{"id":16693,"date":"2026-10-13T15:10:20","date_gmt":"2026-10-13T12:10:20","guid":{"rendered":"https:\/\/www.ihs.com.tr\/blog\/?p=16693"},"modified":"2026-10-13T15:10:20","modified_gmt":"2026-10-13T12:10:20","slug":"freak-saldirisi-nedir","status":"publish","type":"post","link":"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/","title":{"rendered":"FREAK Sald\u0131r\u0131s\u0131 Nedir? Taray\u0131c\u0131lar\u0131n Zay\u0131f \u015eifrelemeye Zorlanmas\u0131 ile Veriler Nas\u0131l \u00c7al\u0131nd\u0131?"},"content":{"rendered":"<p>\u0130nternet g\u00fcvenli\u011fi, s\u00fcrekli bir evrim ve m\u00fccadele alan\u0131d\u0131r. Bazen, ge\u00e7mi\u015fte al\u0131nan ve o g\u00fcn\u00fcn \u015fartlar\u0131nda mant\u0131kl\u0131 g\u00f6r\u00fcnen kararlar, y\u0131llar sonra beklenmedik ve ciddi g\u00fcvenlik zafiyetlerine yol a\u00e7abilir. FREAK sald\u0131r\u0131s\u0131, tam olarak bu durumun en \u00e7arp\u0131c\u0131 \u00f6rneklerinden biridir. Bir zamanlar yasal bir zorunluluk olan &#8220;zay\u0131f \u015fifreleme&#8221; standard\u0131n\u0131n, nas\u0131l modern taray\u0131c\u0131lar\u0131 ve milyonlarca kullan\u0131c\u0131y\u0131 riske atabildi\u011fini g\u00f6zler \u00f6n\u00fcne seren bu sald\u0131r\u0131, dijital d\u00fcnyan\u0131n ne kadar k\u0131r\u0131lgan olabilece\u011finin ve eski teknolojilerin &#8220;kriptografik bor\u00e7&#8221; olarak nas\u0131l kar\u015f\u0131m\u0131za \u00e7\u0131kabilece\u011finin alt\u0131n\u0131 \u00e7izmektedir. Bu makalede, FREAK sald\u0131r\u0131s\u0131n\u0131n ne oldu\u011funu, tarihsel k\u00f6kenlerini, teknik i\u015fleyi\u015fini ve bu t\u00fcr tehditlere kar\u015f\u0131 nas\u0131l korunabilece\u011fimizi detayl\u0131 bir \u015fekilde inceleyece\u011fiz.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7erik Tablosu<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6ace4de8e24a4\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\" id=\"ez-toc-cssicon-toggle-item-6ace4de8e24a4\" aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#FREAK-Saldirisina-Genel-Bakis\" >FREAK Sald\u0131r\u0131s\u0131na Genel Bak\u0131\u015f<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#FREAK-Saldirisi-Nedir\" >FREAK Sald\u0131r\u0131s\u0131 Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#%E2%80%9CFREAK%E2%80%9D-Kisaltmasinin-Acilimi-Factoring-attack-on-RSA-EXPORT-Keys\" >&#8220;FREAK&#8221; K\u0131saltmas\u0131n\u0131n A\u00e7\u0131l\u0131m\u0131: Factoring attack on RSA-EXPORT Keys<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Saldirinin-Temel-Mantigi-Sifrelemeyi-Zayiflatmaya-Zorlama\" >Sald\u0131r\u0131n\u0131n Temel Mant\u0131\u011f\u0131: \u015eifrelemeyi Zay\u0131flatmaya Zorlama<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Zafiyetin-Tarihsel-Arka-Plani-Ihracat-Sinifi-Kriptografi\" >Zafiyetin Tarihsel Arka Plan\u0131: \u0130hracat S\u0131n\u0131f\u0131 Kriptografi<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#ABDnin-Kriptografi-Ihracat-Kisitlamalari-ve-Gecmisi\" >ABD&#8217;nin Kriptografi \u0130hracat K\u0131s\u0131tlamalar\u0131 ve Ge\u00e7mi\u015fi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#%E2%80%9CExport-Grade%E2%80%9D-Sifreleme-Nedir-ve-Neden-Zayiftir\" >&#8220;Export-Grade&#8221; \u015eifreleme Nedir ve Neden Zay\u0131ft\u0131r?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Eski-Yasal-Duzenlemelerin-Modern-Internet-Guvenligine-Etkileri\" >Eski Yasal D\u00fczenlemelerin Modern \u0130nternet G\u00fcvenli\u011fine Etkileri<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Saldiri-Vektorunun-Teknik-Detaylari-Adim-Adim-Isleyis\" >Sald\u0131r\u0131 Vekt\u00f6r\u00fcn\u00fcn Teknik Detaylar\u0131: Ad\u0131m Ad\u0131m \u0130\u015fleyi\u015f<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Adim-1-Man-in-the-Middle-Ortadaki-Adam-Konumunun-Elde-Edilmesi\" >Ad\u0131m 1: Man-in-the-Middle (Ortadaki Adam) Konumunun Elde Edilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Adim-2-Tarayicinin-TLS-Baglanti-Isteginin-Degistirilmesi\" >Ad\u0131m 2: Taray\u0131c\u0131n\u0131n TLS Ba\u011flant\u0131 \u0130ste\u011finin De\u011fi\u015ftirilmesi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Adim-3-Sunucunun-Zayif-%E2%80%9CExport-Grade%E2%80%9D-RSA-Anahtari-ile-Yanit-Vermeye-Zorlanmasi\" >Ad\u0131m 3: Sunucunun Zay\u0131f &#8220;Export-Grade&#8221; RSA Anahtar\u0131 ile Yan\u0131t Vermeye Zorlanmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Adim-4-512-bitlik-Zayif-Anahtarin-Kisa-Surede-Kirilmasi\" >Ad\u0131m 4: 512-bit&#8217;lik Zay\u0131f Anahtar\u0131n K\u0131sa S\u00fcrede K\u0131r\u0131lmas\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Adim-5-Oturum-Anahtarinin-Calinmasi-ve-Veri-Trafiginin-Desifre-Edilmesi\" >Ad\u0131m 5: Oturum Anahtar\u0131n\u0131n \u00c7al\u0131nmas\u0131 ve Veri Trafi\u011finin De\u015fifre Edilmesi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#FREAK-Saldirisinin-Etki-Alani-ve-Sonuclari\" >FREAK Sald\u0131r\u0131s\u0131n\u0131n Etki Alan\u0131 ve Sonu\u00e7lar\u0131<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Etkilenen-Tarayicilar-ve-Yazilimlar-Apple-Safari-Google-Chrome-OpenSSL\" >Etkilenen Taray\u0131c\u0131lar ve Yaz\u0131l\u0131mlar (Apple Safari, Google Chrome, OpenSSL)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Zafiyetli-Olan-Populer-Web-Siteleri-ve-Sunucular\" >Zafiyetli Olan Pop\u00fcler Web Siteleri ve Sunucular<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Kullanicilar-Icin-Riskler-Oturum-Calma-Sifre-Hirsizligi-Veri-Sizintisi\" >Kullan\u0131c\u0131lar \u0130\u00e7in Riskler: Oturum \u00c7alma, \u015eifre H\u0131rs\u0131zl\u0131\u011f\u0131, Veri S\u0131z\u0131nt\u0131s\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#FREAK-Saldirisina-Karsi-Korunma-Yontemleri-ve-Cozumler\" >FREAK Sald\u0131r\u0131s\u0131na Kar\u015f\u0131 Korunma Y\u00f6ntemleri ve \u00c7\u00f6z\u00fcmler<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Son-Kullanicilar-Icin-Alinmasi-Gereken-Onlemler\" >Son Kullan\u0131c\u0131lar \u0130\u00e7in Al\u0131nmas\u0131 Gereken \u00d6nlemler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Web-Sitesi-Sahipleri-ve-Sistem-Yoneticileri-Icin-Cozumler\" >Web Sitesi Sahipleri ve Sistem Y\u00f6neticileri \u0130\u00e7in \u00c7\u00f6z\u00fcmler<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#FREAKten-Cikarilacak-Dersler-ve-Internet-Guvenligine-Etkisi\" >FREAK&#8217;ten \u00c7\u0131kar\u0131lacak Dersler ve \u0130nternet G\u00fcvenli\u011fine Etkisi<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#%E2%80%9CDowngrade%E2%80%9D-Surum-Dusurme-Saldirilarinin-Kalici-Tehdidi\" >&#8220;Downgrade&#8221; (S\u00fcr\u00fcm D\u00fc\u015f\u00fcrme) Sald\u0131r\u0131lar\u0131n\u0131n Kal\u0131c\u0131 Tehdidi<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Kriptografik-Borc-Eski-ve-Zayif-Teknolojilerin-Mirasi\" >Kriptografik Bor\u00e7: Eski ve Zay\u0131f Teknolojilerin Miras\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Guclu-ve-Modern-Kriptografinin-Vazgecilmezligi\" >G\u00fc\u00e7l\u00fc ve Modern Kriptografinin Vazge\u00e7ilmezli\u011fi<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Web-Guvenligi-ve-SSL-Sertifikalari-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\" >Web G\u00fcvenli\u011fi ve SSL Sertifikalar\u0131 \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#En-Guncel-ve-Guclu-Sifreleme-Algoritmalarini-Destekleyen-SSL-Sertifikalari\" >En G\u00fcncel ve G\u00fc\u00e7l\u00fc \u015eifreleme Algoritmalar\u0131n\u0131 Destekleyen SSL Sertifikalar\u0131<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Sunucu-Yapilandirmasi-icin-Uzman-Teknik-Destek-ve-Danismanlik\" >Sunucu Yap\u0131land\u0131rmas\u0131 i\u00e7in Uzman Teknik Destek ve Dan\u0131\u015fmanl\u0131k<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Zafiyetlere-Karsi-Proaktif-Bilgilendirme-ve-Guvenlik-Cozumleri\" >Zafiyetlere Kar\u015f\u0131 Proaktif Bilgilendirme ve G\u00fcvenlik \u00c7\u00f6z\u00fcmleri<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-30\" href=\"https:\/\/www.ihs.com.tr\/blog\/freak-saldirisi-nedir\/#Guvenligin-Surekliligi-Icin-Kolay-Yonetim-ve-Otomatik-Yenileme-Secenekleri\" >G\u00fcvenli\u011fin S\u00fcreklili\u011fi \u0130\u00e7in Kolay Y\u00f6netim ve Otomatik Yenileme Se\u00e7enekleri<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"FREAK-Saldirisina-Genel-Bakis\"><\/span>FREAK Sald\u0131r\u0131s\u0131na Genel Bak\u0131\u015f<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FREAK sald\u0131r\u0131s\u0131, 2015 y\u0131l\u0131nda ortaya \u00e7\u0131kar\u0131lan ve internetin temel g\u00fcvenlik protokollerinden biri olan SSL\/TLS \u00fczerinde ciddi bir tehdit olu\u015fturan bir zafiyettir. Bu sald\u0131r\u0131, temelde, g\u00fcvenli bir ba\u011flant\u0131 kurmaya \u00e7al\u0131\u015fan istemci (taray\u0131c\u0131) ve sunucuyu, kas\u0131tl\u0131 olarak zay\u0131f ve kolayca k\u0131r\u0131labilir bir \u015fifreleme standard\u0131 kullanmaya zorlayarak aradaki veri trafi\u011finin de\u015fifre edilmesine olanak tan\u0131r. Sald\u0131r\u0131n\u0131n merkezinde, ge\u00e7mi\u015fte kalm\u0131\u015f kriptografik politikalar\u0131n g\u00fcn\u00fcm\u00fcz sistemlerindeki kal\u0131nt\u0131lar\u0131 yatmaktad\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"FREAK-Saldirisi-Nedir\"><\/span>FREAK Sald\u0131r\u0131s\u0131 Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>FREAK, bir &#8220;downgrade&#8221; (s\u00fcr\u00fcm d\u00fc\u015f\u00fcrme) sald\u0131r\u0131s\u0131 t\u00fcr\u00fcd\u00fcr. Sald\u0131rgan, istemci ile sunucu aras\u0131na girerek (Man-in-the-Middle), taraflar\u0131n g\u00fc\u00e7l\u00fc ve modern \u015fifreleme algoritmalar\u0131 yerine, bilerek zay\u0131flat\u0131lm\u0131\u015f ve g\u00fcn\u00fcm\u00fcz i\u015flem g\u00fcc\u00fcyle k\u0131sa s\u00fcrede k\u0131r\u0131labilen eski bir \u015fifreleme t\u00fcr\u00fcn\u00fc kullanmas\u0131n\u0131 sa\u011flar. Bu ba\u015far\u0131ld\u0131\u011f\u0131nda, g\u00fcvenli oldu\u011fu varsay\u0131lan HTTPS ba\u011flant\u0131s\u0131 etkisiz hale gelir ve sald\u0131rgan, kullan\u0131c\u0131 ad\u0131, \u015fifre, kredi kart\u0131 bilgileri gibi hassas verileri ele ge\u00e7irebilir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"%E2%80%9CFREAK%E2%80%9D-Kisaltmasinin-Acilimi-Factoring-attack-on-RSA-EXPORT-Keys\"><\/span>&#8220;FREAK&#8221; K\u0131saltmas\u0131n\u0131n A\u00e7\u0131l\u0131m\u0131: Factoring attack on RSA-EXPORT Keys<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ad\u0131, teknik i\u015fleyi\u015fini \u00f6zetleyen bir k\u0131saltmad\u0131r. &#8220;Factoring attack on RSA-EXPORT Keys&#8221;, T\u00fcrk\u00e7esiyle &#8220;RSA-\u0130HRACAT Anahtarlar\u0131 \u00dczerinde \u00c7arpanlara Ay\u0131rma Sald\u0131r\u0131s\u0131&#8221; anlam\u0131na gelir. Burada &#8220;RSA&#8221;, yayg\u0131n olarak kullan\u0131lan bir asimetrik \u015fifreleme algoritmas\u0131d\u0131r. &#8220;EXPORT&#8221; (ihracat) kelimesi, zafiyetin kalbinde yatan tarihsel bir detaya, yani ABD&#8217;nin bir zamanlar yurt d\u0131\u015f\u0131na g\u00fc\u00e7l\u00fc kriptografi yaz\u0131l\u0131mlar\u0131n\u0131n sat\u0131\u015f\u0131n\u0131 k\u0131s\u0131tlamas\u0131na at\u0131fta bulunur. &#8220;Factoring&#8221; (\u00e7arpanlara ay\u0131rma) ise, bu zay\u0131f anahtarlar\u0131 k\u0131rmak i\u00e7in kullan\u0131lan matematiksel y\u00f6ntemi ifade eder.