02:13","date_gmt":"2026-08-07T07:02:13","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16214"},"modified":"2026-08-07T10:02:13","modified_gmt":"2026-08-07T07:02:13","slug":"poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/","title":{"rendered":"&#8220;Poodle&#8221; ve &#8220;Heartbleed&#8221; Gibi Tarihi SSL Zafiyetlerinden Al\u0131nan Dersler"},"content":{"rendered":"<p>\u0130nternet d\u00fcnyas\u0131n\u0131n temelini olu\u015fturan g\u00fcvenlik protokolleri, dijital ileti\u015fimimizin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc sa\u011flamak i\u00e7in vazge\u00e7ilmezdir. Ancak bu protokollerin evrimi, siber g\u00fcvenlik tarihine damga vuran ciddi zafiyetlerle \u015fekillenmi\u015ftir. Heartbleed ve POODLE gibi isimlerle an\u0131lan bu olaylar, sadece teknik hatalar olman\u0131n \u00f6tesinde, internetin altyap\u0131sal g\u00fcvenli\u011fine dair yakla\u015f\u0131mlar\u0131m\u0131z\u0131 k\u00f6kten de\u011fi\u015ftiren dersler bar\u0131nd\u0131rmaktad\u0131r. Bu makalede, SSL\/TLS protokollerinin temelinden ba\u015flayarak Heartbleed ve POODLE zafiyetlerinin teknik detaylar\u0131n\u0131, etkilerini ve bu olaylardan \u00e7\u0131kard\u0131\u011f\u0131m\u0131z kritik g\u00fcvenlik derslerini derinlemesine inceleyece\u011fiz. Ayr\u0131ca, gelecekte benzer krizlerin \u00f6n\u00fcne ge\u00e7mek i\u00e7in en iyi uygulamalar\u0131 ve SSL\/TLS g\u00fcvenli\u011finin gelece\u011fini ele alaca\u011f\u0131z.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a75e0f1d275c\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6a75e0f1d275c\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#SSLTLSin-Temelleri-ve-Tarihsel-Gelisimi\" >SSL\/TLS&#8217;in Temelleri ve Tarihsel Geli\u015fimi<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#SSLTLS-Nedir-ve-Internet-Guvenligindeki-Yeri\" >SSL\/TLS Nedir ve \u0130nternet G\u00fcvenli\u011findeki Yeri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#SSL-Protokolunden-TLS-Protokolune-Evrim\" >SSL Protokol\u00fcnden TLS Protokol\u00fcne Evrim<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#SSLTLS-El-Sikismasi-Handshake-Mekanizmasi\" >SSL\/TLS El S\u0131k\u0131\u015fmas\u0131 (Handshake) Mekanizmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Sifreleme-Algoritmalari-Sertifikalar-ve-Sertifika-Otoriteleri-CA\" >\u015eifreleme Algoritmalar\u0131, Sertifikalar ve Sertifika Otoriteleri (CA)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Bir-Bellek-Sizintisi-Fenomeni-Heartbleed-Zafiyeti\" >Bir Bellek S\u0131z\u0131nt\u0131s\u0131 Fenomeni: Heartbleed Zafiyeti<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Heartbleed-Zafiyeti-Nedir\" >Heartbleed Zafiyeti Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Teknik-Kokeni-OpenSSL-Kutuphanesindeki-%E2%80%9CHeartbeat%E2%80%9D-Eklentisi-Hatasi\" >Teknik K\u00f6keni: OpenSSL K\u00fct\u00fcphanesindeki &#8220;Heartbeat&#8221; Eklentisi Hatas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Potansiyel-Etkileri-Ozel-Anahtarlarin-Parolalarin-ve-Hassas-Verilerin-Ele-Gecirilmesi\" >Potansiyel Etkileri: \u00d6zel Anahtarlar\u0131n, Parolalar\u0131n ve Hassas Verilerin Ele Ge\u00e7irilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Tespit-ve-Bertaraf-Surecleri\" >Tespit ve Bertaraf S\u00fcre\u00e7leri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Bir-Protokol-Dusurme-Saldirisi-POODLE-Zafiyeti\" >Bir Protokol D\u00fc\u015f\u00fcrme Sald\u0131r\u0131s\u0131: POODLE Zafiyeti<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#POODLE-Padding-Oracle-On-Downgraded-Legacy-Encryption-Nedir\" >POODLE (Padding Oracle On Downgraded Legacy Encryption) Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Saldirinin-Isleyisi-SSL-30-ve-CBC-Sifreleme-Modu-Zayifliklari\" >Sald\u0131r\u0131n\u0131n \u0130\u015fleyi\u015fi: SSL 3.0 ve CBC \u015eifreleme Modu Zay\u0131fl\u0131klar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Yarattigi-Riskler-Man-in-the-Middle-Ortadaki-Adam-Saldirilari-ve-Oturum-Bilgilerinin-Calinmasi\" >Yaratt\u0131\u011f\u0131 Riskler: Man-in-the-Middle (Ortadaki Adam) Sald\u0131r\u0131lar\u0131 ve Oturum Bilgilerinin \u00c7al\u0131nmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Cozum-Yollari-ve-SSL-30in-Kullanimdan-Kaldirilmasi\" >\u00c7\u00f6z\u00fcm Yollar\u0131 ve SSL 3.0&#8217;\u0131n Kullan\u0131mdan Kald\u0131r\u0131lmas\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Bu-Zafiyetlerden-Alinan-Kritik-Guvenlik-Dersleri\" >Bu Zafiyetlerden Al\u0131nan Kritik G\u00fcvenlik Dersleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Yazilim-ve-Kutuphaneleri-Guncel-Tutmanin-Onemi\" >Yaz\u0131l\u0131m ve K\u00fct\u00fcphaneleri G\u00fcncel Tutman\u0131n \u00d6nemi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Geriye-Donuk-Uyumlulugun-Getirdigi-Guvenlik-Riskleri\" >Geriye D\u00f6n\u00fck Uyumlulu\u011fun Getirdi\u011fi G\u00fcvenlik Riskleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Protokol-Tasarimindaki-Zayifliklarin-Uzun-Vadeli-Etkileri\" >Protokol Tasar\u0131m\u0131ndaki Zay\u0131fl\u0131klar\u0131n Uzun Vadeli Etkileri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Acik-Kaynak-Kodlu-Projelerde-Guvenlik-Denetiminin-Gerekliligi\" >A\u00e7\u0131k Kaynak Kodlu Projelerde G\u00fcvenlik Denetiminin Gereklili\u011fi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Kriz-Aninda-Hizli-ve-Seffaf-Iletisimin-Rolu\" >Kriz An\u0131nda H\u0131zl\u0131 ve \u015eeffaf \u0130leti\u015fimin Rol\u00fc<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Gelecekte-Benzer-Zafiyetleri-Onlemek-Icin-En-Iyi-Uygulamalar\" >Gelecekte