{"id":16647,"date":"2026-10-09T17:39:40","date_gmt":"2026-10-09T14:39:40","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16647"},"modified":"2026-10-09T17:39:40","modified_gmt":"2026-10-09T14:39:40","slug":"ssl-stripping-downgrade-saldirisi-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/","title":{"rendered":"SSL Stripping (Downgrade) Sald\u0131r\u0131s\u0131 Nedir? Hackerlar HTTPS Ba\u011flant\u0131n\u0131z\u0131 HTTP&#8217;ye Nas\u0131l \u00c7eker?"},"content":{"rendered":"<p>Dijital d\u00fcnyada g\u00fcvenli bir \u015fekilde gezinmek, hem ki\u015fisel verilerimizi korumak hem de \u00e7evrimi\u00e7i i\u015flemlerimizi emniyete almak i\u00e7in hayati \u00f6nem ta\u015f\u0131r. Taray\u0131c\u0131n\u0131z\u0131n adres \u00e7ubu\u011funda g\u00f6rd\u00fc\u011f\u00fcn\u00fcz o k\u00fc\u00e7\u00fck kilit simgesi ve &#8220;HTTPS&#8221; \u00f6n eki, bu g\u00fcvenli\u011fin temel dire\u011fidir. Ancak siber sald\u0131rganlar, bu g\u00fcven zincirini k\u0131rmak i\u00e7in s\u00fcrekli yeni y\u00f6ntemler geli\u015ftirir. \u0130\u015fte bu y\u00f6ntemlerden en sinsi ve tehlikeli olanlar\u0131ndan biri de SSL Stripping sald\u0131r\u0131s\u0131d\u0131r. Bu sald\u0131r\u0131, kullan\u0131c\u0131lar\u0131 fark\u0131nda olmadan g\u00fcvenli HTTPS ba\u011flant\u0131s\u0131ndan g\u00fcvensiz HTTP ba\u011flant\u0131s\u0131na d\u00fc\u015f\u00fcrerek, aradaki t\u00fcm veri ak\u0131\u015f\u0131n\u0131 ele ge\u00e7irmeyi ama\u00e7lar. Bu makalede, SSL Stripping sald\u0131r\u0131s\u0131n\u0131n ne oldu\u011funu, nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 ve bu tehdide kar\u015f\u0131 hem son kullan\u0131c\u0131lar\u0131n hem de web sitesi sahiplerinin alabilece\u011fi \u00f6nlemleri detayl\u0131 bir \u015fekilde inceleyece\u011fiz.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6ac9387ceadba\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6ac9387ceadba\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Guvenli-Internet-Iletisiminin-Temelleri\" >G\u00fcvenli \u0130nternet \u0130leti\u015fiminin Temelleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#HTTPS-Nedir-ve-Internet-Guvenligindeki-Rolu\" >HTTPS Nedir ve \u0130nternet G\u00fcvenli\u011findeki Rol\u00fc<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#SSLTLS-Sertifikalari-Dijital-Kimlik-ve-Sifreleme\" >SSL\/TLS Sertifikalar\u0131: Dijital Kimlik ve \u015eifreleme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Guvenli-HTTPS-ve-Guvensiz-HTTP-Baglanti-Arasindaki-Farklar\" >G\u00fcvenli (HTTPS) ve G\u00fcvensiz (HTTP) Ba\u011flant\u0131 Aras\u0131ndaki Farklar<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#SSL-Stripping-Saldirisina-Giris-Guvenli-Baglantinin-Zayiflatilmasi\" >SSL Stripping Sald\u0131r\u0131s\u0131na Giri\u015f: G\u00fcvenli Ba\u011flant\u0131n\u0131n Zay\u0131flat\u0131lmas\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#SSL-Stripping-Saldirisinin-Anatomisi-Adim-Adim-Isleyis\" >SSL Stripping Sald\u0131r\u0131s\u0131n\u0131n Anatomisi: Ad\u0131m Ad\u0131m \u0130\u015fleyi\u015f<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Saldirinin-Temeli-Ortadaki-Adam-Man-in-the-Middle-%E2%80%93-MitM-Konumu\" >Sald\u0131r\u0131n\u0131n Temeli: Ortadaki Adam (Man-in-the-Middle &#8211; MitM) Konumu<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Saldirinin-Baslatilmasi-Trafik-Akisinin-Yonlendirilmesi\" >Sald\u0131r\u0131n\u0131n Ba\u015flat\u0131lmas\u0131: Trafik Ak\u0131\u015f\u0131n\u0131n Y\u00f6nlendirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Kullanicinin-HTTPS-Isteginin-Yakalanmasi\" >Kullan\u0131c\u0131n\u0131n HTTPS \u0130ste\u011finin Yakalanmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Saldirgan-ve-Sunucu-Arasinda-Guvenli-Bir-Tunel-Olusturulmasi\" >Sald\u0131rgan ve Sunucu Aras\u0131nda G\u00fcvenli Bir T\u00fcnel Olu\u015fturulmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Sunucudan-Gelen-Guvenli-Yanitin-Degistirilmesi\" >Sunucudan Gelen G\u00fcvenli Yan\u0131t\u0131n De\u011fi\u015ftirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Kullaniciya-Guvensiz-HTTP-Sayfasinin-Sunulmasi\" >Kullan\u0131c\u0131ya G\u00fcvensiz HTTP Sayfas\u0131n\u0131n Sunulmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Iki-Yonlu-Veri-Akisinin-Gizlice-Izlenmesi\" >\u0130ki Y\u00f6nl\u00fc Veri Ak\u0131\u015f\u0131n\u0131n Gizlice \u0130zlenmesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#SSL-Stripping-Saldirisinin-Riskleri-ve-Olasi-Zararlari\" >SSL Stripping Sald\u0131r\u0131s\u0131n\u0131n Riskleri ve Olas\u0131 Zararlar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Giris-Bilgilerinin-Kullanici-Adi-ve-Sifre-Calinmasi\" >Giri\u015f Bilgilerinin (Kullan\u0131c\u0131 Ad\u0131 ve \u015eifre) \u00c7al\u0131nmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Finansal-Verilerin-ve-Kredi-Karti-Numaralarinin-Ele-Gecirilmesi\" >Finansal Verilerin ve Kredi Kart\u0131 Numaralar\u0131n\u0131n Ele Ge\u00e7irilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Oturum-Cerezlerinin-Session-Cookies-Kopyalanmasi-ve-Hesaplarin-Devralinmasi\" >Oturum \u00c7erezlerinin (Session Cookies) Kopyalanmas\u0131 ve Hesaplar\u0131n Devral\u0131nmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Iletisim-Iceriginin-Mesajlar-E-postalar-Okunmasi-ve-Degistirilmesi\" >\u0130leti\u015fim \u0130\u00e7eri\u011finin (Mesajlar, E-postalar) Okunmas\u0131 ve De\u011fi\u015ftirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Kullanici-Guveni-Kaybi-ve-Marka-Itibarinin-Zarar-Gormesi\" >Kullan\u0131c\u0131 G\u00fcveni Kayb\u0131 ve Marka \u0130tibar\u0131n\u0131n Zarar G\u00f6rmesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Son-Kullanicilar-Icin-Korunma-ve-Tespit-Yontemleri\" >Son Kullan\u0131c\u0131lar \u0130\u00e7in Korunma ve Tespit Y\u00f6ntemleri<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Adres-Cubugu-Farkindaligi-%E2%80%9CHTTPS%E2%80%9D-ve-Kilit-Simgesini-Daima-Kontrol-Etme\" >Adres \u00c7ubu\u011fu Fark\u0131ndal\u0131\u011f\u0131: &#8220;HTTPS&#8221; ve Kilit Simgesini Daima Kontrol