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Saldirinin-Temel-Mantigi-Sifrelemeyi-Zayiflatmaya-Zorlama\"><\/span>Sald\u0131r\u0131n\u0131n Temel Mant\u0131\u011f\u0131: \u015eifrelemeyi Zay\u0131flatmaya Zorlama<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>FREAK sald\u0131r\u0131s\u0131n\u0131n temel felsefesi olduk\u00e7a basittir: E\u011fer g\u00fc\u00e7l\u00fc bir kilidi k\u0131ram\u0131yorsan, hedefi kand\u0131rarak onun yerine pasl\u0131 ve zay\u0131f bir kilit kullanmas\u0131n\u0131 sa\u011fla. Normal bir TLS el s\u0131k\u0131\u015fmas\u0131 (handshake) s\u0131ras\u0131nda, taray\u0131c\u0131 ve sunucu, her ikisinin de destekledi\u011fi en g\u00fc\u00e7l\u00fc \u015fifreleme paketini (cipher suite) kullanmak \u00fczere anla\u015f\u0131r. FREAK sald\u0131rgan\u0131 bu s\u00fcrece m\u00fcdahale eder. Taray\u0131c\u0131n\u0131n g\u00fc\u00e7l\u00fc \u015fifreleme talebini gizlice de\u011fi\u015ftirerek, sunucudan art\u0131k g\u00fcvenli olmayan, 512-bit&#8217;lik &#8220;ihracat s\u0131n\u0131f\u0131&#8221; bir RSA anahtar\u0131 talep etmesini sa\u011flar. E\u011fer sunucu bu eski ve zay\u0131f standard\u0131 hala destekliyorsa, istemeden tuza\u011fa d\u00fc\u015fer ve sald\u0131rgan\u0131n kolayca k\u0131rabilece\u011fi bir anahtar g\u00f6nderir.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Zafiyetin-Tarihsel-Arka-Plani-Ihracat-Sinifi-Kriptografi\"><\/span>Zafiyetin Tarihsel Arka Plan\u0131: \u0130hracat S\u0131n\u0131f\u0131 Kriptografi<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FREAK zafiyetini tam olarak anlamak i\u00e7in, internetin ilk y\u0131llar\u0131na ve So\u011fuk Sava\u015f d\u00f6neminin sonlar\u0131na uzanan bir tarih yolculu\u011fu yapmak gerekir. Bu sald\u0131r\u0131, do\u011frudan 1990&#8217;larda ABD h\u00fck\u00fcmeti taraf\u0131ndan uygulanan ve ulusal g\u00fcvenlik gerek\u00e7elerine dayanan kriptografi ihracat k\u0131s\u0131tlamalar\u0131n\u0131n bir miras\u0131d\u0131r. Bu politikalar, g\u00fcn\u00fcm\u00fczdeki bir\u00e7ok g\u00fcvenlik sorununun istemeden de olsa tohumlar\u0131n\u0131 ekmi\u015ftir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"ABDnin-Kriptografi-Ihracat-Kisitlamalari-ve-Gecmisi\"><\/span>ABD&#8217;nin Kriptografi \u0130hracat K\u0131s\u0131tlamalar\u0131 ve Ge\u00e7mi\u015fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>1990&#8217;larda ABD h\u00fck\u00fcmeti, g\u00fc\u00e7l\u00fc \u015fifreleme teknolojilerini bir &#8220;m\u00fchimmat&#8221; olarak s\u0131n\u0131fland\u0131r\u0131yordu ve bu teknolojilerin yabanc\u0131 g\u00fc\u00e7lerin veya ter\u00f6rist gruplar\u0131n eline ge\u00e7mesini \u00f6nlemek istiyordu. Bu nedenle, Amerikan \u015firketlerinin (\u00f6rne\u011fin Netscape ve Microsoft) yurt d\u0131\u015f\u0131na satt\u0131klar\u0131 yaz\u0131l\u0131mlarda kullan\u0131labilecek \u015fifreleme g\u00fcc\u00fcne kat\u0131 s\u0131n\u0131rlamalar getirildi. Bu d\u00fczenlemeler, ABD d\u0131\u015f\u0131ndaki kullan\u0131c\u0131lara sunulan yaz\u0131l\u0131mlar\u0131n, ABD i\u00e7inde kullan\u0131lan versiyonlara g\u00f6re \u00e7ok daha zay\u0131f kriptografik anahtarlar kullanmas\u0131n\u0131 zorunlu k\u0131l\u0131yordu.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"%E2%80%9CExport-Grade%E2%80%9D-Sifreleme-Nedir-ve-Neden-Zayiftir\"><\/span>&#8220;Export-Grade&#8221; \u015eifreleme Nedir ve Neden Zay\u0131ft\u0131r?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>&#8220;Export-Grade&#8221; (\u0130hracat S\u0131n\u0131f\u0131) \u015fifreleme, bu yasal k\u0131s\u0131tlamalara uymak i\u00e7in \u00f6zel olarak tasarlanm\u0131\u015f, kas\u0131tl\u0131 olarak zay\u0131flat\u0131lm\u0131\u015f bir kriptografi standard\u0131d\u0131r. Bu standart, genellikle 512-bit RSA anahtarlar\u0131 gibi o d\u00f6nemin teknolojisiyle bile k\u0131r\u0131lmas\u0131 m\u00fcmk\u00fcn olan, ancak b\u00fcy\u00fck bir devletin kaynaklar\u0131 olmadan k\u0131r\u0131lamayaca\u011f\u0131 d\u00fc\u015f\u00fcn\u00fclen bir seviyedeydi. Ancak i\u015flem g\u00fcc\u00fcndeki devasa art\u0131\u015flar (Moore Yasas\u0131), 512-bit&#8217;lik bir anahtar\u0131 saatler i\u00e7inde ve nispeten d\u00fc\u015f\u00fck maliyetli bulut bili\u015fim kaynaklar\u0131yla k\u0131r\u0131labilir hale getirdi. Bu durum, bir zamanlar &#8220;yeterince g\u00fcvenli&#8221; kabul edilen bu standard\u0131, modern siber sald\u0131rganlar i\u00e7in kolay bir hedef haline getirdi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Eski-Yasal-Duzenlemelerin-Modern-Internet-Guvenligine-Etkileri\"><\/span>Eski Yasal D\u00fczenlemelerin Modern \u0130nternet G\u00fcvenli\u011fine Etkileri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>ABD&#8217;nin kriptografi ihracat yasalar\u0131 2000&#8217;li y\u0131llar\u0131n ba\u015f\u0131nda b\u00fcy\u00fck \u00f6l\u00e7\u00fcde gev\u015fetilmi\u015f olsa da, yaratt\u0131klar\u0131 hasar kal\u0131c\u0131 oldu. Milyonlarca sat\u0131r kodda ve say\u0131s\u0131z yaz\u0131l\u0131m k\u00fct\u00fcphanesinde &#8220;export-grade&#8221; \u015fifreleme paketlerini destekleme yetene\u011fi bir kal\u0131nt\u0131 olarak varl\u0131\u011f\u0131n\u0131 s\u00fcrd\u00fcrd\u00fc. Geli\u015ftiriciler genellikle geriye d\u00f6n\u00fck uyumlulu\u011fu korumak veya eski kod tabanlar\u0131n\u0131 temizlemenin maliyetinden ka\u00e7\u0131nmak i\u00e7in bu zay\u0131f algoritmalar\u0131 devre d\u0131\u015f\u0131 b\u0131rakmad\u0131lar. \u0130\u015fte FREAK sald\u0131r\u0131s\u0131, tam da bu &#8220;unutulmu\u015f&#8221; ve savunmas\u0131z b\u0131rak\u0131lm\u0131\u015f kap\u0131y\u0131 kullanarak, modern sistemleri 20 y\u0131l \u00f6ncesinin g\u00fcvenlik standartlar\u0131na geri d\u00f6nmeye zorlam\u0131\u015ft\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Saldiri-Vektorunun-Teknik-Detaylari-Adim-Adim-Isleyis\"><\/span>Sald\u0131r\u0131 Vekt\u00f6r\u00fcn\u00fcn Teknik Detaylar\u0131: Ad\u0131m Ad\u0131m \u0130\u015fleyi\u015f<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FREAK sald\u0131r\u0131s\u0131, istemci ve sunucu aras\u0131ndaki g\u00fcvenli ileti\u015fim kanal\u0131n\u0131 ele ge\u00e7irmek i\u00e7in dikkatlice planlanm\u0131\u015f birka\u00e7 ad\u0131mdan olu\u015fur. Sald\u0131rgan\u0131n ortadaki adam (Man-in-the-Middle) olarak konumlanmas\u0131yla ba\u015flayan s\u00fcre\u00e7, hedeflenen veri trafi\u011finin tamamen de\u015fifre edilmesiyle sonu\u00e7lan\u0131r. Bu s\u00fcrecin her ad\u0131m\u0131, TLS protokol\u00fcn\u00fcn ve eski kriptografik standartlar\u0131n zay\u0131fl\u0131klar\u0131n\u0131 istismar eder.