Benzer Zafiyetleri \u00d6nlemek \u0130\u00e7in En \u0130yi Uygulamalar<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Guclu-ve-Guncel-Protokollerin-TLS-12-TLS-13-Kullaniminin-Zorunlu-Kilinmasi\" >G\u00fc\u00e7l\u00fc ve G\u00fcncel Protokollerin (TLS 1.2, TLS 1.3) Kullan\u0131m\u0131n\u0131n Zorunlu K\u0131l\u0131nmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Zayif-Sifreleme-Paketlerinin-Cipher-Suites-Devre-Disi-Birakilmasi\" >Zay\u0131f \u015eifreleme Paketlerinin (Cipher Suites) Devre D\u0131\u015f\u0131 B\u0131rak\u0131lmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Sunucu-Yapilandirmalarinin-Periyodik-Olarak-Denetlenmesi-ve-Test-Edilmesi\" >Sunucu Yap\u0131land\u0131rmalar\u0131n\u0131n Periyodik Olarak Denetlenmesi ve Test Edilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Otomatik-Sertifika-Yonetimi-ve-Yasam-Dongusu-Takibi\" >Otomatik Sertifika Y\u00f6netimi ve Ya\u015fam D\u00f6ng\u00fcs\u00fc Takibi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#HSTS-HTTP-Strict-Transport-Security-gibi-Ek-Guvenlik-Mekanizmalarinin-Uygulanmasi\" >HSTS (HTTP Strict Transport Security) gibi Ek G\u00fcvenlik Mekanizmalar\u0131n\u0131n Uygulanmas\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#SSLTLS-Guvenliginin-Gelecegi\" >SSL\/TLS G\u00fcvenli\u011finin Gelece\u011fi<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#TLS-13-ile-Gelen-Yenilikler-ve-Guvenlik-Artislari\" >TLS 1.3 ile Gelen Yenilikler ve G\u00fcvenlik Art\u0131\u015flar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Kuantum-Bilgisayarlara-Karsi-Kriptografik-Hazirliklar\" >Kuantum Bilgisayarlara Kar\u015f\u0131 Kriptografik Haz\u0131rl\u0131klar<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Otomasyon-ve-Yapay-Zekanin-Zafiyet-Tespitindeki-Rolu\" >Otomasyon ve Yapay Zekan\u0131n Zafiyet Tespitindeki Rol\u00fc<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/poodle-ve-heartbleed-gibi-tarihi-ssl-zafiyetlerinden-alinan-dersler\/#Guvenli-SSLTLS-Sertifika-Yonetimi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >G\u00fcvenli SSL\/TLS Sertifika Y\u00f6netimi \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"SSLTLSin-Temelleri-ve-Tarihsel-Gelisimi\"><\/span>SSL\/TLS&#8217;in Temelleri ve Tarihsel Geli\u015fimi<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Modern internetin g\u00fcvenli\u011fi, b\u00fcy\u00fck \u00f6l\u00e7\u00fcde SSL (Secure Sockets Layer) ve onun halefi olan TLS (Transport Layer Security) protokollerine dayan\u0131r. Bu protokoller, bir web sunucusu ile taray\u0131c\u0131 gibi bir istemci aras\u0131nda \u015fifreli bir ba\u011flant\u0131 kurarak, iletilen verilerin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc temin eder. \u00c7evrimi\u00e7i al\u0131\u015fveri\u015ften bankac\u0131l\u0131k i\u015flemlerine kadar t\u00fcm hassas veri al\u0131\u015fveri\u015fleri bu teknoloji sayesinde korunur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"SSLTLS-Nedir-ve-Internet-Guvenligindeki-Yeri\"><\/span>SSL\/TLS Nedir ve \u0130nternet G\u00fcvenli\u011findeki Yeri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSL\/TLS, internet \u00fczerindeki veri ileti\u015fimini \u015fifrelemek i\u00e7in tasarlanm\u0131\u015f bir kriptografik protokold\u00fcr. Temel amac\u0131, iki bilgisayar aras\u0131nda (genellikle bir kullan\u0131c\u0131n\u0131n bilgisayar\u0131 ve bir web sunucusu) g\u00f6nderilen verileri \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar\u0131n okumas\u0131n\u0131 veya de\u011fi\u015ftirmesini engellemektir. Bunu \u00fc\u00e7 temel g\u00fcvenlik prensibiyle ba\u015far\u0131r: <b>\u015eifreleme<\/b> (veriyi okunamaz hale getirme), <b>Kimlik Do\u011frulama<\/b> (ileti\u015fim kurulan taraf\u0131n ger\u00e7ekten iddia etti\u011fi ki\u015fi veya kurum oldu\u011funu do\u011frulama) ve <b>Veri B\u00fct\u00fcnl\u00fc\u011f\u00fc<\/b> (verinin transfer s\u0131ras\u0131nda de\u011fi\u015ftirilmedi\u011finden emin olma). Bu sayede, kullan\u0131c\u0131lar\u0131n ki\u015fisel bilgileri, kredi kart\u0131 numaralar\u0131 ve parolalar\u0131 g\u00fcvende kal\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"SSL-Protokolunden-TLS-Protokolune-Evrim\"><\/span>SSL Protokol\u00fcnden TLS Protokol\u00fcne Evrim<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSL, ilk olarak 1990&#8217;lar\u0131n ortalar\u0131nda Netscape taraf\u0131ndan geli\u015ftirilmi\u015ftir. SSL 1.0 s\u00fcr\u00fcm\u00fc hi\u00e7bir zaman halka a\u00e7\u0131klanmam\u0131\u015f, SSL 2.0 ise ciddi g\u00fcvenlik a\u00e7\u0131klar\u0131 bar\u0131nd\u0131rd\u0131\u011f\u0131 i\u00e7in k\u0131sa s\u00fcrede yerini SSL 3.0&#8217;a b\u0131rakm\u0131\u015ft\u0131r. Ancak zamanla SSL 3.0&#8217;\u0131n da zay\u0131fl\u0131klar\u0131 ortaya \u00e7\u0131km\u0131\u015f (POODLE zafiyetinde g\u00f6r\u00fclece\u011fi gibi) ve bu durum daha g\u00fc\u00e7l\u00fc bir protokole olan ihtiyac\u0131 do\u011furmu\u015ftur. \u0130nternet M\u00fchendisli\u011fi G\u00f6rev G\u00fcc\u00fc (IETF), SSL 3.0&#8217;\u0131 temel alarak Transport Layer Security (TLS) protokol\u00fcn\u00fc geli\u015ftirmi\u015ftir. TLS, SSL&#8217;in do\u011frudan bir devam\u0131 olup, daha g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131 ve geli\u015ftirilmi\u015f g\u00fcvenlik mekanizmalar\u0131 sunarak g\u00fcn\u00fcm\u00fcz standartlar\u0131n\u0131 olu\u015fturmu\u015ftur.