Etme<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Halka-Acik-ve-Guvensiz-Wi-Fi-Aglarindan-Kacinma\" >Halka A\u00e7\u0131k ve G\u00fcvensiz Wi-Fi A\u011flar\u0131ndan Ka\u00e7\u0131nma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Sanal-Ozel-Ag-VPN-Kullaniminin-Onemi\" >Sanal \u00d6zel A\u011f (VPN) Kullan\u0131m\u0131n\u0131n \u00d6nemi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Guvenli-Baglantiyi-Zorlayan-Tarayici-Eklentileri-Orn-HTTPS-Everywhere\" >G\u00fcvenli Ba\u011flant\u0131y\u0131 Zorlayan Taray\u0131c\u0131 Eklentileri (\u00d6rn: HTTPS Everywhere)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Tarayicilarin-Guvenlik-Uyarilarini-Ciddiye-Alma\" >Taray\u0131c\u0131lar\u0131n G\u00fcvenlik Uyar\u0131lar\u0131n\u0131 Ciddiye Alma<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Web-Sitesi-Sahipleri-Icin-SSL-Strippinge-Karsi-Onlemler\" >Web Sitesi Sahipleri \u0130\u00e7in SSL Stripping&#8217;e Kar\u015f\u0131 \u00d6nlemler<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#En-Guclu-Savunma-HSTS-HTTP-Strict-Transport-Security-Nedir-ve-Nasil-Uygulanir\" >En G\u00fc\u00e7l\u00fc Savunma: HSTS (HTTP Strict Transport Security) Nedir ve Nas\u0131l Uygulan\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#HSTS-On-Yukleme-Preload-Listesine-Kayit-Olmanin-Avantajlari\" >HSTS \u00d6n Y\u00fckleme (Preload) Listesine Kay\u0131t Olman\u0131n Avantajlar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Sunucu-Tarafinda-Guvenli-Yonlendirmeler-301-Redirect-Yapilandirmasi\" >Sunucu Taraf\u0131nda G\u00fcvenli Y\u00f6nlendirmeler (301 Redirect) Yap\u0131land\u0131rmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Sitedeki-Tum-Iceriklerin-Resim-CSS-JavaScript-HTTPS-Uzerinden-Yuklenmesi\" >Sitedeki T\u00fcm \u0130\u00e7eriklerin (Resim, CSS, JavaScript) HTTPS \u00dczerinden Y\u00fcklenmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-31\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Guvenilir-ve-Dogru-Yapilandirilmis-bir-SSLTLS-Sertifikasi-Kullanimi\" >G\u00fcvenilir ve Do\u011fru Yap\u0131land\u0131r\u0131lm\u0131\u015f bir SSL\/TLS Sertifikas\u0131 Kullan\u0131m\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-32\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Saldirinin-Yaygin-Olarak-Goruldugu-Ortamlar\" >Sald\u0131r\u0131n\u0131n Yayg\u0131n Olarak G\u00f6r\u00fcld\u00fc\u011f\u00fc Ortamlar<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-33\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Kafeler-Havaalanlari-ve-Otellerdeki-Genel-Wi-Fi-Aglari\" >Kafeler, Havaalanlar\u0131 ve Otellerdeki Genel Wi-Fi A\u011flar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-34\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Guvenligi-Zayif-Ev-veya-Is-Yeri-Aglari\" >G\u00fcvenli\u011fi Zay\u0131f Ev veya \u0130\u015f Yeri A\u011flar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-35\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#ARP-Zehirlenmesi-ARP-Poisoning-ile-Yerel-Aglarda-Gerceklestirilen-Saldirilar\" >ARP Zehirlenmesi (ARP Poisoning) ile Yerel A\u011flarda Ger\u00e7ekle\u015ftirilen Sald\u0131r\u0131lar<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-36\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Guvenilir-SSL-Sertifikalari-ve-Web-Guvenligi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >G\u00fcvenilir SSL Sertifikalar\u0131 ve Web G\u00fcvenli\u011fi \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-37\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Farkli-Ihtiyaclara-Yonelik-Zengin-SSL-Sertifikasi-Secenekleri\" >Farkl\u0131 \u0130htiya\u00e7lara Y\u00f6nelik Zengin SSL Sertifikas\u0131 Se\u00e7enekleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-38\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Uzman-Teknik-Destek-ile-Hizli-ve-Sorunsuz-Kurulum\" >Uzman Teknik Destek ile H\u0131zl\u0131 ve Sorunsuz Kurulum<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-39\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Guncel-Guvenlik-Protokolleri-ve-Guclu-Sifreleme-Destegi\" >G\u00fcncel G\u00fcvenlik Protokolleri ve G\u00fc\u00e7l\u00fc \u015eifreleme Deste\u011fi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-40\" href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-stripping-downgrade-saldirisi-nedir\/#Musteri-Guvenini-ve-Marka-Degerini-Koruyan-Guvenlik-Cozumleri\" >M\u00fc\u015fteri G\u00fcvenini ve Marka De\u011ferini Koruyan G\u00fcvenlik \u00c7\u00f6z\u00fcmleri<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Guvenli-Internet-Iletisiminin-Temelleri\"><\/span>G\u00fcvenli \u0130nternet \u0130leti\u015fiminin Temelleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0130nternet \u00fczerinde veri al\u0131\u015fveri\u015fi yaparken g\u00fcvenli\u011fin nas\u0131l sa\u011fland\u0131\u011f\u0131n\u0131 anlamak, SSL Stripping gibi sald\u0131r\u0131lar\u0131 kavraman\u0131n ilk ad\u0131m\u0131d\u0131r. G\u00fcn\u00fcm\u00fczdeki g\u00fcvenli ileti\u015fimin temel ta\u015flar\u0131 olan HTTPS ve SSL\/TLS sertifikalar\u0131, kullan\u0131c\u0131 ile web sunucusu aras\u0131nda \u015fifreli bir koridor olu\u015fturarak verilerin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc temin eder. Bu teknolojiler olmadan, \u00e7evrimi\u00e7i yapt\u0131\u011f\u0131m\u0131z her i\u015flem \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar taraf\u0131ndan kolayca izlenebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HTTPS-Nedir-ve-Internet-Guvenligindeki-Rolu\"><\/span>HTTPS Nedir ve \u0130nternet G\u00fcvenli\u011findeki Rol\u00fc<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTPS (Hypertext Transfer Protocol Secure), standart HTTP protokol\u00fcn\u00fcn G\u00fcvenli Soket Katman\u0131 (SSL) veya Ta\u015f\u0131ma Katman\u0131 G\u00fcvenli\u011fi (TLS) ile \u015fifrelenmi\u015f halidir. Bir web sitesine HTTPS \u00fczerinden ba\u011fland\u0131\u011f\u0131n\u0131zda, taray\u0131c\u0131n\u0131z ile sunucu aras\u0131ndaki t\u00fcm veriler (form bilgileri, \u015fifreler, ki\u015fisel mesajlar) \u015fifrelenir. Bu \u015fifreleme, verilerinizi &#8220;Ortadaki