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Adim-1-Man-in-the-Middle-Ortadaki-Adam-Konumunun-Elde-Edilmesi\"><\/span>Ad\u0131m 1: Man-in-the-Middle (Ortadaki Adam) Konumunun Elde Edilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131r\u0131n\u0131n ilk ve en \u00f6nemli ad\u0131m\u0131, sald\u0131rgan\u0131n kurban\u0131n (istemci) ve hedef sunucunun aras\u0131na s\u0131zmas\u0131d\u0131r. Bu genellikle halka a\u00e7\u0131k Wi-Fi a\u011flar\u0131, sahte eri\u015fim noktalar\u0131 (evil twin) veya ele ge\u00e7irilmi\u015f a\u011f cihazlar\u0131 (router, switch) \u00fczerinden ger\u00e7ekle\u015ftirilir. Sald\u0131rgan bu pozisyonu elde etti\u011finde, kurban\u0131n internet trafi\u011fini g\u00f6rme ve de\u011fi\u015ftirme yetene\u011fine sahip olur. Bu a\u015fama, sald\u0131r\u0131n\u0131n geri kalan\u0131n\u0131 m\u00fcmk\u00fcn k\u0131lan temel ad\u0131md\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Adim-2-Tarayicinin-TLS-Baglanti-Isteginin-Degistirilmesi\"><\/span>Ad\u0131m 2: Taray\u0131c\u0131n\u0131n TLS Ba\u011flant\u0131 \u0130ste\u011finin De\u011fi\u015ftirilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kurban\u0131n taray\u0131c\u0131s\u0131, g\u00fcvenli bir web sitesine (\u00f6rne\u011fin, banka.com) ba\u011flanmaya \u00e7al\u0131\u015ft\u0131\u011f\u0131nda, sunucuya destekledi\u011fi \u015fifreleme paketlerinin bir listesini i\u00e7eren bir &#8220;ClientHello&#8221; mesaj\u0131 g\u00f6nderir. Bu listede normalde AES-256 gibi g\u00fc\u00e7l\u00fc ve modern algoritmalar bulunur. Ortadaki adam konumundaki sald\u0131rgan bu iste\u011fi yakalar ve g\u00fc\u00e7l\u00fc \u015fifreleme paketlerini listeden silerek yerine sadece zay\u0131f &#8220;export-grade&#8221; cipher suite&#8217;leri ekler. B\u00f6ylece sunucuya, taray\u0131c\u0131n\u0131n yaln\u0131zca zay\u0131f \u015fifrelemeyi destekledi\u011fi yalan\u0131 s\u00f6ylenmi\u015f olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Adim-3-Sunucunun-Zayif-%E2%80%9CExport-Grade%E2%80%9D-RSA-Anahtari-ile-Yanit-Vermeye-Zorlanmasi\"><\/span>Ad\u0131m 3: Sunucunun Zay\u0131f &#8220;Export-Grade&#8221; RSA Anahtar\u0131 ile Yan\u0131t Vermeye Zorlanmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>E\u011fer hedef sunucu, ge\u00e7mi\u015ften kalma bir al\u0131\u015fkanl\u0131kla veya yanl\u0131\u015f yap\u0131land\u0131rma nedeniyle hala &#8220;export-grade&#8221; \u015fifreleme paketlerini destekliyorsa, de\u011fi\u015ftirilmi\u015f bu iste\u011fi ge\u00e7erli kabul eder. Sunucu, taray\u0131c\u0131n\u0131n sadece bunu destekledi\u011fini d\u00fc\u015f\u00fcnerek, pazarl\u0131\u011f\u0131 kabul eder ve yan\u0131t olarak 512-bit&#8217;lik zay\u0131f bir RSA ortak anahtar\u0131 ve bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/\" target=\"_blank\">SSL sertifikas\u0131<\/a> ile &#8220;ServerHello&#8221; mesaj\u0131n\u0131 g\u00f6nderir. Bu noktada, hem istemci hem de sunucu, sald\u0131rgan\u0131n tuza\u011f\u0131na d\u00fc\u015fm\u00fc\u015f ve zay\u0131f bir \u015fifreleme standard\u0131 \u00fczerinde anla\u015fm\u0131\u015f olur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Adim-4-512-bitlik-Zayif-Anahtarin-Kisa-Surede-Kirilmasi\"><\/span>Ad\u0131m 4: 512-bit&#8217;lik Zay\u0131f Anahtar\u0131n K\u0131sa S\u00fcrede K\u0131r\u0131lmas\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sald\u0131rgan, sunucunun g\u00f6nderdi\u011fi 512-bit&#8217;lik RSA anahtar\u0131n\u0131 yakalar. G\u00fcn\u00fcm\u00fcz\u00fcn i\u015flem g\u00fcc\u00fcyle bu anahtar olduk\u00e7a zay\u0131ft\u0131r. Sald\u0131rgan, Amazon EC2 gibi bulut bili\u015fim servislerini kullanarak bu anahtar\u0131 birka\u00e7 saat i\u00e7inde ve yakla\u015f\u0131k 100 dolarl\u0131k bir maliyetle k\u0131rabilir. Anahtar k\u0131r\u0131ld\u0131\u011f\u0131nda, sald\u0131rgan sunucunun \u00f6zel anahtar\u0131n\u0131 (private key) elde etmi\u015f olur. Bu, \u015fifreli ileti\u015fimin kilidini a\u00e7an anahtard\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Adim-5-Oturum-Anahtarinin-Calinmasi-ve-Veri-Trafiginin-Desifre-Edilmesi\"><\/span>Ad\u0131m 5: Oturum Anahtar\u0131n\u0131n \u00c7al\u0131nmas\u0131 ve Veri Trafi\u011finin De\u015fifre Edilmesi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>TLS el s\u0131k\u0131\u015fmas\u0131n\u0131n devam\u0131nda, taray\u0131c\u0131 sunucunun ortak anahtar\u0131n\u0131 kullanarak simetrik bir &#8220;oturum anahtar\u0131&#8221; (session key) olu\u015fturur ve bunu \u015fifreleyerek sunucuya g\u00f6nderir. Sald\u0131rgan, bir \u00f6nceki ad\u0131mda sunucunun \u00f6zel anahtar\u0131n\u0131 ele ge\u00e7irdi\u011fi i\u00e7in, taray\u0131c\u0131n\u0131n g\u00f6nderdi\u011fi bu \u015fifreli mesaj\u0131 \u00e7\u00f6zebilir ve oturum anahtar\u0131n\u0131 \u00e7alabilir. Bu oturum anahtar\u0131, o anki ileti\u015fim seans\u0131ndaki t\u00fcm verileri (kullan\u0131c\u0131 adlar\u0131, \u015fifreler, form verileri) \u015fifrelemek i\u00e7in kullan\u0131l\u0131r. Art\u0131k sald\u0131rgan bu anahtara sahip oldu\u011fu i\u00e7in, kurban ve sunucu aras\u0131ndaki t\u00fcm veri trafi\u011fini ger\u00e7ek zamanl\u0131 olarak okuyabilir ve de\u011fi\u015ftirebilir.<\/p>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Ad\u0131m<\/th>\n<th>Sald\u0131rgan\u0131n Eylemi<\/th>\n<th>\u0130stemci (Taray\u0131c\u0131) Taraf\u0131ndaki Durum<\/th>\n<th>Sunucu Taraf\u0131ndaki Durum<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>1. Konumlanma<\/strong><\/td>\n<td>A\u011fa s\u0131zar ve ortadaki adam olur.<\/td>\n<td>G\u00fcvenli bir a\u011fda oldu\u011funu d\u00fc\u015f\u00fcn\u00fcr.