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Protokol S\u00fcr\u00fcm\u00fc<\/th>\n<th>Yay\u0131nlanma Y\u0131l\u0131<\/th>\n<th>Durumu<\/th>\n<th>\u00d6nemli Zay\u0131fl\u0131k<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>SSL 2.0<\/td>\n<td>1995<\/td>\n<td>Kullan\u0131m D\u0131\u015f\u0131<\/td>\n<td>\u00c7e\u015fitli kriptografik zay\u0131fl\u0131klar<\/td>\n<\/tr>\n<tr>\n<td>SSL 3.0<\/td>\n<td>1996<\/td>\n<td>Kullan\u0131m D\u0131\u015f\u0131<\/td>\n<td>POODLE<\/td>\n<\/tr>\n<tr>\n<td>TLS 1.0<\/td>\n<td>1999<\/td>\n<td>Kullan\u0131m D\u0131\u015f\u0131<\/td>\n<td>BEAST, Zay\u0131f CBC modu<\/td>\n<\/tr>\n<tr>\n<td>TLS 1.1<\/td>\n<td>2006<\/td>\n<td>Kullan\u0131m D\u0131\u015f\u0131<\/td>\n<td>Modern standartlar\u0131 kar\u015f\u0131lam\u0131yor<\/td>\n<\/tr>\n<tr>\n<td>TLS 1.2<\/td>\n<td>2008<\/td>\n<td>Yayg\u0131n Kullan\u0131mda<\/td>\n<td>G\u00fcvenli kabul ediliyor<\/td>\n<\/tr>\n<tr>\n<td>TLS 1.3<\/td>\n<td>2018<\/td>\n<td>En G\u00fcncel ve G\u00fcvenli<\/td>\n<td>&#8211;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"SSLTLS-El-Sikismasi-Handshake-Mekanizmasi\"><\/span>SSL\/TLS El S\u0131k\u0131\u015fmas\u0131 (Handshake) Mekanizmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><a href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-tls-handshake-nedir-ve-nasil-calisir\/\" target=\"_blank\">SSL\/TLS el s\u0131k\u0131\u015fmas\u0131<\/a>, g\u00fcvenli bir oturumun ba\u015flang\u0131c\u0131nda istemci ve sunucu aras\u0131nda ger\u00e7ekle\u015fen bir dizi ad\u0131md\u0131r. Bu s\u00fcre\u00e7te taraflar, hangi protokol s\u00fcr\u00fcm\u00fcn\u00fc ve \u015fifreleme algoritmalar\u0131n\u0131 kullanacaklar\u0131na karar verir, birbirlerinin kimli\u011fini do\u011frular ve oturum boyunca kullan\u0131lacak simetrik \u015fifreleme anahtarlar\u0131n\u0131 g\u00fcvenli bir \u015fekilde olu\u015fturur. Bu mekanizma, t\u00fcm g\u00fcvenli ileti\u015fimin temelini atar ve herhangi bir veri g\u00f6nderilmeden \u00f6nce tamamlan\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sifreleme-Algoritmalari-Sertifikalar-ve-Sertifika-Otoriteleri-CA\"><\/span>\u015eifreleme Algoritmalar\u0131, Sertifikalar ve Sertifika Otoriteleri (CA)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSL\/TLS, g\u00fcvenli\u011fi sa\u011flamak i\u00e7in bir dizi \u015fifreleme algoritmas\u0131 kullan\u0131r. El s\u0131k\u0131\u015fmas\u0131 s\u0131ras\u0131nda asimetrik \u015fifreleme (genellikle RSA veya ECC) kullan\u0131l\u0131rken, as\u0131l veri transferi daha h\u0131zl\u0131 olan simetrik \u015fifreleme (AES gibi) ile yap\u0131l\u0131r. Bu s\u00fcrecin en \u00f6nemli par\u00e7as\u0131, sunucunun kimli\u011fini do\u011frulayan dijital bir kimlik kart\u0131 olan <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL sertifikas\u0131<\/a>d\u0131r. Bu sertifikalar, DigiCert, GeoTrust gibi g\u00fcvenilir Sertifika Otoriteleri (CA) taraf\u0131ndan verilir. Bir taray\u0131c\u0131 bir web sitesine ba\u011fland\u0131\u011f\u0131nda, sitenin SSL sertifikas\u0131n\u0131 kontrol eder ve bu sertifikan\u0131n g\u00fcvenilir bir CA taraf\u0131ndan imzalan\u0131p imzalanmad\u0131\u011f\u0131n\u0131 do\u011frular. Bu, kullan\u0131c\u0131lar\u0131n sahte web sitelerine kar\u015f\u0131 korunmas\u0131na yard\u0131mc\u0131 olur.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Bir-Bellek-Sizintisi-Fenomeni-Heartbleed-Zafiyeti\"><\/span>Bir Bellek S\u0131z\u0131nt\u0131s\u0131 Fenomeni: Heartbleed Zafiyeti<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0130nternet tarihindeki en y\u0131k\u0131c\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131ndan biri olan Heartbleed, SSL\/TLS protokol\u00fcn\u00fcn kendisindeki bir kusurdan de\u011fil, bu protokol\u00fc uygulayan pop\u00fcler bir a\u00e7\u0131k kaynakl\u0131 k\u00fct\u00fcphane olan OpenSSL&#8217;deki ciddi bir programlama hatas\u0131ndan kaynaklan\u0131yordu. Bu zafiyet, sunucular\u0131n belle\u011findeki hassas bilgilerin s\u0131zd\u0131r\u0131lmas\u0131na olanak tan\u0131yarak milyonlarca web sitesini ve kullan\u0131c\u0131y\u0131 riske att\u0131.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Heartbleed-Zafiyeti-Nedir\"><\/span>Heartbleed Zafiyeti Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Heartbleed, 2014 y\u0131l\u0131nda ortaya \u00e7\u0131kan ve OpenSSL kriptografi k\u00fct\u00fcphanesinin belirli s\u00fcr\u00fcmlerini etkileyen kritik bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131d\u0131r. Zafiyet, sald\u0131rganlar\u0131n bir sunucunun belle\u011finden her seferinde 64 kilobayta kadar veri okumas\u0131na izin veriyordu. Bu i\u015flem, sunucu g\u00fcnl\u00fcklerinde herhangi bir iz b\u0131rakmadan tekrarlanabiliyordu. S\u0131zd\u0131r\u0131lan bellek par\u00e7alar\u0131, kullan\u0131c\u0131 parolalar\u0131, oturum \u00e7erezleri, \u00f6zel mesajlar ve en tehlikelisi, sunucunun kimli\u011fini do\u011frulamak i\u00e7in kullan\u0131lan \u00f6zel SSL anahtarlar\u0131 gibi son derece hassas verileri i\u00e7erebiliyordu.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Teknik-Kokeni-OpenSSL-Kutuphanesindeki-%E2%80%9CHeartbeat%E2%80%9D-Eklentisi-Hatasi\"><\/span>Teknik K\u00f6keni: OpenSSL K\u00fct\u00fcphanesindeki &#8220;Heartbeat&#8221; Eklentisi Hatas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Zafiyetin ad\u0131, TLS protokol\u00fcn\u00fcn &#8220;Heartbeat&#8221; (Kalp At\u0131\u015f\u0131) ad\u0131 verilen bir eklentisinden gelmektedir. Bu eklenti, iki bilgisayar aras\u0131ndaki ba\u011flant\u0131n\u0131n hala aktif olup olmad\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in tasarlanm\u0131\u015ft\u0131r. \u00c7al\u0131\u015fma prensibi basittir: bir taraf di\u011ferine rastgele bir veri paketi (payload) ve o paketin uzunlu\u011funu g\u00f6nderir, kar\u015f\u0131 taraf da ayn\u0131 veriyi geri yollar. Hata, OpenSSL&#8217;in bu uzunluk bilgisini do\u011frulamamas\u0131ndan kaynaklan\u0131yordu. Bir sald\u0131rgan, 1 kilobaytl\u0131k bir veri g\u00f6nderip uzunlu\u011funu 64 kilobayt olarak belirtti\u011finde, savunmas\u0131z sunucu istenen veriyi ald\u0131ktan sonra kendi belle\u011finden ek 63 kilobaytl\u0131k rastgele veriyi de ekleyerek sald\u0131rgana geri g\u00f6nderiyordu. Bu, sunucunun o anki belle\u011finde ne varsa onun if\u015fa olmas\u0131 anlam\u0131na geliyordu.