Adam&#8221; (Man-in-the-Middle) sald\u0131r\u0131lar\u0131na kar\u015f\u0131 korur ve \u00fc\u00e7\u00fcnc\u00fc ki\u015filerin bu verileri okumas\u0131n\u0131 veya de\u011fi\u015ftirmesini engeller. Adres \u00e7ubu\u011fundaki kilit simgesi, bu g\u00fcvenli ba\u011flant\u0131n\u0131n aktif oldu\u011funun g\u00f6rsel bir teyididir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"SSLTLS-Sertifikalari-Dijital-Kimlik-ve-Sifreleme\"><\/span>SSL\/TLS Sertifikalar\u0131: Dijital Kimlik ve \u015eifreleme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTPS ba\u011flant\u0131s\u0131n\u0131n kurulabilmesi i\u00e7in web sunucusunun bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL<\/a>\/TLS sertifikas\u0131na sahip olmas\u0131 gerekir. Bu sertifikalar, bir web sitesinin kimli\u011fini do\u011frulayan dijital pasaportlar gibidir. Bir sertifika yetkilisi (Certificate Authority &#8211; CA) taraf\u0131ndan verilir ve sitenin belirtti\u011fi <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">alan ad\u0131<\/a> sahipli\u011fini do\u011frular. Taray\u0131c\u0131n\u0131z bir siteye ba\u011fland\u0131\u011f\u0131nda \u00f6nce bu sertifikay\u0131 kontrol eder. Sertifika ge\u00e7erliyse, taray\u0131c\u0131 ve sunucu aras\u0131nda g\u00fcvenli bir \u015fifreleme anahtar\u0131 de\u011fi\u015fimi yap\u0131l\u0131r ve korumal\u0131 oturum ba\u015flar. Bu s\u00fcre\u00e7, ba\u011fland\u0131\u011f\u0131n\u0131z sitenin sahte de\u011fil, ger\u00e7ek oldu\u011fundan emin olman\u0131z\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenli-HTTPS-ve-Guvensiz-HTTP-Baglanti-Arasindaki-Farklar\"><\/span>G\u00fcvenli (HTTPS) ve G\u00fcvensiz (HTTP) Ba\u011flant\u0131 Aras\u0131ndaki Farklar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTP ve HTTPS aras\u0131ndaki temel fark g\u00fcvenliktir. HTTP \u00fczerinden g\u00f6nderilen t\u00fcm veriler &#8220;d\u00fcz metin&#8221; (plain text) olarak, yani \u015fifresiz bir \u015fekilde iletilir. Bu durum, ayn\u0131 a\u011fdaki herhangi birinin bu trafi\u011fi kolayca yakalay\u0131p okuyabilmesi anlam\u0131na gelir. HTTPS ise t\u00fcm bu trafi\u011fi g\u00fc\u00e7l\u00fc algoritmalarla \u015fifreleyerek bu riski ortadan kald\u0131r\u0131r. Modern taray\u0131c\u0131lar, HTTP sitelerini &#8220;g\u00fcvenli de\u011fil&#8221; olarak i\u015faretleyerek kullan\u0131c\u0131lar\u0131 bu riske kar\u015f\u0131 uyar\u0131r.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6zellik<\/th>\n<th>HTTP (G\u00fcvensiz)<\/th>\n<th>HTTPS (G\u00fcvenli)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Protokol<\/strong><\/td>\n<td>Hypertext Transfer Protocol<\/td>\n<td>Hypertext Transfer Protocol Secure<\/td>\n<\/tr>\n<tr>\n<td><strong>Port<\/strong><\/td>\n<td>80<\/td>\n<td>443<\/td>\n<\/tr>\n<tr>\n<td><strong>Veri \u0130letimi<\/strong><\/td>\n<td>\u015eifresiz (D\u00fcz Metin)<\/td>\n<td>\u015eifreli (SSL\/TLS ile)<\/td>\n<\/tr>\n<tr>\n<td><strong>G\u00fcvenlik<\/strong><\/td>\n<td>D\u00fc\u015f\u00fck, MitM sald\u0131r\u0131lar\u0131na a\u00e7\u0131k<\/td>\n<td>Y\u00fcksek, veriler gizli ve b\u00fct\u00fcnl\u00fc\u011f\u00fc korunur<\/td>\n<\/tr>\n<tr>\n<td><strong>Taray\u0131c\u0131 G\u00f6stergesi<\/strong><\/td>\n<td>&#8220;G\u00fcvenli De\u011fil&#8221; uyar\u0131s\u0131<\/td>\n<td>Kilit simgesi<\/td>\n<\/tr>\n<tr>\n<td><strong>SEO Etkisi<\/strong><\/td>\n<td>Negatif (Arama motorlar\u0131 taraf\u0131ndan geri plana at\u0131l\u0131r)<\/td>\n<td>Pozitif (Google i\u00e7in bir s\u0131ralama fakt\u00f6r\u00fcd\u00fcr)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"SSL-Stripping-Saldirisina-Giris-Guvenli-Baglantinin-Zayiflatilmasi\"><\/span>SSL Stripping Sald\u0131r\u0131s\u0131na Giri\u015f: G\u00fcvenli Ba\u011flant\u0131n\u0131n Zay\u0131flat\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>SSL Stripping, ad\u0131ndan da anla\u015f\u0131laca\u011f\u0131 gibi, SSL\/TLS \u015fifrelemesini &#8220;soyan&#8221; veya &#8220;kald\u0131ran&#8221; bir sald\u0131r\u0131 t\u00fcr\u00fcd\u00fcr. Sald\u0131rgan, kullan\u0131c\u0131 ile web sunucusu aras\u0131na girerek, kullan\u0131c\u0131n\u0131n g\u00fcvenli HTTPS ba\u011flant\u0131s\u0131 kurma giri\u015fimini engeller. Bunun yerine, kullan\u0131c\u0131ya sitenin g\u00fcvensiz HTTP versiyonunu sunar. Kullan\u0131c\u0131, adres \u00e7ubu\u011funu dikkatli kontrol etmezse, g\u00fcvensiz bir ba\u011flant\u0131 \u00fczerinden i\u015flem yapt\u0131\u011f\u0131n\u0131 fark etmeyebilir. Bu esnada sald\u0131rgan, kullan\u0131c\u0131 ile sunucu aras\u0131ndaki t\u00fcm verileri okuyabilir ve de\u011fi\u015ftirebilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"SSL-Stripping-Saldirisinin-Anatomisi-Adim-Adim-Isleyis\"><\/span>SSL Stripping Sald\u0131r\u0131s\u0131n\u0131n Anatomisi: Ad\u0131m Ad\u0131m \u0130\u015fleyi\u015f<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSL Stripping sald\u0131r\u0131s\u0131n\u0131n ba\u015far\u0131s\u0131, sald\u0131rgan\u0131n kurban\u0131n a\u011f trafi\u011fini kendi \u00fczerinden ge\u00e7irebilmesine ba\u011fl\u0131d\u0131r. Bu genellikle &#8220;Ortadaki Adam&#8221; (Man-in-the-Middle) pozisyonu elde edilerek yap\u0131l\u0131r. Sald\u0131rgan bu konumu ele ge\u00e7irdikten sonra, g\u00fcvenli olmas\u0131 gereken ileti\u015fimi manip\u00fcle ederek \u015fifrelemeyi ortadan kald\u0131r\u0131r ve t\u00fcm veri ak\u0131\u015f\u0131n\u0131 savunmas\u0131z b\u0131rak\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirinin-Temeli-Ortadaki-Adam-Man-in-the-Middle-%E2%80%93-MitM-Konumu\"><\/span>Sald\u0131r\u0131n\u0131n Temeli: Ortadaki Adam (Man-in-the-Middle &#8211; MitM) Konumu<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ilk ve en kritik ad\u0131m\u0131, sald\u0131rgan\u0131n kurban ile internet aras\u0131nda bir k\u00f6pr\u00fc haline gelmesidir. Sald\u0131rgan, kurban\u0131n cihaz\u0131n\u0131n ve ba\u011fland\u0131\u011f\u0131 web sunucusunun aras\u0131na gizlice yerle\u015fir. Bu konum, genellikle halka a\u00e7\u0131k Wi-Fi a\u011flar\u0131nda sahte bir eri\u015fim noktas\u0131 (access point) olu\u015fturarak veya ARP Zehirlenmesi gibi tekniklerle yerel a\u011fdaki trafi\u011fi y\u00f6nlendirerek elde edilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirinin-Baslatilmasi-Trafik-Akisinin-Yonlendirilmesi\"><\/span>Sald\u0131r\u0131n\u0131n Ba\u015flat\u0131lmas\u0131: Trafik Ak\u0131\u015f\u0131n\u0131n Y\u00f6nlendirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>MitM konumuna ge\u00e7en sald\u0131rgan, kurban\u0131n cihaz\u0131ndan \u00e7\u0131kan t\u00fcm internet trafi\u011fini kendi bilgisayar\u0131 \u00fczerinden ge\u00e7ecek \u015fekilde yap\u0131land\u0131r\u0131r. Kurban\u0131n taray\u0131c\u0131s\u0131, bir web sitesine ba\u011flanmak istedi\u011finde, bu istek \u00f6nce sald\u0131rgan\u0131n sistemine ula\u015f\u0131r. Kurban bu durumun fark\u0131nda de\u011fildir \u00e7\u00fcnk\u00fc internet ba\u011flant\u0131s\u0131 normal bir \u015fekilde \u00e7al\u0131\u015f\u0131yor gibi g\u00f6r\u00fcn\u00fcr.