<\/td>\n<td>Normal \u015fekilde ba\u011flant\u0131lar\u0131 bekler.<\/td>\n<\/tr>\n<tr>\n<td><strong>2. \u0130stek De\u011fi\u015ftirme<\/strong><\/td>\n<td>G\u00fc\u00e7l\u00fc \u015fifreleme taleplerini siler, zay\u0131f olanlar\u0131 ekler.<\/td>\n<td>G\u00fc\u00e7l\u00fc \u015fifreleme talep etti\u011fini san\u0131r.<\/td>\n<td>De\u011fi\u015ftirilmi\u015f, zay\u0131f bir talep al\u0131r.<\/td>\n<\/tr>\n<tr>\n<td><strong>3. Yan\u0131ta Zorlama<\/strong><\/td>\n<td>Sunucunun zay\u0131f yan\u0131t\u0131n\u0131 bekler.<\/td>\n<td>Sunucudan gelen zay\u0131f anahtar\u0131 kabul eder (zafiyetli ise).<\/td>\n<td>Sadece zay\u0131f \u015fifreleme desteklendi\u011fini d\u00fc\u015f\u00fcnerek 512-bit anahtar g\u00f6nderir.<\/td>\n<\/tr>\n<tr>\n<td><strong>4. Anahtar K\u0131rma<\/strong><\/td>\n<td>512-bit RSA anahtar\u0131n\u0131 yakalar ve k\u0131rar.<\/td>\n<td>\u0130leti\u015fimin g\u00fcvenli oldu\u011funu varsayar.<\/td>\n<td>\u0130leti\u015fimin g\u00fcvenli oldu\u011funu varsayar.<\/td>\n<\/tr>\n<tr>\n<td><strong>5. De\u015fifre Etme<\/strong><\/td>\n<td>Oturum anahtar\u0131n\u0131 \u00e7alar ve t\u00fcm trafi\u011fi okur.<\/td>\n<td>Hassas verileri g\u00f6nderir.<\/td>\n<td>Hassas verileri g\u00f6nderir.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"FREAK-Saldirisinin-Etki-Alani-ve-Sonuclari\"><\/span>FREAK Sald\u0131r\u0131s\u0131n\u0131n Etki Alan\u0131 ve Sonu\u00e7lar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FREAK zafiyeti ortaya \u00e7\u0131kt\u0131\u011f\u0131nda, internet ekosisteminde geni\u015f bir etki yaratt\u0131. Sadece belirli bir yaz\u0131l\u0131m veya platformla s\u0131n\u0131rl\u0131 kalmay\u0131p, hem istemci taraf\u0131ndaki pop\u00fcler taray\u0131c\u0131lar\u0131 hem de sunucu taraf\u0131ndaki yayg\u0131n olarak kullan\u0131lan kriptografi k\u00fct\u00fcphanelerini etkiledi. Bu durum, milyonlarca kullan\u0131c\u0131y\u0131 ve \u00e7ok say\u0131da pop\u00fcler web sitesini potansiyel bir risk alt\u0131na soktu.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Etkilenen-Tarayicilar-ve-Yazilimlar-Apple-Safari-Google-Chrome-OpenSSL\"><\/span>Etkilenen Taray\u0131c\u0131lar ve Yaz\u0131l\u0131mlar (Apple Safari, Google Chrome, OpenSSL)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Zafiyetin en endi\u015fe verici y\u00f6nlerinden biri, en yayg\u0131n kullan\u0131lan yaz\u0131l\u0131mlar\u0131 etkilemesiydi. Etkilenenler aras\u0131nda \u015funlar vard\u0131:<\/p>\n<ul>\n<li><strong>Apple Safari:<\/strong> Hem iOS hem de OS X s\u00fcr\u00fcmlerindeki Safari taray\u0131c\u0131lar\u0131 zafiyetten etkileniyordu.<\/li>\n<li><strong>Google Chrome:<\/strong> Android&#8217;in yerle\u015fik taray\u0131c\u0131s\u0131 ve mobil Chrome&#8217;un eski s\u00fcr\u00fcmleri savunmas\u0131zd\u0131.<\/li>\n<li><strong>OpenSSL:<\/strong> \u0130nternet sunucular\u0131n\u0131n b\u00fcy\u00fck bir k\u0131sm\u0131nda kullan\u0131lan temel kriptografi k\u00fct\u00fcphanesi OpenSSL&#8217;in 1.0.1k s\u00fcr\u00fcm\u00fcnden \u00f6nceki bir\u00e7ok versiyonu, zay\u0131f &#8220;export-grade&#8221; \u015fifreleme paketlerini varsay\u0131lan olarak kabul ediyordu. Bu durum, Apache ve <a href=\"https:\/\/www.ihs.com.tr\/blog\/nginx-nedir\/\" target=\"_blank\">Nginx<\/a> gibi web sunucular\u0131n\u0131 da dolayl\u0131 olarak etkiledi.<\/li>\n<li><strong>Microsoft Schannel:<\/strong> Windows i\u015fletim sistemlerindeki SSL\/TLS uygulamas\u0131 olan Schannel&#8217;da da benzer bir zafiyet tespit edildi.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"Zafiyetli-Olan-Populer-Web-Siteleri-ve-Sunucular\"><\/span>Zafiyetli Olan Pop\u00fcler Web Siteleri ve Sunucular<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Ara\u015ft\u0131rmac\u0131lar, zafiyeti ke\u015ffettiklerinde internetin en pop\u00fcler sitelerini tarad\u0131lar ve \u015fa\u015f\u0131rt\u0131c\u0131 sonu\u00e7larla kar\u015f\u0131la\u015ft\u0131lar. Alexa taraf\u0131ndan listelenen en pop\u00fcler 14 milyon web sitesinin %36&#8217;s\u0131ndan fazlas\u0131n\u0131n bu zay\u0131f \u015fifreleme standartlar\u0131n\u0131 destekledi\u011fi ve dolay\u0131s\u0131yla FREAK sald\u0131r\u0131s\u0131na kar\u015f\u0131 savunmas\u0131z oldu\u011fu ortaya \u00e7\u0131kt\u0131. Hatta baz\u0131 devlet kurumlar\u0131, haber siteleri ve finansal kurulu\u015flar\u0131n web sitelerinin bile bu zafiyetten etkilendi\u011fi raporland\u0131. Bu durum, bir web sitesinin ne kadar b\u00fcy\u00fck veya g\u00fcvenilir olursa olsun, yanl\u0131\u015f <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/\" target=\"_blank\">sunucu<\/a> yap\u0131land\u0131rmas\u0131n\u0131n ciddi riskler do\u011furabilece\u011fini g\u00f6sterdi.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kullanicilar-Icin-Riskler-Oturum-Calma-Sifre-Hirsizligi-Veri-Sizintisi\"><\/span>Kullan\u0131c\u0131lar \u0130\u00e7in Riskler: Oturum \u00c7alma, \u015eifre H\u0131rs\u0131zl\u0131\u011f\u0131, Veri S\u0131z\u0131nt\u0131s\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>FREAK sald\u0131r\u0131s\u0131n\u0131n ba\u015far\u0131l\u0131 bir \u015fekilde ger\u00e7ekle\u015ftirilmesi, son kullan\u0131c\u0131lar i\u00e7in ciddi mahremiyet ve g\u00fcvenlik riskleri anlam\u0131na geliyordu. Sald\u0131rgan\u0131n elde edebilece\u011fi veriler ve ger\u00e7ekle\u015ftirebilece\u011fi eylemler \u015funlar\u0131 i\u00e7eriyordu:<\/p>\n<ul>\n<li><strong>Oturum \u00c7alma (Session Hijacking):<\/strong> Sald\u0131rgan, kullan\u0131c\u0131n\u0131n oturum \u00e7erezlerini (session cookies) ele ge\u00e7irerek, sanki o kullan\u0131c\u0131ym\u0131\u015f gibi web sitesinde i\u015flem yapabilirdi. \u00d6rne\u011fin, bir sosyal medya hesab\u0131na giri\u015f yapabilir veya bir e-ticaret sitesindeki sepeti de\u011fi\u015ftirebilirdi.