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Potansiyel-Etkileri-Ozel-Anahtarlarin-Parolalarin-ve-Hassas-Verilerin-Ele-Gecirilmesi\"><\/span>Potansiyel Etkileri: \u00d6zel Anahtarlar\u0131n, Parolalar\u0131n ve Hassas Verilerin Ele Ge\u00e7irilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Heartbleed&#8217;in etkileri felaket boyutundayd\u0131. En b\u00fcy\u00fck tehlike, sunucular\u0131n \u00f6zel SSL anahtarlar\u0131n\u0131n \u00e7al\u0131nmas\u0131yd\u0131. Bu anahtarlar\u0131 ele ge\u00e7iren bir sald\u0131rgan, o sunucuya giden t\u00fcm \u015fifreli trafi\u011fi \u00e7\u00f6zebilir, web sitesini taklit ederek kullan\u0131c\u0131lar\u0131 kand\u0131rabilir ve &#8220;Man-in-the-Middle&#8221; (Ortadaki Adam) sald\u0131r\u0131lar\u0131 ger\u00e7ekle\u015ftirebilirdi. Ayr\u0131ca, kullan\u0131c\u0131lar\u0131n oturum a\u00e7ma bilgileri, e-postalar\u0131, finansal bilgileri ve di\u011fer ki\u015fisel verileri de b\u00fcy\u00fck risk alt\u0131ndayd\u0131. Bu zafiyet, internet altyap\u0131s\u0131n\u0131n \u00f6nemli bir b\u00f6l\u00fcm\u00fcn\u00fc \u00e7al\u0131\u015ft\u0131ran Apache ve <a href=\"https:\/\/www.ihs.com.tr\/blog\/nginx-nedir\/\" target=\"_blank\">Nginx<\/a> gibi web sunucular\u0131n\u0131 do\u011frudan etkiledi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Tespit-ve-Bertaraf-Surecleri\"><\/span>Tespit ve Bertaraf S\u00fcre\u00e7leri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Heartbleed zafiyeti Google g\u00fcvenlik ekibi ve Codenomicon taraf\u0131ndan ba\u011f\u0131ms\u0131z olarak ke\u015ffedildikten sonra, h\u0131zla bir yama (patch) yay\u0131nland\u0131. Zafiyetten etkilenen sistem y\u00f6neticilerinin yapmas\u0131 gerekenler netti: \u00f6ncelikle OpenSSL k\u00fct\u00fcphanelerini g\u00fcncel bir s\u00fcr\u00fcme y\u00fckseltmek. Ancak bu yeterli de\u011fildi. \u00d6zel anahtarlar\u0131n \u00e7al\u0131nm\u0131\u015f olma ihtimaline kar\u015f\u0131 mevcut t\u00fcm <a href=\"https:\/\/www.ihs.com.tr\/ssl\/ssl-sertifikasi-turleri-nelerdir\/\" target=\"_blank\">SSL sertifikas\u0131 t\u00fcrleri<\/a> iptal edilmeli ve yenileriyle de\u011fi\u015ftirilmeliydi. Son olarak, kullan\u0131c\u0131lar\u0131n parolalar\u0131n\u0131n da ele ge\u00e7irilmi\u015f olabilece\u011fi varsay\u0131larak, t\u00fcm kullan\u0131c\u0131lardan parolalar\u0131n\u0131 de\u011fi\u015ftirmeleri istendi. Bu s\u00fcre\u00e7, internet genelinde b\u00fcy\u00fck bir g\u00fcncelleme ve fark\u0131ndal\u0131k dalgas\u0131 ba\u015flatt\u0131.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Bir-Protokol-Dusurme-Saldirisi-POODLE-Zafiyeti\"><\/span>Bir Protokol D\u00fc\u015f\u00fcrme Sald\u0131r\u0131s\u0131: POODLE Zafiyeti<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Heartbleed&#8217;den farkl\u0131 olarak POODLE, bir yaz\u0131l\u0131m hatas\u0131ndan de\u011fil, do\u011frudan SSL 3.0 protokol\u00fcn\u00fcn tasar\u0131m\u0131ndaki temel bir zay\u0131fl\u0131ktan kaynaklanan bir sald\u0131r\u0131yd\u0131. Bu zafiyet, modern ve g\u00fcvenli protokoller mevcutken bile, geriye d\u00f6n\u00fck uyumluluk ad\u0131na eski ve g\u00fcvensiz protokolleri desteklemenin ne kadar tehlikeli olabilece\u011fini g\u00f6zler \u00f6n\u00fcne serdi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"POODLE-Padding-Oracle-On-Downgraded-Legacy-Encryption-Nedir\"><\/span>POODLE (Padding Oracle On Downgraded Legacy Encryption) Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>POODLE, 2014 y\u0131l\u0131nda Google g\u00fcvenlik ara\u015ft\u0131rmac\u0131lar\u0131 taraf\u0131ndan duyurulan bir &#8220;Man-in-the-Middle&#8221; sald\u0131r\u0131 t\u00fcr\u00fcd\u00fcr. Sald\u0131r\u0131n\u0131n temel amac\u0131, bir web taray\u0131c\u0131s\u0131 ile sunucuyu, normalde kullanacaklar\u0131 g\u00fcvenli TLS protokol\u00fc yerine, g\u00fcvensiz olan SSL 3.0 protokol\u00fcn\u00fc kullanmaya zorlamakt\u0131r. Bu &#8220;protokol d\u00fc\u015f\u00fcrme&#8221; i\u015flemi ba\u015far\u0131ld\u0131ktan sonra, sald\u0131rgan SSL 3.0&#8217;\u0131n \u015fifreleme mekanizmas\u0131ndaki bir zay\u0131fl\u0131ktan faydalanarak \u015fifrelenmi\u015f verinin (\u00f6rne\u011fin, bir oturum \u00e7erezi) i\u00e7eri\u011fini par\u00e7a par\u00e7a tahmin edebilir ve ele ge\u00e7irebilirdi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirinin-Isleyisi-SSL-30-ve-CBC-Sifreleme-Modu-Zayifliklari\"><\/span>Sald\u0131r\u0131n\u0131n \u0130\u015fleyi\u015fi: SSL 3.0 ve CBC \u015eifreleme Modu Zay\u0131fl\u0131klar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131 iki a\u015famadan olu\u015fur. \u0130lk olarak, sald\u0131rgan istemci ile sunucu aras\u0131ndaki ba\u011flant\u0131 kurma denemelerine m\u00fcdahale eder. Modern taray\u0131c\u0131lar ve sunucular TLS ile ba\u011flant\u0131 kurmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131nda, sald\u0131rgan bu ba\u011flant\u0131y\u0131 sabote eder. Bir\u00e7ok sistem, ba\u011flant\u0131 ba\u015far\u0131s\u0131z oldu\u011funda otomatik olarak daha eski bir protokol\u00fc deneyecek \u015fekilde