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kullanicinin-HTTPS-Isteginin-Yakalanmasi\"><\/span>Kullan\u0131c\u0131n\u0131n HTTPS \u0130ste\u011finin Yakalanmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kullan\u0131c\u0131, taray\u0131c\u0131s\u0131na &#8220;bankam.com&#8221; gibi bir adres yazd\u0131\u011f\u0131nda, taray\u0131c\u0131 genellikle bu siteye g\u00fcvenli bir ba\u011flant\u0131 kurmak i\u00e7in bir HTTPS iste\u011fi (\u00f6rne\u011fin, `https:\/\/bankam.com`) g\u00f6ndermeye \u00e7al\u0131\u015f\u0131r veya siteye yap\u0131lan ilk HTTP iste\u011fi sunucu taraf\u0131ndan HTTPS&#8217;e y\u00f6nlendirilir. Sald\u0131rgan, tam bu noktada araya girer ve bu g\u00fcvenli ba\u011flant\u0131 talebini yakalar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirgan-ve-Sunucu-Arasinda-Guvenli-Bir-Tunel-Olusturulmasi\"><\/span>Sald\u0131rgan ve Sunucu Aras\u0131nda G\u00fcvenli Bir T\u00fcnel Olu\u015fturulmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, yakalad\u0131\u011f\u0131 HTTPS iste\u011fini kurban ad\u0131na hedef sunucuya iletir. Kendi bilgisayar\u0131 ile web sunucusu aras\u0131nda tamamen me\u015fru ve g\u00fcvenli bir HTTPS ba\u011flant\u0131s\u0131 kurar. Bu a\u015famada, web sunucusu, kar\u015f\u0131s\u0131ndakinin ger\u00e7ek kullan\u0131c\u0131 de\u011fil, sald\u0131rgan oldu\u011fundan habersizdir. Sunucu i\u00e7in her \u015fey normaldir ve g\u00fcvenli oturum ba\u015far\u0131yla ba\u015flat\u0131l\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucudan-Gelen-Guvenli-Yanitin-Degistirilmesi\"><\/span>Sunucudan Gelen G\u00fcvenli Yan\u0131t\u0131n De\u011fi\u015ftirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Web sunucusu, sald\u0131rgan\u0131n kurdu\u011fu g\u00fcvenli ba\u011flant\u0131 \u00fczerinden web sayfas\u0131n\u0131 (HTML, CSS, g\u00f6rseller vb.) g\u00f6nderir. Sald\u0131rgan, bu \u015fifreli yan\u0131t\u0131 al\u0131r, kendi sisteminde \u015fifresini \u00e7\u00f6zer ve i\u00e7eri\u011fi manip\u00fcle etmeye ba\u015flar. En kritik de\u011fi\u015fiklik, sayfadaki t\u00fcm `https:\/\/` linklerini `http:\/\/` olarak de\u011fi\u015ftirmektir. B\u00f6ylece sayfa i\u00e7indeki di\u011fer linklere t\u0131kland\u0131\u011f\u0131nda da ba\u011flant\u0131n\u0131n g\u00fcvensiz kalmas\u0131 sa\u011flan\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kullaniciya-Guvensiz-HTTP-Sayfasinin-Sunulmasi\"><\/span>Kullan\u0131c\u0131ya G\u00fcvensiz HTTP Sayfas\u0131n\u0131n Sunulmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, \u015fifresini \u00e7\u00f6zd\u00fc\u011f\u00fc ve linklerini de\u011fi\u015ftirdi\u011fi web sayfas\u0131n\u0131 kurbana g\u00fcvensiz bir HTTP ba\u011flant\u0131s\u0131 \u00fczerinden g\u00f6nderir. Kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131, adres \u00e7ubu\u011funda &#8220;http:\/\/bankam.com&#8221; adresini ve &#8220;G\u00fcvenli De\u011fil&#8221; uyar\u0131s\u0131n\u0131 g\u00f6sterir. Ancak bir\u00e7ok kullan\u0131c\u0131 bu k\u00fc\u00e7\u00fck detay\u0131 fark etmez ve siteyi normal \u015fekilde kullanmaya devam eder.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Iki-Yonlu-Veri-Akisinin-Gizlice-Izlenmesi\"><\/span>\u0130ki Y\u00f6nl\u00fc Veri Ak\u0131\u015f\u0131n\u0131n Gizlice \u0130zlenmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu noktadan sonra sald\u0131r\u0131 tamamlanm\u0131\u015ft\u0131r. Kurban, g\u00fcvensiz HTTP sitesi \u00fczerinden kullan\u0131c\u0131 ad\u0131, \u015fifre, kredi kart\u0131 bilgisi gibi verileri girdi\u011finde, bu bilgiler sald\u0131rgan\u0131n sistemi \u00fczerinden d\u00fcz metin olarak ge\u00e7er. Sald\u0131rgan bu verileri kolayca kopyalar ve ard\u0131ndan hedef sunucuya kendi kurdu\u011fu g\u00fcvenli HTTPS t\u00fcneli \u00fczerinden iletir. Site normal \u00e7al\u0131\u015ft\u0131\u011f\u0131 i\u00e7in kurban hi\u00e7bir \u015feyden \u015f\u00fcphelenmez. Sald\u0131rgan, bu iki y\u00f6nl\u00fc trafi\u011fi oturum sonlanana kadar izleyebilir ve manip\u00fcle edebilir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"SSL-Stripping-Saldirisinin-Riskleri-ve-Olasi-Zararlari\"><\/span>SSL Stripping Sald\u0131r\u0131s\u0131n\u0131n Riskleri ve Olas\u0131 Zararlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSL Stripping, kurban\u0131n en hassas bilgilerini savunmas\u0131z b\u0131rakan son derece tehlikeli bir sald\u0131r\u0131d\u0131r. Ba\u015far\u0131l\u0131 bir sald\u0131r\u0131n\u0131n sonu\u00e7lar\u0131, basit bir veri s\u0131z\u0131nt\u0131s\u0131ndan tam te\u015fekk\u00fcll\u00fc kimlik h\u0131rs\u0131zl\u0131\u011f\u0131na ve finansal doland\u0131r\u0131c\u0131l\u0131\u011fa kadar uzanabilir. Hem bireysel kullan\u0131c\u0131lar hem de kurumlar i\u00e7in ciddi riskler bar\u0131nd\u0131r\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Giris-Bilgilerinin-Kullanici-Adi-ve-Sifre-Calinmasi\"><\/span>Giri\u015f Bilgilerinin (Kullan\u0131c\u0131 Ad\u0131 ve \u015eifre) \u00c7al\u0131nmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n en yayg\u0131n hedefi, giri\u015f bilgileridir. Sosyal medya hesaplar\u0131, e-posta servisleri, bankac\u0131l\u0131k siteleri ve di\u011fer \u00e7evrimi\u00e7i platformlara