<\/li>\n<li><strong>\u015eifre H\u0131rs\u0131zl\u0131\u011f\u0131:<\/strong> Kullan\u0131c\u0131lar\u0131n bankac\u0131l\u0131k, e-posta veya di\u011fer \u00e7evrimi\u00e7i hizmetlere giri\u015f yaparken kulland\u0131klar\u0131 kullan\u0131c\u0131 ad\u0131 ve \u015fifreler, \u015fifrelenmi\u015f veri ak\u0131\u015f\u0131ndan \u00e7al\u0131nabilirdi.<\/li>\n<li><strong>Veri S\u0131z\u0131nt\u0131s\u0131:<\/strong> Kredi kart\u0131 numaralar\u0131, ki\u015fisel kimlik bilgileri, \u00f6zel mesajlar ve formlarla g\u00f6nderilen her t\u00fcrl\u00fc hassas bilgi sald\u0131rgan taraf\u0131ndan okunabilir ve k\u00f6t\u00fcye kullan\u0131labilirdi.<\/li>\n<li><strong>\u0130\u00e7erik Manip\u00fclasyonu:<\/strong> Sald\u0131rgan sadece veriyi okumakla kalmaz, ayn\u0131 zamanda web sitesinden kullan\u0131c\u0131ya giden veya kullan\u0131c\u0131dan web sitesine giden veriyi de\u011fi\u015ftirebilirdi. Bu, sahte bilgiler g\u00f6stermek veya zararl\u0131 yaz\u0131l\u0131m indirmelerini tetiklemek i\u00e7in kullan\u0131labilirdi.<\/li>\n<\/ul>\n<div class=\"karsilastirma\">\n<table>\n<thead>\n<tr>\n<th>Yaz\u0131l\u0131m<\/th>\n<th>Zafiyetli Durum<\/th>\n<th>G\u00fcvenli Durum (Yama Sonras\u0131)<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Apple Safari (OS X)<\/strong><\/td>\n<td>OS X Yosemite 10.10.2&#8217;den \u00f6nceki s\u00fcr\u00fcmler<\/td>\n<td>Security Update 2015-002 ile g\u00fcncellenmi\u015f s\u00fcr\u00fcmler<\/td>\n<\/tr>\n<tr>\n<td><strong>Apple Safari (iOS)<\/strong><\/td>\n<td>iOS 8.1.3&#8217;ten \u00f6nceki s\u00fcr\u00fcmler<\/td>\n<td>iOS 8.2 ve sonras\u0131<\/td>\n<\/tr>\n<tr>\n<td><strong>Google Chrome (Android)<\/strong><\/td>\n<td>S\u00fcr\u00fcm 40 ve \u00f6ncesi<\/td>\n<td>S\u00fcr\u00fcm 41 ve sonras\u0131<\/td>\n<\/tr>\n<tr>\n<td><strong>OpenSSL K\u00fct\u00fcphanesi<\/strong><\/td>\n<td>1.0.1k \u00f6ncesi, 1.0.0c-f, 0.9.8za-cc gibi s\u00fcr\u00fcmler<\/td>\n<td>1.0.2a, 1.0.1m, 1.0.0r, 0.9.8zf ve sonras\u0131<\/td>\n<\/tr>\n<tr>\n<td><strong>Microsoft Windows<\/strong><\/td>\n<td>MS15-031 g\u00fcvenlik b\u00fclteni \u00f6ncesi t\u00fcm s\u00fcr\u00fcmler<\/td>\n<td>MS15-031 g\u00fcvenlik g\u00fcncellemesini alm\u0131\u015f sistemler<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"FREAK-Saldirisina-Karsi-Korunma-Yontemleri-ve-Cozumler\"><\/span>FREAK Sald\u0131r\u0131s\u0131na Kar\u015f\u0131 Korunma Y\u00f6ntemleri ve \u00c7\u00f6z\u00fcmler<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FREAK sald\u0131r\u0131s\u0131n\u0131n ke\u015ffedilmesinin ard\u0131ndan, yaz\u0131l\u0131m geli\u015ftiricileri ve sistem y\u00f6neticileri h\u0131zla harekete ge\u00e7erek yamalar ve \u00e7\u00f6z\u00fcmler \u00fcretti. Korunma sorumlulu\u011fu, hem son kullan\u0131c\u0131lar\u0131n cihazlar\u0131n\u0131 g\u00fcncel tutmas\u0131n\u0131 hem de web sitesi sahiplerinin sunucular\u0131n\u0131 do\u011fru \u015fekilde yap\u0131land\u0131rmas\u0131n\u0131 gerektirir. Bu iki tarafl\u0131 yakla\u015f\u0131m, bu t\u00fcr &#8220;downgrade&#8221; sald\u0131r\u0131lar\u0131na kar\u015f\u0131 en etkili savunmay\u0131 olu\u015fturur.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Son-Kullanicilar-Icin-Alinmasi-Gereken-Onlemler\"><\/span>Son Kullan\u0131c\u0131lar \u0130\u00e7in Al\u0131nmas\u0131 Gereken \u00d6nlemler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>S\u0131radan internet kullan\u0131c\u0131lar\u0131 i\u00e7in korunman\u0131n en temel yolu, kulland\u0131klar\u0131 yaz\u0131l\u0131mlar\u0131n her zaman en son s\u00fcr\u00fcmde olmas\u0131n\u0131 sa\u011flamakt\u0131r. Geli\u015ftiriciler zafiyetleri kapatt\u0131k\u00e7a, bu g\u00fcncellemeleri y\u00fcklemek kritik \u00f6nem ta\u015f\u0131r.<\/p>\n<h4>Taray\u0131c\u0131 ve \u0130\u015fletim Sistemlerini G\u00fcncel Tutmak<\/h4>\n<p>FREAK gibi zafiyetler ortaya \u00e7\u0131kt\u0131\u011f\u0131nda, Apple, Google, Microsoft gibi b\u00fcy\u00fck \u015firketler h\u0131zla g\u00fcvenlik g\u00fcncellemeleri yay\u0131nlar. Taray\u0131c\u0131n\u0131z\u0131n (Chrome, Safari, Firefox, Edge) ve i\u015fletim sisteminizin (Windows, macOS, iOS, Android) otomatik g\u00fcncelleme \u00f6zelli\u011finin a\u00e7\u0131k oldu\u011fundan emin olun. Bu, bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131na kar\u015f\u0131 sizi koruman\u0131n en basit ve en etkili yoludur. Bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/wordpress-surum-guncelleme-nasil-yapilir\/\" target=\"_blank\">WordPress s\u00fcr\u00fcm g\u00fcncellemesi<\/a> yapmak ne kadar \u00f6nemliyse, taray\u0131c\u0131 ve i\u015fletim sistemi g\u00fcncellemeleri de o kadar hayatidir.<\/p>\n<h4>G\u00fcvenilmeyen A\u011flarda Hassas \u0130\u015flemlerden Ka\u00e7\u0131nmak<\/h4>\n<p>FREAK, bir Man-in-the-Middle sald\u0131r\u0131s\u0131 gerektirdi\u011fi i\u00e7in, en b\u00fcy\u00fck risk halka a\u00e7\u0131k ve g\u00fcvenilmeyen Wi-Fi a\u011flar\u0131ndad\u0131r (kafeler, havalimanlar\u0131, oteller vb.). Bu t\u00fcr a\u011flara ba\u011fl\u0131yken online bankac\u0131l\u0131k, al\u0131\u015fveri\u015f veya \u015fifre giri\u015fi gerektiren di\u011fer hassas i\u015flemlerden ka\u00e7\u0131nmak iyi bir \u00f6nlemdir. E\u011fer bu a\u011flar\u0131 kullanmak zorundaysan\u0131z, t\u00fcm trafi\u011finizi \u015fifreleyen g\u00fcvenilir bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/vpn-nedir-nasil-calisir\/\" target=\"_blank\">VPN<\/a> hizmeti kullanmak ek bir koruma katman\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Web-Sitesi-Sahipleri-ve-Sistem-Yoneticileri-Icin-Cozumler\"><\/span>Web Sitesi Sahipleri ve Sistem Y\u00f6neticileri \u0130\u00e7in \u00c7\u00f6z\u00fcmler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Web sitesi sahipleri ve sunucu y\u00f6neticileri, kullan\u0131c\u0131lar\u0131 koruma konusunda en b\u00fcy\u00fck sorumlulu\u011fa sahiptir. Sunucu taraf\u0131nda yap\u0131lacak do\u011fru yap\u0131land\u0131rmalar, FREAK ve benzeri sald\u0131r\u0131lar\u0131 tamamen etkisiz hale getirebilir.