yap\u0131land\u0131r\u0131lm\u0131\u015ft\u0131r. Sald\u0131rgan, bu denemeleri tekrar tekrar ba\u015far\u0131s\u0131zl\u0131\u011fa u\u011fratarak en sonunda istemci ve sunucunun SSL 3.0 \u00fczerinde anla\u015fmas\u0131n\u0131 sa\u011flar. \u0130kinci a\u015famada, SSL 3.0&#8217;\u0131n kulland\u0131\u011f\u0131 CBC (Cipher Block Chaining) \u015fifreleme modundaki bir zay\u0131fl\u0131k kullan\u0131l\u0131r. Bu modda, \u015fifrelenmi\u015f verinin sonuna eklenen &#8220;dolgu&#8221; (padding) baytlar\u0131n\u0131n do\u011frulanma \u015fekli, sald\u0131rgan\u0131n \u015fifreli metnin bir bayt\u0131n\u0131 de\u011fi\u015ftirip sunucunun tepkisini g\u00f6zlemleyerek orijinal metnin o bayt\u0131n\u0131 tahmin etmesine olanak tan\u0131r. Bu i\u015flem defalarca tekrarlanarak hassas bilgiler (genellikle HTTP \u00e7erezleri) tamamen okunabilir hale getirilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yarattigi-Riskler-Man-in-the-Middle-Ortadaki-Adam-Saldirilari-ve-Oturum-Bilgilerinin-Calinmasi\"><\/span>Yaratt\u0131\u011f\u0131 Riskler: Man-in-the-Middle (Ortadaki Adam) Sald\u0131r\u0131lar\u0131 ve Oturum Bilgilerinin \u00c7al\u0131nmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>POODLE&#8217;\u0131n en b\u00fcy\u00fck riski, oturum ka\u00e7\u0131rma (session hijacking) sald\u0131r\u0131lar\u0131na kap\u0131 aralamas\u0131yd\u0131. Bir sald\u0131rgan, kullan\u0131c\u0131n\u0131n bankac\u0131l\u0131k sitesi veya e-posta hizmeti gibi bir servisle olan oturum \u00e7erezini ele ge\u00e7irdi\u011finde, o kullan\u0131c\u0131n\u0131n kimli\u011fine b\u00fcr\u00fcnerek hesaba tam eri\u015fim sa\u011flayabilirdi. Bu, \u015fifreyi bilmeye gerek kalmadan kullan\u0131c\u0131n\u0131n hesab\u0131nda i\u015flem yap\u0131lmas\u0131na, \u00f6zel mesajlar\u0131n okunmas\u0131na veya para transferi gibi kritik i\u015flemlerin ger\u00e7ekle\u015ftirilmesine olanak tan\u0131rd\u0131. Sald\u0131r\u0131n\u0131n ba\u015far\u0131l\u0131 olmas\u0131 i\u00e7in sald\u0131rgan\u0131n kullan\u0131c\u0131 ile web sitesi aras\u0131nda bir a\u011f konumunda (\u00f6rne\u011fin, halka a\u00e7\u0131k bir Wi-Fi a\u011f\u0131nda) olmas\u0131 gerekiyordu.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Cozum-Yollari-ve-SSL-30in-Kullanimdan-Kaldirilmasi\"><\/span>\u00c7\u00f6z\u00fcm Yollar\u0131 ve SSL 3.0&#8217;\u0131n Kullan\u0131mdan Kald\u0131r\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>POODLE zafiyetinin protokol\u00fcn kendisinde olmas\u0131 nedeniyle, OpenSSL&#8217;deki gibi basit bir yama ile d\u00fczeltilmesi m\u00fcmk\u00fcn de\u011fildi. Tek ve kal\u0131c\u0131 \u00e7\u00f6z\u00fcm, hem sunucu taraf\u0131nda hem de istemci (taray\u0131c\u0131) taraf\u0131nda SSL 3.0 deste\u011fini tamamen devre d\u0131\u015f\u0131 b\u0131rakmakt\u0131. Zafiyetin duyurulmas\u0131n\u0131n ard\u0131ndan, t\u00fcm b\u00fcy\u00fck taray\u0131c\u0131 \u00fcreticileri (Google, Mozilla, Microsoft) ve web <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> sa\u011flay\u0131c\u0131lar\u0131 h\u0131zla g\u00fcncellemeler yay\u0131nlayarak SSL 3.0&#8217;\u0131 varsay\u0131lan olarak kapatt\u0131lar. Bu olay, internet end\u00fcstrisinin eski ve g\u00fcvensiz teknolojileri terk etme konusunda daha kararl\u0131 ad\u0131mlar atmas\u0131n\u0131 sa\u011flayan bir d\u00f6n\u00fcm noktas\u0131 oldu.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Bu-Zafiyetlerden-Alinan-Kritik-Guvenlik-Dersleri\"><\/span>Bu Zafiyetlerden Al\u0131nan Kritik G\u00fcvenlik Dersleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Heartbleed ve POODLE, siber g\u00fcvenlik toplulu\u011fu i\u00e7in birer uyand\u0131rma servisi oldu. Bu zafiyetler, sadece anl\u0131k krizler yaratmakla kalmad\u0131, ayn\u0131 zamanda yaz\u0131l\u0131m geli\u015ftirme, protokol tasar\u0131m\u0131 ve kriz y\u00f6netimi konular\u0131nda uzun vadeli ve kal\u0131c\u0131 dersler b\u0131rakt\u0131. Bu olaylardan \u00e7\u0131kar\u0131lan dersler, g\u00fcn\u00fcm\u00fczdeki g\u00fcvenlik en iyi uygulamalar\u0131n\u0131n temelini olu\u015fturmaktad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Yazilim-ve-Kutuphaneleri-Guncel-Tutmanin-Onemi\"><\/span>Yaz\u0131l\u0131m ve K\u00fct\u00fcphaneleri G\u00fcncel Tutman\u0131n \u00d6nemi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Heartbleed, \u00fc\u00e7\u00fcnc\u00fc parti k\u00fct\u00fcphanelerin ne kadar kritik olabilece\u011fini ac\u0131 bir \u015fekilde g\u00f6sterdi. OpenSSL gibi temel bir bile\u015fendeki tek bir hata, internetin b\u00fcy\u00fck bir b\u00f6l\u00fcm\u00fcn\u00fc savunmas\u0131z b\u0131rakabildi. Bu olay, sistem y\u00f6neticilerine ve geli\u015ftiricilere, kulland\u0131klar\u0131 t\u00fcm yaz\u0131l\u0131mlar\u0131, k\u00fct\u00fcphaneleri ve ba\u011f\u0131ml\u0131l\u0131klar\u0131 d\u00fczenli olarak takip etme ve en son g\u00fcvenlik yamalar\u0131n\u0131 gecikmeden uygulama zorunlulu\u011funu hat\u0131rlatt\u0131. G\u00fcncel kalmak, reaktif bir \u00f6nlemden \u00e7ok proaktif bir g\u00fcvenlik stratejisinin temel ta\u015f\u0131 haline geldi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Geriye-Donuk-Uyumlulugun-Getirdigi-Guvenlik-Riskleri\"><\/span>Geriye D\u00f6n\u00fck Uyumlulu\u011fun Getirdi\u011fi G\u00fcvenlik Riskleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>POODLE, &#8220;eski sistemler de \u00e7al\u0131\u015fs\u0131n&#8221; mant\u0131\u011f\u0131yla s\u00fcrd\u00fcr\u00fclen geriye d\u00f6n\u00fck uyumlulu\u011fun ne kadar tehlikeli olabilece\u011fini kan\u0131tlad\u0131. SSL 3.0 gibi y\u0131llard\u0131r g\u00fcvensiz oldu\u011fu bilinen bir protokol\u00fcn