giri\u015f yaparken kullan\u0131lan kullan\u0131c\u0131 ad\u0131 ve \u015fifre kombinasyonlar\u0131, HTTP \u00fczerinden \u015fifresiz olarak g\u00f6nderildi\u011fi i\u00e7in sald\u0131rgan taraf\u0131ndan an\u0131nda ele ge\u00e7irilir. Bu bilgiler daha sonra hesaplar\u0131 ele ge\u00e7irmek veya di\u011fer platformlarda denemek i\u00e7in kullan\u0131labilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Finansal-Verilerin-ve-Kredi-Karti-Numaralarinin-Ele-Gecirilmesi\"><\/span>Finansal Verilerin ve Kredi Kart\u0131 Numaralar\u0131n\u0131n Ele Ge\u00e7irilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>E-ticaret sitelerinde veya online \u00f6deme sistemlerinde ger\u00e7ekle\u015ftirilen bir SSL Stripping sald\u0131r\u0131s\u0131, kurban\u0131n kredi kart\u0131 numaras\u0131, son kullanma tarihi, CVV kodu ve fatura adresi gibi kritik finansal verilerin \u00e7al\u0131nmas\u0131na yol a\u00e7ar. Bu bilgilerle doland\u0131r\u0131c\u0131l\u0131k ama\u00e7l\u0131 harcamalar yap\u0131labilir veya veriler karanl\u0131k a\u011fda (dark web) sat\u0131labilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Oturum-Cerezlerinin-Session-Cookies-Kopyalanmasi-ve-Hesaplarin-Devralinmasi\"><\/span>Oturum \u00c7erezlerinin (Session Cookies) Kopyalanmas\u0131 ve Hesaplar\u0131n Devral\u0131nmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kullan\u0131c\u0131 bir sitede oturum a\u00e7t\u0131\u011f\u0131nda, sunucu kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131na bir &#8220;oturum \u00e7erezi&#8221; b\u0131rak\u0131r. Bu \u00e7erez, kullan\u0131c\u0131n\u0131n kimli\u011fini do\u011frular ve her sayfada yeniden \u015fifre girmesini engeller. SSL Stripping s\u0131ras\u0131nda sald\u0131rgan, bu \u00e7erezleri de ele ge\u00e7irebilir. \u00c7erezi kendi taray\u0131c\u0131s\u0131na kopyalayarak, kurban\u0131n aktif oturumunu devralabilir (session hijacking) ve parola bilmese bile hesaba tam eri\u015fim sa\u011flayabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Iletisim-Iceriginin-Mesajlar-E-postalar-Okunmasi-ve-Degistirilmesi\"><\/span>\u0130leti\u015fim \u0130\u00e7eri\u011finin (Mesajlar, E-postalar) Okunmas\u0131 ve De\u011fi\u015ftirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan sadece verileri okumakla kalmaz, ayn\u0131 zamanda de\u011fi\u015ftirebilir. \u00d6rne\u011fin, bir i\u015f e-postas\u0131ndaki banka hesap numaras\u0131n\u0131 kendi hesap numaras\u0131yla de\u011fi\u015ftirebilir veya iki ki\u015fi aras\u0131ndaki \u00f6zel bir mesajla\u015fman\u0131n i\u00e7eri\u011fini manip\u00fcle ederek yanl\u0131\u015f bilgilendirme yapabilir. Bu durum, hem ki\u015fisel hem de kurumsal d\u00fczeyde ciddi anla\u015fmazl\u0131klara ve zararlara yol a\u00e7abilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kullanici-Guveni-Kaybi-ve-Marka-Itibarinin-Zarar-Gormesi\"><\/span>Kullan\u0131c\u0131 G\u00fcveni Kayb\u0131 ve Marka \u0130tibar\u0131n\u0131n Zarar G\u00f6rmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Web sitesi sahipleri i\u00e7in SSL Stripping sald\u0131r\u0131s\u0131n\u0131n en b\u00fcy\u00fck zararlar\u0131ndan biri marka itibar\u0131d\u0131r. Bir kullan\u0131c\u0131n\u0131n sitesinde bu t\u00fcr bir sald\u0131r\u0131ya maruz kalmas\u0131, \u015firketin g\u00fcvenli\u011fine olan inanc\u0131 sarsar. M\u00fc\u015fteriler, verilerinin korunamad\u0131\u011f\u0131n\u0131 d\u00fc\u015f\u00fcnd\u00fckleri bir platformu kullanmaktan \u00e7ekinirler. Bu durum, m\u00fc\u015fteri kayb\u0131na, gelir d\u00fc\u015f\u00fc\u015f\u00fcne ve uzun vadede onar\u0131lmas\u0131 zor bir itibar zedelenmesine neden olur.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Son-Kullanicilar-Icin-Korunma-ve-Tespit-Yontemleri\"><\/span>Son Kullan\u0131c\u0131lar \u0130\u00e7in Korunma ve Tespit Y\u00f6ntemleri<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSL Stripping sald\u0131r\u0131lar\u0131 sinsi olsa da, dikkatli ve bilin\u00e7li kullan\u0131c\u0131lar taraf\u0131ndan tespit edilebilir ve engellenebilir. G\u00fcvenli internet al\u0131\u015fkanl\u0131klar\u0131 edinmek, bu t\u00fcr tehditlere kar\u015f\u0131 en etkili ki\u015fisel savunma hatt\u0131n\u0131 olu\u015fturur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Adres-Cubugu-Farkindaligi-%E2%80%9CHTTPS%E2%80%9D-ve-Kilit-Simgesini-Daima-Kontrol-Etme\"><\/span>Adres \u00c7ubu\u011fu Fark\u0131ndal\u0131\u011f\u0131: &#8220;HTTPS&#8221; ve Kilit Simgesini Daima Kontrol Etme<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>En temel ve en \u00f6nemli kural, taray\u0131c\u0131n\u0131n adres \u00e7ubu\u011funu s\u00fcrekli kontrol etmektir. \u00d6zellikle \u015fifre, ki\u015fisel bilgi veya \u00f6deme bilgisi girece\u011finiz sitelerde adresin &#8220;https:\/\/&#8221; ile ba\u015flad\u0131\u011f\u0131ndan ve yan\u0131nda kapal\u0131 bir kilit simgesi oldu\u011fundan emin olun. E\u011fer bir site normalde HTTPS iken aniden HTTP&#8217;ye d\u00fc\u015ferse veya kilit simgesi kaybolursa, bu bir sald\u0131r\u0131 belirtisi olabilir. Derhal siteden \u00e7\u0131k\u0131n ve bilgi girmeyin.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Halka-Acik-ve-Guvensiz-Wi-Fi-Aglarindan-Kacinma\"><\/span>Halka A\u00e7\u0131k ve G\u00fcvensiz Wi-Fi A\u011flar\u0131ndan Ka\u00e7\u0131nma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kafeler, havaalanlar\u0131, oteller gibi halka a\u00e7\u0131k yerlerdeki \u015fifresiz veya zay\u0131f \u015fifreli Wi-Fi a\u011flar\u0131, SSL Stripping sald\u0131r\u0131lar\u0131 i\u00e7in en riskli ortamlard\u0131r. Sald\u0131rganlar bu a\u011flarda kolayca &#8220;Ortadaki Adam&#8221; konumuna ge\u00e7ebilir. Bu t\u00fcr a\u011flardayken bankac\u0131l\u0131k i\u015flemleri yapmak, \u00f6nemli hesaplara giri\u015f yapmak gibi hassas i\u015flemlerden ka\u00e7\u0131nmak en do\u011frusudur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sanal-Ozel-Ag-VPN-Kullaniminin-Onemi\"><\/span>Sanal \u00d6zel A\u011f (VPN) Kullan\u0131m\u0131n\u0131n \u00d6nemi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>VPN (Virtual Private Network), cihaz\u0131n\u0131z