<\/p>\n<h4>Sunucularda &#8220;Export-Grade&#8221; \u015eifreleme Paketlerini Devre D\u0131\u015f\u0131 B\u0131rakmak<\/h4>\n<p>En temel ve en etkili \u00e7\u00f6z\u00fcm, sunucu yap\u0131land\u0131rmas\u0131nda art\u0131k hi\u00e7bir ge\u00e7erlili\u011fi kalmam\u0131\u015f olan t\u00fcm &#8220;export-grade&#8221; \u015fifreleme paketlerini (cipher suites) devre d\u0131\u015f\u0131 b\u0131rakmakt\u0131r. Bu, sald\u0131rgan\u0131n sunucuyu zay\u0131f \u015fifrelemeye zorlamas\u0131n\u0131 engeller. Sunucu, yaln\u0131zca TLS 1.2 ve TLS 1.3 gibi modern protokolleri ve AES-GCM, CHACHA20-POLY1305 gibi g\u00fc\u00e7l\u00fc \u015fifreleme algoritmalar\u0131n\u0131 destekleyecek \u015fekilde yap\u0131land\u0131r\u0131lmal\u0131d\u0131r. Bu ayn\u0131 zamanda bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/zayif-sifreleme-weak-cipher-uyarisi-nedir-ve-sunucuda-nasil-duzeltilir\/\" target=\"_blank\">zay\u0131f \u015fifreleme uyar\u0131s\u0131<\/a> alman\u0131z\u0131 da \u00f6nler.<\/p>\n<h4>OpenSSL ve Di\u011fer Kriptografi K\u00fct\u00fcphanelerini G\u00fcncellemek<\/h4>\n<p>Web sunucunuzun temelini olu\u015fturan OpenSSL, LibreSSL veya Microsoft Schannel gibi kriptografi k\u00fct\u00fcphanelerinin en son yamal\u0131 s\u00fcr\u00fcmlerine g\u00fcncellenmesi zorunludur. Zafiyetin ilk olarak bu k\u00fct\u00fcphanelerde kapat\u0131lmas\u0131 nedeniyle, eski bir s\u00fcr\u00fcm kullanmak, sunucunuzu bilinen bir sald\u0131r\u0131ya kar\u015f\u0131 savunmas\u0131z b\u0131rakmak anlam\u0131na gelir. D\u00fczenli olarak g\u00fcvenlik g\u00fcncellemelerini kontrol etmek ve uygulamak, proaktif bir g\u00fcvenlik duru\u015fu i\u00e7in esast\u0131r.<\/p>\n<h4>SSL\/TLS Sunucu Yap\u0131land\u0131rmas\u0131n\u0131 G\u00fc\u00e7lendirmek<\/h4>\n<p>&#8220;Export-grade&#8221; \u015fifrelemeyi devre d\u0131\u015f\u0131 b\u0131rakman\u0131n yan\u0131 s\u0131ra, genel SSL\/TLS yap\u0131land\u0131rmas\u0131n\u0131 g\u00fc\u00e7lendirmek de \u00f6nemlidir. Bu, Perfect Forward Secrecy (PFS) gibi \u00f6zellikleri etkinle\u015ftirmeyi, zay\u0131f protokolleri (SSLv2, SSLv3, TLS 1.0, TLS 1.1) devre d\u0131\u015f\u0131 b\u0131rakmay\u0131 ve g\u00fc\u00e7l\u00fc anahtar de\u011fi\u015fim mekanizmalar\u0131 (ECDHE) kullanmay\u0131 i\u00e7erir. Bu ayarlar, sadece FREAK&#8217;e kar\u015f\u0131 de\u011fil, gelecekte ortaya \u00e7\u0131kabilecek di\u011fer &#8220;downgrade&#8221; ve kriptografik sald\u0131r\u0131lara kar\u015f\u0131 da direnci art\u0131r\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"FREAKten-Cikarilacak-Dersler-ve-Internet-Guvenligine-Etkisi\"><\/span>FREAK&#8217;ten \u00c7\u0131kar\u0131lacak Dersler ve \u0130nternet G\u00fcvenli\u011fine Etkisi<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FREAK sald\u0131r\u0131s\u0131, siber g\u00fcvenlik d\u00fcnyas\u0131 i\u00e7in sadece ge\u00e7ici bir kriz de\u011fil, ayn\u0131 zamanda kal\u0131c\u0131 dersler i\u00e7eren \u00f6nemli bir olayd\u0131. Bu zafiyet, teknoloji politikalar\u0131n\u0131n, eski kodlar\u0131n ve s\u00fcrekli geli\u015fen tehdit ortam\u0131n\u0131n karma\u015f\u0131k etkile\u015fimini g\u00f6zler \u00f6n\u00fcne serdi. \u0130nternetin g\u00fcvenli\u011fi i\u00e7in g\u00fc\u00e7l\u00fc kriptografinin \u00f6nemini ve ge\u00e7mi\u015fte yap\u0131lan hatalar\u0131n uzun vadeli sonu\u00e7lar\u0131n\u0131 bir kez daha hat\u0131rlatt\u0131.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"%E2%80%9CDowngrade%E2%80%9D-Surum-Dusurme-Saldirilarinin-Kalici-Tehdidi\"><\/span>&#8220;Downgrade&#8221; (S\u00fcr\u00fcm D\u00fc\u015f\u00fcrme) Sald\u0131r\u0131lar\u0131n\u0131n Kal\u0131c\u0131 Tehdidi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>FREAK, POODLE ve Logjam gibi sald\u0131r\u0131lar, &#8220;downgrade&#8221; sald\u0131r\u0131lar\u0131n\u0131n ne kadar tehlikeli olabilece\u011fini g\u00f6sterdi. Bu sald\u0131r\u0131lar\u0131n temel stratejisi, modern ve g\u00fcvenli bir sistemi, geriye d\u00f6n\u00fck uyumluluk i\u00e7in b\u0131rakt\u0131\u011f\u0131 eski ve zay\u0131f bir versiyonunu kullanmaya zorlamakt\u0131r. Bu durum, sistemlerin en zay\u0131f halkas\u0131 kadar g\u00fc\u00e7l\u00fc oldu\u011fu ger\u00e7e\u011fini vurgular. Geli\u015ftiriciler ve sistem y\u00f6neticileri, art\u0131k g\u00fcvenli olmayan eski protokol ve algoritmalar\u0131 desteklemeyi b\u0131rakma konusunda daha cesur olmal\u0131d\u0131r. <a href=\"https:\/\/www.ihs.com.tr\/web-hosting\/\" target=\"_blank\">Hosting<\/a> sa\u011flay\u0131c\u0131lar\u0131n\u0131n g\u00fcncel ve g\u00fcvenli altyap\u0131lar sunmas\u0131 bu noktada kritik bir rol oynar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Kriptografik-Borc-Eski-ve-Zayif-Teknolojilerin-Mirasi\"><\/span>Kriptografik Bor\u00e7: Eski ve Zay\u0131f Teknolojilerin Miras\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>FREAK, &#8220;teknik bor\u00e7&#8221; kavram\u0131n\u0131n bir alt t\u00fcr\u00fc olan &#8220;kriptografik bor\u00e7&#8221; olgusunu m\u00fckemmel bir \u015fekilde \u00f6rneklemektedir. 1990&#8217;lar\u0131n ihracat k\u0131s\u0131tlamalar\u0131 nedeniyle yaz\u0131lan zay\u0131f \u015fifreleme kodlar\u0131, o d\u00f6nemin bir gereklili\u011fiydi. Ancak bu yasalar kalkt\u0131ktan sonra bile bu kodlar sistemlerden temizlenmedi ve bir bor\u00e7 gibi birikti. Y\u0131llar sonra, bu birikmi\u015f bor\u00e7, FREAK sald\u0131r\u0131s\u0131 gibi y\u00fcksek faizli bir fatura olarak kar\u015f\u0131m\u0131za \u00e7\u0131kt\u0131. Bu, yaz\u0131l\u0131m geli\u015ftirme s\u00fcre\u00e7lerinde eski ve g\u00fcvensiz kodlar\u0131 temizlemenin ve sistemleri proaktif olarak modernize etmenin ne kadar \u00f6nemli oldu\u011funu g\u00f6stermektedir.