s\u0131rf eski taray\u0131c\u0131lar ve sistemlerle uyumluluk ad\u0131na aktif tutulmas\u0131, sald\u0131rganlara modern sistemleri bile hedef alabilecekleri bir arka kap\u0131 b\u0131rakt\u0131. Buradan al\u0131nan ders, g\u00fcvenlikten \u00f6d\u00fcn vererek uyumluluk sa\u011flaman\u0131n s\u00fcrd\u00fcr\u00fclebilir bir yakla\u015f\u0131m olmad\u0131\u011f\u0131d\u0131r. G\u00fcvenlik standartlar\u0131 geli\u015ftik\u00e7e, eski ve g\u00fcvensiz teknolojiler kararl\u0131l\u0131kla kullan\u0131mdan kald\u0131r\u0131lmal\u0131d\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Protokol-Tasarimindaki-Zayifliklarin-Uzun-Vadeli-Etkileri\"><\/span>Protokol Tasar\u0131m\u0131ndaki Zay\u0131fl\u0131klar\u0131n Uzun Vadeli Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>POODLE, 1996&#8217;da tasarlanm\u0131\u015f bir protokol\u00fcn zay\u0131fl\u0131klar\u0131n\u0131n neredeyse 20 y\u0131l sonra bile nas\u0131l istismar edilebilece\u011fini g\u00f6sterdi. Bu durum, kriptografik protokollerin tasar\u0131m a\u015famas\u0131nda ne kadar dikkatli ve ileri g\u00f6r\u00fc\u015fl\u00fc olunmas\u0131 gerekti\u011fini vurgulad\u0131. Bir protokoldeki en k\u00fc\u00e7\u00fck bir tasar\u0131m hatas\u0131 bile, gelecekte i\u015flem g\u00fcc\u00fcn\u00fcn artmas\u0131 ve yeni sald\u0131r\u0131 tekniklerinin geli\u015ftirilmesiyle kritik bir zafiyete d\u00f6n\u00fc\u015febilir. Bu nedenle, yeni protokoller (TLS 1.3 gibi) tasarlan\u0131rken ge\u00e7mi\u015fteki hatalardan ders al\u0131narak esneklik ve g\u00fcvenlik \u00f6n planda tutulmaktad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Acik-Kaynak-Kodlu-Projelerde-Guvenlik-Denetiminin-Gerekliligi\"><\/span>A\u00e7\u0131k Kaynak Kodlu Projelerde G\u00fcvenlik Denetiminin Gereklili\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Heartbleed, internet altyap\u0131s\u0131n\u0131n bel kemi\u011fini olu\u015fturan OpenSSL gibi kritik a\u00e7\u0131k kaynakl\u0131 projelerin yeterince finanse edilmedi\u011fini ve d\u00fczenli g\u00fcvenlik denetimlerinden ge\u00e7medi\u011fini ortaya \u00e7\u0131kard\u0131. Bu olay\u0131n ard\u0131ndan teknoloji end\u00fcstrisi, Core Infrastructure Initiative gibi giri\u015fimlerle bu t\u00fcr projelere daha fazla kaynak ve destek sa\u011flamaya ba\u015flad\u0131. Buradan \u00e7\u0131kar\u0131lan ders, a\u00e7\u0131k kaynak kodun \u015feffafl\u0131\u011f\u0131n\u0131n tek ba\u015f\u0131na g\u00fcvenli\u011fi garanti etmedi\u011fi; proaktif, profesyonel ve s\u00fcrekli g\u00fcvenlik denetimlerinin hayati \u00f6nem ta\u015f\u0131d\u0131\u011f\u0131d\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kriz-Aninda-Hizli-ve-Seffaf-Iletisimin-Rolu\"><\/span>Kriz An\u0131nda H\u0131zl\u0131 ve \u015eeffaf \u0130leti\u015fimin Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Her iki zafiyetin y\u00f6netiminde de sorumlu if\u015fa (responsible disclosure) s\u00fcreci kritik bir rol oynad\u0131. Zafiyetleri ke\u015ffeden ara\u015ft\u0131rmac\u0131lar, bunlar\u0131 do\u011frudan kamuoyuna duyurmak yerine \u00f6nce ilgili yaz\u0131l\u0131m geli\u015ftiricilere ve \u015firketlere bildirdi. Bu, yamalar\u0131n ve \u00e7\u00f6z\u00fcmlerin haz\u0131rlanmas\u0131 i\u00e7in zaman tan\u0131d\u0131. Kriz patlak verdi\u011finde ise hem zafiyetin teknik detaylar\u0131n\u0131 a\u00e7\u0131klayan web siteleri (heartbleed.com gibi) hem de \u015firketlerin kullan\u0131c\u0131lara y\u00f6nelik a\u00e7\u0131k ve net bilgilendirmeleri, zarar\u0131n en aza indirilmesinde etkili oldu. Bu olaylar, kriz an\u0131nda \u015feffaf, h\u0131zl\u0131 ve eyleme ge\u00e7irilebilir bilginin ne kadar de\u011ferli oldu\u011funu g\u00f6sterdi.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Gelecekte-Benzer-Zafiyetleri-Onlemek-Icin-En-Iyi-Uygulamalar\"><\/span>Gelecekte Benzer Zafiyetleri \u00d6nlemek \u0130\u00e7in En \u0130yi Uygulamalar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Heartbleed ve POODLE gibi tarihi zafiyetlerden al\u0131nan dersler, g\u00fcn\u00fcm\u00fcz\u00fcn siber g\u00fcvenlik standartlar\u0131n\u0131 \u015fekillendirmi\u015ftir. Art\u0131k sadece bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/sitenizi-https-ye-tasidiktan-sonra-yapmaniz-gereken-seo-ayarlari\/\" target=\"_blank\">SSL<\/a> sertifikas\u0131na sahip olmak yeterli de\u011fil; bu sertifikan\u0131n alt\u0131nda yatan altyap\u0131n\u0131n do\u011fru ve g\u00fcvenli bir \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131 da hayati \u00f6nem ta\u015f\u0131maktad\u0131r. Gelecekte benzer krizleri \u00f6nlemek i\u00e7in sistem y\u00f6neticilerinin ve geli\u015ftiricilerin benimsemesi gereken bir dizi en iyi uygulama bulunmaktad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guclu-ve-Guncel-Protokollerin-TLS-12-TLS-13-Kullaniminin-Zorunlu-Kilinmasi\"><\/span>G\u00fc\u00e7l\u00fc ve G\u00fcncel Protokollerin (TLS 1.2, TLS 1.3) Kullan\u0131m\u0131n\u0131n Zorunlu K\u0131l\u0131nmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En temel \u00f6nlem, eski ve g\u00fcvensiz SSL\/TLS s\u00fcr\u00fcmlerini tamamen devre d\u0131\u015f\u0131 b\u0131rakmakt\u0131r. Sunucu yap\u0131land\u0131rmalar\u0131, yaln\u0131zca modern ve g\u00fcvenli kabul edilen TLS 1.2 ve \u00f6zellikle daha yeni ve daha g\u00fcvenli olan <a href=\"https:\/\/www.ihs.com.tr\/blog\/tls-1-2-ve-tls-1-3-arasindaki-farklar-daha-guvenli-ve-hizli-protokole-gecis\/\" target=\"_blank\">TLS 1.3<\/a> protokollerini destekleyecek \u015fekilde ayarlanmal\u0131d\u0131r. Bu, POODLE gibi protokol d\u00fc\u015f\u00fcrme sald\u0131r\u0131lar\u0131n\u0131 imkans\u0131z hale