ile internet aras\u0131nda \u015fifreli bir t\u00fcnel olu\u015fturur. Halka a\u00e7\u0131k bir Wi-Fi a\u011f\u0131na ba\u011flansan\u0131z bile, VPN kulland\u0131\u011f\u0131n\u0131zda t\u00fcm trafi\u011finiz bu g\u00fcvenli t\u00fcnel i\u00e7inden ge\u00e7er. Bu durum, yerel a\u011fdaki bir sald\u0131rgan\u0131n trafi\u011finizi g\u00f6rmesini ve SSL Stripping gibi sald\u0131r\u0131lar ger\u00e7ekle\u015ftirmesini neredeyse imkans\u0131z hale getirir. G\u00fcvenlik i\u00e7in g\u00fcvenilir bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/vpn-nedir-ne-ise-yarar\/\" target=\"_blank\">VPN hizmeti<\/a> kullanmak g\u00fc\u00e7l\u00fc bir \u00f6nlemdir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenli-Baglantiyi-Zorlayan-Tarayici-Eklentileri-Orn-HTTPS-Everywhere\"><\/span>G\u00fcvenli Ba\u011flant\u0131y\u0131 Zorlayan Taray\u0131c\u0131 Eklentileri (\u00d6rn: HTTPS Everywhere)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HTTPS Everywhere gibi taray\u0131c\u0131 eklentileri, web sitelerinin g\u00fcvenli s\u00fcr\u00fcmleri mevcutsa sizi otomatik olarak HTTPS versiyonuna y\u00f6nlendirir. Bu eklentiler, bir sitenin hem HTTP hem de HTTPS versiyonu oldu\u011funda, sald\u0131rgan\u0131n sizi HTTP versiyonuna d\u00fc\u015f\u00fcrme giri\u015fimini bo\u015fa \u00e7\u0131karabilir. Taray\u0131c\u0131n\u0131z\u0131n kendi ayarlar\u0131nda da &#8220;Her zaman g\u00fcvenli ba\u011flant\u0131 kullan&#8221; gibi se\u00e7enekler bulunabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Tarayicilarin-Guvenlik-Uyarilarini-Ciddiye-Alma\"><\/span>Taray\u0131c\u0131lar\u0131n G\u00fcvenlik Uyar\u0131lar\u0131n\u0131 Ciddiye Alma<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Modern taray\u0131c\u0131lar, ge\u00e7ersiz veya sahte SSL sertifikalar\u0131 gibi g\u00fcvenlik risklerini tespit etti\u011finde tam ekran uyar\u0131lar g\u00f6sterir. &#8220;Ba\u011flant\u0131n\u0131z gizli de\u011fil&#8221; veya &#8220;Bu siteye ba\u011flant\u0131 g\u00fcvenli de\u011fil&#8221; gibi uyar\u0131lar\u0131 asla g\u00f6z ard\u0131 etmeyin. Bu uyar\u0131lar genellikle potansiyel bir &#8220;Ortadaki Adam&#8221; sald\u0131r\u0131s\u0131n\u0131n veya ba\u015fka bir ciddi g\u00fcvenlik sorununun habercisidir. &#8220;Yine de devam et&#8221; se\u00e7ene\u011fine t\u0131klamak yerine sayfay\u0131 kapatmak en g\u00fcvenli yoldur.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Web-Sitesi-Sahipleri-Icin-SSL-Strippinge-Karsi-Onlemler\"><\/span>Web Sitesi Sahipleri \u0130\u00e7in SSL Stripping&#8217;e Kar\u015f\u0131 \u00d6nlemler<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Kullan\u0131c\u0131lar\u0131 koruma sorumlulu\u011fu sadece son kullan\u0131c\u0131lara ait de\u011fildir. Web sitesi sahiplerinin sunucu taraf\u0131nda alaca\u011f\u0131 proaktif \u00f6nlemler, SSL Stripping sald\u0131r\u0131lar\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde etkisiz hale getirebilir. Do\u011fru yap\u0131land\u0131r\u0131lm\u0131\u015f bir web sunucusu, bu t\u00fcr sald\u0131r\u0131lara kar\u015f\u0131 en g\u00fc\u00e7l\u00fc kalkand\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"En-Guclu-Savunma-HSTS-HTTP-Strict-Transport-Security-Nedir-ve-Nasil-Uygulanir\"><\/span>En G\u00fc\u00e7l\u00fc Savunma: HSTS (HTTP Strict Transport Security) Nedir ve Nas\u0131l Uygulan\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HSTS, SSL Stripping&#8217;e kar\u015f\u0131 en etkili savunma mekanizmas\u0131d\u0131r. Bir web sunucusunun taray\u0131c\u0131ya &#8220;Bu siteye yaln\u0131zca HTTPS \u00fczerinden ba\u011flan&#8221; talimat\u0131n\u0131 vermesini sa\u011flayan bir g\u00fcvenlik politikas\u0131d\u0131r. Bir kullan\u0131c\u0131 sitenizi ilk kez ziyaret etti\u011finde, sunucunuz taray\u0131c\u0131ya bir HSTS ba\u015fl\u0131\u011f\u0131 (header) g\u00f6nderir. Taray\u0131c\u0131 bu bilgiyi kaydeder ve belirlenen s\u00fcre boyunca (genellikle 6 ay veya 1 y\u0131l) o siteye yap\u0131lacak t\u00fcm ba\u011flant\u0131lar\u0131 otomatik olarak HTTPS&#8217;e zorlar. Bu sayede, sald\u0131rgan\u0131n kullan\u0131c\u0131y\u0131 HTTP&#8217;ye d\u00fc\u015f\u00fcrme giri\u015fimi, daha istek a\u011fa \u00e7\u0131kmadan taray\u0131c\u0131 taraf\u0131ndan engellenmi\u015f olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"HSTS-On-Yukleme-Preload-Listesine-Kayit-Olmanin-Avantajlari\"><\/span>HSTS \u00d6n Y\u00fckleme (Preload) Listesine Kay\u0131t Olman\u0131n Avantajlar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HSTS&#8217;nin tek zay\u0131f noktas\u0131, kullan\u0131c\u0131n\u0131n siteyi ilk kez ziyaret etti\u011fi and\u0131r. Sald\u0131rgan bu ilk ziyareti yakalarsa, taray\u0131c\u0131 daha HSTS politikas\u0131n\u0131 \u00f6\u011frenemeden sald\u0131r\u0131y\u0131 ger\u00e7ekle\u015ftirebilir. HSTS Preload Listesi bu zafiyeti kapat\u0131r. Google taraf\u0131ndan y\u00f6netilen bu listeye sitenizi kaydettirdi\u011finizde, alan ad\u0131n\u0131z Chrome, Firefox, Safari gibi b\u00fcy\u00fck taray\u0131c\u0131lar\u0131n kaynak koduna do\u011frudan eklenir. Bu sayede, kullan\u0131c\u0131 sitenizi hayat\u0131nda ilk kez ziyaret etse bile, taray\u0131c\u0131 o siteye sadece HTTPS ile ba\u011flan\u0131lmas\u0131 gerekti\u011fini en ba\u015f\u0131ndan bilir ve hi\u00e7bir zaman HTTP iste\u011fi g\u00f6ndermez. Bir sitenin g\u00fc\u00e7l\u00fc bir <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">hosting<\/a> altyap\u0131s\u0131 \u00fczerinde HSTS Preload ile korunmas\u0131, g\u00fcvenli\u011fi en \u00fcst seviyeye \u00e7\u0131kar\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucu-Tarafinda-Guvenli-Yonlendirmeler-301-Redirect-Yapilandirmasi\"><\/span>Sunucu Taraf\u0131nda G\u00fcvenli Y\u00f6nlendirmeler (301 Redirect) Yap\u0131land\u0131rmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>HSTS kullan\u0131ls\u0131n ya da kullan\u0131lmas\u0131n, sitenize gelen t\u00fcm HTTP isteklerini kal\u0131c\u0131 olarak (301 Redirect) HTTPS versiyonuna y\u00f6nlendirmek standart bir en iyi uygulamad\u0131r. Bu y\u00f6nlendirme, sunucu yap\u0131land\u0131rma dosyalar\u0131 (.htaccess, nginx.conf vb.) \u00fczerinden yap\u0131l\u0131r. Bu sayede, bir kullan\u0131c\u0131 yanl\u0131\u015fl\u0131kla veya eski bir link \u00fczerinden sitenize HTTP ile eri\u015fmeye \u00e7al\u0131\u015fsa bile, an\u0131nda g\u00fcvenli kanala \u00e7ekilir. \u00d6rne\u011fin, bir <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/wordpress-hosting.html\" target=\"_blank\">WordPress hosting<\/a> hizmeti kullan\u0131yorsan\u0131z bu y\u00f6nlendirmeyi eklentiler veya sunucu paneli arac\u0131l\u0131\u011f\u0131yla kolayca yapabilirsiniz.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sitedeki-Tum-Iceriklerin-Resim-CSS-JavaScript-HTTPS-Uzerinden-Yuklenmesi\"><\/span>Sitedeki T\u00fcm \u0130\u00e7eriklerin (Resim, CSS, JavaScript) HTTPS \u00dczerinden Y\u00fcklenmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir sayfan\u0131n kendisi HTTPS olsa bile, i\u00e7erisindeki baz\u0131 \u00f6\u011feler (resimler, stil dosyalar\u0131, script&#8217;ler) HTTP \u00fczerinden y\u00fckleniyorsa, bu duruma &#8220;karma i\u00e7erik&#8221; (mixed content) denir. Karma i\u00e7erik, sayfan\u0131n g\u00fcvenli\u011fini zay\u0131flat\u0131r ve taray\u0131c\u0131da kilit simgesinin kaybolmas\u0131na veya bir uyar\u0131 g\u00f6r\u00fcnt\u00fclenmesine neden olur. Sald\u0131rganlar bu g\u00fcvensiz \u00f6\u011feler \u00fczerinden sayfaya zararl\u0131 kod enjekte edebilir. Bu nedenle, web sitenizdeki t\u00fcm kaynaklar\u0131n (i\u00e7 ve d\u0131\u015f) g\u00f6receli yollarla veya do\u011frudan HTTPS URL&#8217;leri ile \u00e7a\u011fr\u0131ld\u0131\u011f\u0131ndan emin olmal\u0131s\u0131n\u0131z.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>\u00d6nlem<\/th>\n<th>HSTS Olmayan Site<\/th>\n<th>HSTS + Preload Aktif Site<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>\u0130lk Ziyaret<\/strong><\/td>\n<td>Sald\u0131rgan HTTP&#8217;ye d\u00fc\u015f\u00fcrebilir.<\/td>\n<td>Taray\u0131c\u0131 do\u011frudan HTTPS&#8217;e zorlar, sald\u0131r\u0131 imkans\u0131z.<\/td>\n<\/tr>\n<tr>\n<td><strong>Sonraki Ziyaretler<\/strong><\/td>\n<td>301 y\u00f6nlendirmesi varsa g\u00fcvenli, yoksa riskli.<\/td>\n<td>Taray\u0131c\u0131 her zaman HTTPS&#8217;e zorlar, sald\u0131r\u0131 imkans\u0131z.<\/td>\n<\/tr>\n<tr>\n<td><strong>Taray\u0131c\u0131 Davran\u0131\u015f\u0131<\/strong><\/td>\n<td>HTTP iste\u011fi g\u00f6nderebilir.<\/td>\n<td>HTTP iste\u011fi asla g\u00f6ndermez, t\u00fcm\u00fcn\u00fc HTTPS&#8217;e \u00e7evirir.<\/td>\n<\/tr>\n<tr>\n<td><strong>G\u00fcvenlik Seviyesi<\/strong><\/td>\n<td>D\u00fc\u015f\u00fck \/ Orta<\/td>\n<td>En Y\u00fcksek<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h3><span class=\"ez-toc-section\" id=\"Guvenilir-ve-Dogru-Yapilandirilmis-bir-SSLTLS-Sertifikasi-Kullanimi\"><\/span>G\u00fcvenilir ve Do\u011fru Yap\u0131land\u0131r\u0131lm\u0131\u015f bir SSL\/TLS Sertifikas\u0131 Kullan\u0131m\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kulland\u0131\u011f\u0131n\u0131z <a href=\"https:\/\/www.ihs.com.tr\/ssl-sertifikasi-nedir-ne-ise-yarar-ve-nasil-calisir\/\" target=\"_blank\">SSL sertifikas\u0131<\/a>, g\u00fcvenilir bir Sertifika Otoritesi&#8217;nden (CA) al\u0131nmal\u0131 ve s\u00fcresinin dolmam\u0131\u015f olmas\u0131 gerekir. Ayr\u0131ca, sunucunuzun en g\u00fcncel ve g\u00fcvenli TLS protokollerini (\u00f6rn: TLS 1.2, TLS 1.3) ve g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131n\u0131 destekleyecek \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131 kritik \u00f6neme sahiptir. Zay\u0131f veya eski protokoller, farkl\u0131 t\u00fcrden \u015fifreleme sald\u0131r\u0131lar\u0131na kap\u0131 aralayabilir. G\u00fcvenilir bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> hizmeti, bu yap\u0131land\u0131rmalar\u0131n do\u011fru bir \u015fekilde yap\u0131lmas\u0131n\u0131 sa\u011flar.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Saldirinin-Yaygin-Olarak-Goruldugu-Ortamlar\"><\/span>Sald\u0131r\u0131n\u0131n Yayg\u0131n Olarak G\u00f6r\u00fcld\u00fc\u011f\u00fc Ortamlar<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>SSL Stripping sald\u0131r\u0131lar\u0131 teorik bir tehdit de\u011fildir; belirli ortamlarda olduk\u00e7a pratik ve yayg\u0131n bir sald\u0131r\u0131 vekt\u00f6r\u00fcd\u00fcr. Sald\u0131rganlar\u0131n &#8220;Ortadaki Adam&#8221; konumunu kolayca elde edebildi\u011fi a\u011flar, bu sald\u0131r\u0131 i\u00e7in en verimli zeminlerdir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kafeler-Havaalanlari-ve-Otellerdeki-Genel-Wi-Fi-Aglari\"><\/span>Kafeler, Havaalanlar\u0131 ve Otellerdeki Genel Wi-Fi A\u011flar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu sald\u0131r\u0131n\u0131n en s\u0131k g\u00f6r\u00fcld\u00fc\u011f\u00fc yerler, halka a\u00e7\u0131k ve genellikle \u015fifresiz olan Wi-Fi a\u011flar\u0131d\u0131r. Sald\u0131rgan, &#8220;\u00dccretsiz Kafe WiFi&#8221; gibi me\u015fru g\u00f6r\u00fcnen sahte bir Wi-Fi a\u011f\u0131 olu\u015fturabilir. Kullan\u0131c\u0131lar bu a\u011fa ba\u011fland\u0131\u011f\u0131nda, t\u00fcm trafikleri do\u011frudan sald\u0131rgan\u0131n kontrol\u00fcndeki bir cihaz \u00fczerinden ge\u00e7er. Sald\u0131rgan, bu noktadan sonra SSL Stripping&#8217;i kolayca uygulayabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenligi-Zayif-Ev-veya-Is-Yeri-Aglari\"><\/span>G\u00fcvenli\u011fi Zay\u0131f Ev veya \u0130\u015f Yeri A\u011flar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sadece halka a\u00e7\u0131k a\u011flar de\u011fil, ayn\u0131 zamanda g\u00fcvenli\u011fi zay\u0131f \u00f6zel a\u011flar da risk alt\u0131ndad\u0131r. Varsay\u0131lan parolas\u0131 de\u011fi\u015ftirilmemi\u015f veya eski ve zay\u0131f bir \u015fifreleme standard\u0131 (WEP gibi) kullanan Wi-Fi modemleri, bir sald\u0131rgan\u0131n a\u011fa s\u0131zmas\u0131na olanak tan\u0131r. A\u011fa s\u0131zan sald\u0131rgan, di\u011fer cihazlara y\u00f6nelik sald\u0131r\u0131lar ba\u015flatabilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"ARP-Zehirlenmesi-ARP-Poisoning-ile-Yerel-Aglarda-Gerceklestirilen-Saldirilar\"><\/span>ARP Zehirlenmesi (ARP Poisoning) ile Yerel A\u011flarda Ger\u00e7ekle\u015ftirilen Sald\u0131r\u0131lar<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kablolu veya kablosuz yerel a\u011flarda (LAN) SSL Stripping ger\u00e7ekle\u015ftirmek i\u00e7in kullan\u0131lan en yayg\u0131n tekniklerden biri ARP Zehirlenmesi&#8217;dir. Sald\u0131rgan, a\u011fdaki di\u011fer cihazlara ve modeme (gateway) sahte ARP paketleri g\u00f6nderir. Bu paketler, a\u011fdaki cihazlara &#8220;modem benim&#8221; ve modeme de &#8220;a\u011fdaki di\u011fer t\u00fcm cihazlar benim&#8221; mesaj\u0131n\u0131 verir. Sonu\u00e7 olarak, a\u011fdaki t\u00fcm trafik sald\u0131rgan\u0131n bilgisayar\u0131 \u00fczerinden akmaya ba\u015flar ve sald\u0131rgan &#8220;Ortadaki Adam&#8221; konumunu elde etmi\u015f olur.