getirir ve bilinen zafiyetlere kar\u015f\u0131 ilk savunma hatt\u0131n\u0131 olu\u015fturur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Zayif-Sifreleme-Paketlerinin-Cipher-Suites-Devre-Disi-Birakilmasi\"><\/span>Zay\u0131f \u015eifreleme Paketlerinin (Cipher Suites) Devre D\u0131\u015f\u0131 B\u0131rak\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir SSL\/TLS ba\u011flant\u0131s\u0131, taraflar\u0131n \u00fczerinde anla\u015ft\u0131\u011f\u0131 bir \u015fifreleme paketi (cipher suite) kullan\u0131r. Bu paketler, anahtar de\u011fi\u015fimi, \u015fifreleme ve b\u00fct\u00fcnl\u00fck kontrol\u00fc i\u00e7in kullan\u0131lacak algoritmalar\u0131 belirler. RC4, DES veya MD5 gibi eski ve kriptografik olarak zay\u0131f algoritmalar\u0131 i\u00e7eren \u015fifreleme paketleri mutlaka devre d\u0131\u015f\u0131 b\u0131rak\u0131lmal\u0131d\u0131r. Sunucular, yaln\u0131zca AES-GCM veya ChaCha20-Poly1305 gibi modern ve g\u00fc\u00e7l\u00fc algoritmalar\u0131 i\u00e7eren paketleri desteklemelidir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucu-Yapilandirmalarinin-Periyodik-Olarak-Denetlenmesi-ve-Test-Edilmesi\"><\/span>Sunucu Yap\u0131land\u0131rmalar\u0131n\u0131n Periyodik Olarak Denetlenmesi ve Test Edilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> yap\u0131land\u0131rmas\u0131n\u0131n bir kez ayarlan\u0131p unutulmas\u0131 b\u00fcy\u00fck bir hatad\u0131r. G\u00fcvenlik standartlar\u0131 ve bilinen zafiyetler s\u00fcrekli de\u011fi\u015fmektedir. Bu nedenle, SSL Labs gibi \u00e7evrimi\u00e7i ara\u00e7lar kullan\u0131larak sunucu yap\u0131land\u0131rmalar\u0131 periyodik olarak test edilmelidir. Bu testler, zay\u0131f protokoller, g\u00fcvensiz \u015fifreleme paketleri, eksik sertifika zincirleri veya di\u011fer yap\u0131land\u0131rma hatalar\u0131 gibi potansiyel sorunlar\u0131 ortaya \u00e7\u0131kar\u0131r ve sistem y\u00f6neticilerine &#8220;A+&#8221; gibi y\u00fcksek bir g\u00fcvenlik puan\u0131 hedefleme imkan\u0131 sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Otomatik-Sertifika-Yonetimi-ve-Yasam-Dongusu-Takibi\"><\/span>Otomatik Sertifika Y\u00f6netimi ve Ya\u015fam D\u00f6ng\u00fcs\u00fc Takibi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>S\u00fcresi dolmu\u015f bir SSL sertifikas\u0131, kullan\u0131c\u0131lar\u0131n sitenize g\u00fcvenini sarsar ve g\u00fcvenlik riskleri olu\u015fturur. ACME (Automated Certificate Management Environment) protokol\u00fc ve Let&#8217;s Encrypt gibi hizmetler, sertifika alma, yenileme ve y\u00fckleme s\u00fcre\u00e7lerini otomatikle\u015ftirmeyi kolayla\u015ft\u0131r\u0131r. Otomatikle\u015ftirilmi\u015f sistemler, manuel hatalar\u0131 \u00f6nler ve sertifika ya\u015fam d\u00f6ng\u00fcs\u00fcn\u00fcn sorunsuz bir \u015fekilde y\u00f6netilmesini sa\u011flar, b\u00f6ylece <a href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-sertifikanizin-suresi-doldugunda-ne-olur-yenilemeyi-unutmanin-riskleri\/\" target=\"_blank\">sertifikan\u0131n s\u00fcresinin dolmas\u0131<\/a> gibi basit ama etkili sorunlar\u0131n \u00f6n\u00fcne ge\u00e7er.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HSTS-HTTP-Strict-Transport-Security-gibi-Ek-Guvenlik-Mekanizmalarinin-Uygulanmasi\"><\/span>HSTS (HTTP Strict Transport Security) gibi Ek G\u00fcvenlik Mekanizmalar\u0131n\u0131n Uygulanmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><a href=\"https:\/\/www.ihs.com.tr\/blog\/hsts-nedir-ve-nasil-kurulur\/\" target=\"_blank\">HSTS<\/a>, bir web sunucusunun taray\u0131c\u0131lara kendisiyle yaln\u0131zca HTTPS \u00fczerinden ileti\u015fim kurmas\u0131n\u0131 s\u00f6yleyen bir g\u00fcvenlik politikas\u0131 mekanizmas\u0131d\u0131r. Bir taray\u0131c\u0131 HSTS ba\u015fl\u0131\u011f\u0131n\u0131 ald\u0131\u011f\u0131nda, belirtilen s\u00fcre boyunca o siteye yap\u0131lacak t\u00fcm HTTP isteklerini otomatik olarak HTTPS&#8217;e y\u00f6nlendirir. Bu, SSL-stripping gibi &#8220;Man-in-the-Middle&#8221; sald\u0131r\u0131lar\u0131n\u0131 etkili bir \u015fekilde \u00f6nler ve kullan\u0131c\u0131lar\u0131n her zaman g\u00fcvenli bir ba\u011flant\u0131 kullanmas\u0131n\u0131 garanti eder.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"SSLTLS-Guvenliginin-Gelecegi\"><\/span>SSL\/TLS G\u00fcvenli\u011finin Gelece\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0130nternet g\u00fcvenli\u011fi s\u00fcrekli bir evrim i\u00e7indedir. Heartbleed ve POODLE gibi ge\u00e7mi\u015fteki krizler, daha dayan\u0131kl\u0131 ve g\u00fcvenli protokollerin geli\u015ftirilmesine \u00f6nc\u00fcl\u00fck etmi\u015ftir. SSL\/TLS&#8217;in gelece\u011fi, daha fazla h\u0131z, daha g\u00fc\u00e7l\u00fc \u015fifreleme ve kuantum bili\u015fim gibi yeni tehditlere kar\u015f\u0131 proaktif haz\u0131rl\u0131klarla \u015fekillenmektedir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"TLS-13-ile-Gelen-Yenilikler-ve-Guvenlik-Artislari\"><\/span>TLS 1.3 ile Gelen Yenilikler ve G\u00fcvenlik Art\u0131\u015flar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>2018&#8217;de standartla\u015fan TLS 1.3, SSL\/TLS tarihindeki en \u00f6nemli g\u00fcncellemelerden biridir. \u00d6nceki s\u00fcr\u00fcmlere g\u00f6re hem daha h\u0131zl\u0131 hem de daha g\u00fcvenlidir. El s\u0131k\u0131\u015fma (handshake) s\u00fcrecini basitle\u015ftirerek ba\u011flant\u0131 gecikmesini azalt\u0131r. Daha da \u00f6nemlisi, POODLE ve di\u011fer sald\u0131r\u0131larda istismar edilen eski ve g\u00fcvensiz kriptografik \u00f6zellikleri (RC4, CBC modu \u015fifreleri, SHA-1, MD5 vb.) tamamen ortadan kald\u0131r\u0131r. TLS 1.3, &#8220;az ama \u00f6z&#8221; felsefesiyle tasarlanm\u0131\u015f, sadele\u015ftirilmi\u015f ve sa\u011flamla\u015ft\u0131r\u0131lm\u0131\u015f bir protokold\u00fcr.