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Guvenilir-SSL-Sertifikalari-ve-Web-Guvenligi-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>G\u00fcvenilir SSL Sertifikalar\u0131 ve Web G\u00fcvenli\u011fi \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Web sitenizin ve kullan\u0131c\u0131lar\u0131n\u0131z\u0131n g\u00fcvenli\u011fini sa\u011flamak, dijital varl\u0131\u011f\u0131n\u0131z\u0131n temelini olu\u015fturur. SSL Stripping gibi geli\u015fmi\u015f tehditlere kar\u015f\u0131 korunman\u0131n ilk ad\u0131m\u0131, do\u011fru ve g\u00fcvenilir bir SSL sertifikas\u0131 kullanmaktan ge\u00e7er. \u0130HS Telekom, bu noktada i\u015fletmenizin ihtiya\u00e7lar\u0131na y\u00f6nelik kapsaml\u0131 ve g\u00fcvenilir \u00e7\u00f6z\u00fcmler sunar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Farkli-Ihtiyaclara-Yonelik-Zengin-SSL-Sertifikasi-Secenekleri\"><\/span>Farkl\u0131 \u0130htiya\u00e7lara Y\u00f6nelik Zengin SSL Sertifikas\u0131 Se\u00e7enekleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130ster ki\u015fisel bir blog, ister b\u00fcy\u00fck bir e-ticaret platformu y\u00f6netiyor olun, \u0130HS Telekom&#8217;un geni\u015f \u00fcr\u00fcn yelpazesi i\u00e7inde ihtiyac\u0131n\u0131za uygun bir \u00e7\u00f6z\u00fcm mutlaka bulunur. Alan Ad\u0131 Do\u011frulamal\u0131 (DV), Kurumsal Do\u011frulamal\u0131 (OV) ve Geni\u015fletilmi\u015f Do\u011frulamal\u0131 (EV) sertifikalardan, birden \u00e7ok alt alan ad\u0131n\u0131 koruyan Wildcard sertifikalar\u0131na kadar zengin se\u00e7enekler sunarak her \u00f6l\u00e7ekteki web projesinin g\u00fcvenlik ihtiyac\u0131n\u0131 kar\u015f\u0131lar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Uzman-Teknik-Destek-ile-Hizli-ve-Sorunsuz-Kurulum\"><\/span>Uzman Teknik Destek ile H\u0131zl\u0131 ve Sorunsuz Kurulum<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir SSL sertifikas\u0131 sat\u0131n almak kadar, onu do\u011fru bir \u015fekilde kurmak ve yap\u0131land\u0131rmak da \u00f6nemlidir. \u0130HS Telekom&#8217;un deneyimli teknik destek ekibi, sertifikan\u0131z\u0131n <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vds-sunucu.html\" target=\"_blank\">VDS<\/a> veya <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">VPS<\/a> gibi sunucular\u0131n\u0131za h\u0131zl\u0131 ve hatas\u0131z bir \u015fekilde kurulmas\u0131 s\u00fcrecinde size yard\u0131mc\u0131 olur. Olas\u0131 yap\u0131land\u0131rma sorunlar\u0131n\u0131 \u00f6nleyerek web sitenizin en k\u0131sa s\u00fcrede g\u00fcvenli hale gelmesini sa\u011flarlar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guncel-Guvenlik-Protokolleri-ve-Guclu-Sifreleme-Destegi\"><\/span>G\u00fcncel G\u00fcvenlik Protokolleri ve G\u00fc\u00e7l\u00fc \u015eifreleme Deste\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom taraf\u0131ndan sunulan SSL sertifikalar\u0131, end\u00fcstri standard\u0131 olan en g\u00fcncel g\u00fcvenlik protokollerini ve 256-bit gibi g\u00fc\u00e7l\u00fc \u015fifreleme standartlar\u0131n\u0131 destekler. Bu, sitenizin sadece g\u00fcncel tehditlere kar\u015f\u0131 de\u011fil, ayn\u0131 zamanda gelecekte ortaya \u00e7\u0131kabilecek zafiyetlere kar\u015f\u0131 da dayan\u0131kl\u0131 olmas\u0131n\u0131 sa\u011flar. Sunucu g\u00fcvenli\u011finizin en \u00fcst d\u00fczeyde tutulmas\u0131na olanak tan\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Musteri-Guvenini-ve-Marka-Degerini-Koruyan-Guvenlik-Cozumleri\"><\/span>M\u00fc\u015fteri G\u00fcvenini ve Marka De\u011ferini Koruyan G\u00fcvenlik \u00c7\u00f6z\u00fcmleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Web sitenizde g\u00fcvenilir bir SSL sertifikas\u0131 kullanmak, m\u00fc\u015fterilerinize verilerinin g\u00fcvende oldu\u011fu mesaj\u0131n\u0131 verir. Bu, \u00f6zellikle online \u00f6deme veya ki\u015fisel bilgi toplayan siteler i\u00e7in kritik bir g\u00fcven unsurudur. \u0130HS Telekom&#8217;un sundu\u011fu g\u00fcvenlik \u00e7\u00f6z\u00fcmleriyle marka itibar\u0131n\u0131z\u0131 koruyabilir, m\u00fc\u015fteri sadakatini art\u0131rabilir ve dijital d\u00fcnyada g\u00fcvenle b\u00fcy\u00fcyebilirsiniz. <a href=\"https:\/\/www.ihs.com.tr\/kurumsal\/iletisim.html\" target=\"_blank\">\u0130leti\u015fim<\/a> kanallar\u0131ndan uzman ekibe ula\u015farak projeniz i\u00e7in en do\u011fru g\u00fcvenlik \u00e7\u00f6z\u00fcm\u00fcn\u00fc bulabilirsiniz.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dijital d\u00fcnyada g\u00fcvenli bir \u015fekilde gezinmek, hem ki\u015fisel verilerimizi korumak hem de \u00e7evrimi\u00e7i i\u015flemlerimizi emniyete almak i\u00e7in hayati \u00f6nem ta\u015f\u0131r. Taray\u0131c\u0131n\u0131z\u0131n adres&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16648,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[400],"tags":[],"class_list":["post-16647","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ssl-sertifikasi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16647","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16647"}],"version-history":[{"count":1,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16647\/revisions"}],"predecessor-version":[{"id":16649,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16647\/revisions\/16649"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16648"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}