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>TLS 1.2<\/th>\n<th>TLS 1.3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>El S\u0131k\u0131\u015fma (Handshake)<\/td>\n<td>2 Gidi\u015f-D\u00f6n\u00fc\u015f (Round Trip)<\/td>\n<td>1 Gidi\u015f-D\u00f6n\u00fc\u015f (Daha H\u0131zl\u0131)<\/td>\n<\/tr>\n<tr>\n<td>Desteklenen Algoritmalar<\/td>\n<td>Geni\u015f ve eski algoritmalar\u0131 i\u00e7erir<\/td>\n<td>Yaln\u0131zca modern ve g\u00fcvenli algoritmalar<\/td>\n<\/tr>\n<tr>\n<td>Zay\u0131f \u00d6zellikler<\/td>\n<td>Yap\u0131land\u0131rmaya ba\u011fl\u0131 olarak izin verilebilir<\/td>\n<td>Tamamen kald\u0131r\u0131ld\u0131<\/td>\n<\/tr>\n<tr>\n<td>\u0130leriye D\u00f6n\u00fck Gizlilik (Forward Secrecy)<\/td>\n<td>\u0130ste\u011fe ba\u011fl\u0131<\/td>\n<td>Zorunlu<\/td>\n<\/tr>\n<tr>\n<td>G\u00fcvenlik<\/td>\n<td>Do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda g\u00fc\u00e7l\u00fc<\/td>\n<td>Varsay\u0131lan olarak daha g\u00fc\u00e7l\u00fc<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Kuantum-Bilgisayarlara-Karsi-Kriptografik-Hazirliklar\"><\/span>Kuantum Bilgisayarlara Kar\u015f\u0131 Kriptografik Haz\u0131rl\u0131klar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Gelecekteki en b\u00fcy\u00fck tehditlerden biri, mevcut asimetrik \u015fifreleme algoritmalar\u0131n\u0131 (RSA ve ECC gibi) kolayca k\u0131rabilecek olan kuantum bilgisayarlard\u0131r. Siber g\u00fcvenlik toplulu\u011fu bu tehdide kar\u015f\u0131 \u015fimdiden haz\u0131rl\u0131k yapmaktad\u0131r. NIST (Ulusal Standartlar ve Teknoloji Enstit\u00fcs\u00fc) gibi kurumlar, &#8220;kuantum sonras\u0131 kriptografi&#8221; (Post-Quantum Cryptography &#8211; PQC) standartlar\u0131n\u0131 belirlemek i\u00e7in \u00e7al\u0131\u015fmalar y\u00fcr\u00fctmektedir. Gelecekteki SSL\/TLS s\u00fcr\u00fcmlerinin, kuantum sald\u0131r\u0131lar\u0131na dayan\u0131kl\u0131 yeni algoritmalar\u0131 i\u00e7ermesi beklenmektedir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Otomasyon-ve-Yapay-Zekanin-Zafiyet-Tespitindeki-Rolu\"><\/span>Otomasyon ve Yapay Zekan\u0131n Zafiyet Tespitindeki Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yaz\u0131l\u0131m ve sistemlerin karma\u015f\u0131kl\u0131\u011f\u0131 artt\u0131k\u00e7a, insan g\u00f6z\u00fcyle g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 bulmak zorla\u015fmaktad\u0131r. Gelecekte, otomasyon ve yapay zeka (AI) destekli ara\u00e7lar, zafiyet tespitinde daha b\u00fcy\u00fck bir rol oynayacakt\u0131r. Bu ara\u00e7lar, milyonlarca sat\u0131r kodu analiz edebilir, anormal a\u011f trafi\u011fi kal\u0131plar\u0131n\u0131 tespit edebilir ve Heartbleed benzeri bellek s\u0131z\u0131nt\u0131s\u0131 hatalar\u0131n\u0131 veya protokol tasar\u0131m\u0131ndaki mant\u0131ksal kusurlar\u0131 insanlardan \u00e7ok daha h\u0131zl\u0131 bir \u015fekilde belirleyebilir. Bu, g\u00fcvenlik denetimlerinin daha proaktif ve verimli hale gelmesini sa\u011flayacakt\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Guvenli-SSLTLS-Sertifika-Yonetimi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>G\u00fcvenli SSL\/TLS Sertifika Y\u00f6netimi \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Web sitenizin g\u00fcvenli\u011fi, do\u011fru <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">alan ad\u0131<\/a> ve hosting se\u00e7imiyle ba\u015flar ve g\u00fc\u00e7l\u00fc bir SSL\/TLS yap\u0131land\u0131rmas\u0131yla tamamlan\u0131r. Heartbleed ve POODLE gibi zafiyetler, sadece sertifika alman\u0131n de\u011fil, ayn\u0131 zamanda bu sertifikay\u0131 do\u011fru y\u00f6netmenin ve en g\u00fcncel g\u00fcvenlik standartlar\u0131n\u0131 uygulaman\u0131n ne kadar kritik oldu\u011funu g\u00f6stermi\u015ftir. \u0130HS Telekom olarak, m\u00fc\u015fterilerimize sadece \u00e7e\u015fitli SSL sertifikas\u0131 se\u00e7enekleri sunmakla kalm\u0131yor, ayn\u0131 zamanda bu s\u00fcre\u00e7te uzman deste\u011fi sa\u011fl\u0131yoruz. G\u00fc\u00e7l\u00fc altyap\u0131m\u0131z ve tecr\u00fcbeli ekibimizle, sunucular\u0131n\u0131z\u0131n TLS 1.2 ve TLS 1.3 gibi en g\u00fcncel protokollerle yap\u0131land\u0131r\u0131lmas\u0131na, zay\u0131f \u015fifreleme paketlerinin devre d\u0131\u015f\u0131 b\u0131rak\u0131lmas\u0131na ve sertifika ya\u015fam d\u00f6ng\u00fcn\u00fcz\u00fcn sorunsuz bir \u015fekilde y\u00f6netilmesine yard\u0131mc\u0131 oluyoruz. Web g\u00fcvenli\u011finizi \u015fansa b\u0131rakmay\u0131n, \u0130HS Telekom&#8217;un uzmanl\u0131\u011f\u0131yla dijital varl\u0131klar\u0131n\u0131z\u0131 en \u00fcst d\u00fczeyde koruyun.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0130nternet d\u00fcnyas\u0131n\u0131n temelini olu\u015fturan g\u00fcvenlik protokolleri, dijital ileti\u015fimimizin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc sa\u011flamak i\u00e7in vazge\u00e7ilmezdir. Ancak bu protokollerin evrimi, siber g\u00fcvenlik tarihine damga&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16215,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[400],"tags":[],"class_list":["post-16214","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ssl-sertifikasi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16214"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16214\/revisions"}],"predecessor-version":[{"id":16216,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16214\/revisions\/16216"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16215"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}