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guclu-ve-Modern-Kriptografinin-Vazgecilmezligi\"><\/span>G\u00fc\u00e7l\u00fc ve Modern Kriptografinin Vazge\u00e7ilmezli\u011fi<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bu sald\u0131r\u0131, internetin temel dire\u011fi olan g\u00fcvenin, g\u00fc\u00e7l\u00fc ve tavizsiz kriptografiye dayand\u0131\u011f\u0131n\u0131 bir kez daha kan\u0131tlam\u0131\u015ft\u0131r. Kullan\u0131c\u0131lar\u0131n verilerinin gizlili\u011fini ve b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc korumak i\u00e7in TLS 1.2 ve \u00f6zellikle <a href=\"https:\/\/www.ihs.com.tr\/blog\/tls-1-2-ve-tls-1-3-arasindaki-farklar-daha-guvenli-ve-hizli-protokole-gecis\/\" target=\"_blank\">TLS 1.3<\/a> gibi modern protokollerin, AES-256 gibi g\u00fc\u00e7l\u00fc \u015fifrelerin ve ECDSA gibi eliptik e\u011fri kriptografisinin standart olarak benimsenmesi gerekmektedir. Ge\u00e7mi\u015fin zay\u0131f standartlar\u0131na geri d\u00f6nmeye zorlanabilen herhangi bir sistem, modern internetin g\u00fcvenlik beklentilerini kar\u015f\u0131layamaz. G\u00fcvenlik, sonradan eklenen bir \u00f6zellik de\u011fil, sistemin en ba\u015f\u0131ndan itibaren tasar\u0131m\u0131n\u0131n bir par\u00e7as\u0131 olmal\u0131d\u0131r.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Web-Guvenligi-ve-SSL-Sertifikalari-Icin-Neden-IHS-Telekomu-Tercih-Etmelisiniz\"><\/span>Web G\u00fcvenli\u011fi ve SSL Sertifikalar\u0131 \u0130\u00e7in Neden \u0130HS Telekom&#8217;u Tercih Etmelisiniz?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FREAK gibi siber sald\u0131r\u0131lar, web g\u00fcvenli\u011finin sadece bir <a href=\"https:\/\/www.ihs.com.tr\/blog\/ssl-sertifikasi-nedir-onemlidir\/\" target=\"_blank\">SSL sertifikas\u0131<\/a> almaktan \u00e7ok daha fazlas\u0131 oldu\u011funu g\u00f6stermektedir. Do\u011fru sertifikay\u0131 se\u00e7mek, sunucuyu en g\u00fcncel ve g\u00fcvenli standartlara g\u00f6re yap\u0131land\u0131rmak ve olas\u0131 zafiyetlere kar\u015f\u0131 proaktif olmak, dijital varl\u0131klar\u0131n\u0131z\u0131 ve kullan\u0131c\u0131lar\u0131n\u0131z\u0131 koruman\u0131n temel ta\u015flar\u0131d\u0131r. \u0130HS Telekom, bu b\u00fct\u00fcnsel g\u00fcvenlik anlay\u0131\u015f\u0131yla i\u015fletmenizin ihtiya\u00e7 duydu\u011fu g\u00fcvenilir orta\u011f\u0131d\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"En-Guncel-ve-Guclu-Sifreleme-Algoritmalarini-Destekleyen-SSL-Sertifikalari\"><\/span>En G\u00fcncel ve G\u00fc\u00e7l\u00fc \u015eifreleme Algoritmalar\u0131n\u0131 Destekleyen SSL Sertifikalar\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0130HS Telekom, sadece modern taray\u0131c\u0131larla uyumlu de\u011fil, ayn\u0131 zamanda en g\u00fc\u00e7l\u00fc \u015fifreleme standartlar\u0131n\u0131 (SHA-256, 2048-bit anahtarlar vb.) destekleyen SSL sertifikalar\u0131 sunar. Sundu\u011fumuz sertifikalar, &#8220;export-grade&#8221; gibi zay\u0131f ve eski algoritmalara yer vermez, b\u00f6ylece sitenizin &#8220;downgrade&#8221; sald\u0131r\u0131lar\u0131na kar\u015f\u0131 do\u011fal bir dirence sahip olmas\u0131n\u0131 sa\u011flar. \u0130ster standart bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/rapidssl.html\" target=\"_blank\">RapidSSL<\/a> sertifikas\u0131, ister t\u00fcm alt alan adlar\u0131n\u0131z\u0131 koruyan bir Wildcard SSL, isterseniz de en y\u00fcksek g\u00fcven seviyesini sunan bir <a href=\"https:\/\/www.ihs.com.tr\/ssl\/ev-ssl.html\" target=\"_blank\">EV SSL<\/a> olsun, t\u00fcm se\u00e7eneklerimiz g\u00fcn\u00fcm\u00fcz\u00fcn g\u00fcvenlik tehditlerine kar\u015f\u0131 tasarlanm\u0131\u015ft\u0131r.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Sunucu-Yapilandirmasi-icin-Uzman-Teknik-Destek-ve-Danismanlik\"><\/span>Sunucu Yap\u0131land\u0131rmas\u0131 i\u00e7in Uzman Teknik Destek ve Dan\u0131\u015fmanl\u0131k<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Bir SSL sertifikas\u0131 sat\u0131n almak denklemin sadece bir par\u00e7as\u0131d\u0131r. Bu sertifikan\u0131n sunucunuza do\u011fru bir \u015fekilde kurulmas\u0131 ve sunucu yaz\u0131l\u0131m\u0131n\u0131z\u0131n (Apache, Nginx vb.) en g\u00fcvenli ayarlarla yap\u0131land\u0131r\u0131lmas\u0131 kritik \u00f6neme sahiptir. \u0130HS Telekom&#8217;un uzman teknik destek ekibi, sunucunuzda zay\u0131f \u015fifreleme paketlerini devre d\u0131\u015f\u0131 b\u0131rakma, modern TLS protokollerini etkinle\u015ftirme ve genel sunucu g\u00fcvenli\u011fini art\u0131rma konular\u0131nda size rehberlik eder. Bir <a href=\"https:\/\/www.ihs.com.tr\/sunucu-kiralama\/vps-server.html\" target=\"_blank\">VPS<\/a> veya VDS sunucu hizmeti alsan\u0131z dahi, do\u011fru yap\u0131land\u0131rma konusunda yan\u0131n\u0131zday\u0131z.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Zafiyetlere-Karsi-Proaktif-Bilgilendirme-ve-Guvenlik-Cozumleri\"><\/span>Zafiyetlere Kar\u015f\u0131 Proaktif Bilgilendirme ve G\u00fcvenlik \u00c7\u00f6z\u00fcmleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Siber g\u00fcvenlik d\u00fcnyas\u0131 dinamiktir ve s\u00fcrekli yeni tehditler ortaya \u00e7\u0131kar. \u0130HS Telekom olarak, FREAK gibi kritik zafiyetler ortaya \u00e7\u0131kt\u0131\u011f\u0131nda m\u00fc\u015fterilerimizi proaktif olarak bilgilendirir ve gerekli \u00f6nlemleri almalar\u0131 i\u00e7in onlara yol g\u00f6steririz. G\u00fcvenli\u011fi sadece bir \u00fcr\u00fcn olarak de\u011fil, s\u00fcrekli bir hizmet olarak g\u00f6r\u00fcyoruz. Bu yakla\u015f\u0131m, i\u015fletmenizin her zaman bir ad\u0131m \u00f6nde olmas\u0131n\u0131 ve potansiyel risklere kar\u015f\u0131 haz\u0131rl\u0131kl\u0131 olmas\u0131n\u0131 sa\u011flar.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Guvenligin-Surekliligi-Icin-Kolay-Yonetim-ve-Otomatik-Yenileme-Secenekleri\"><\/span>G\u00fcvenli\u011fin S\u00fcreklili\u011fi \u0130\u00e7in Kolay Y\u00f6netim ve Otomatik Yenileme Se\u00e7enekleri<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>G\u00fcvenlik zincirinin en zay\u0131f halkalar\u0131ndan biri, s\u00fcresi dolmu\u015f ve yenilenmemi\u015f SSL sertifikalar\u0131d\u0131r. \u0130HS Telekom m\u00fc\u015fteri paneli \u00fczerinden SSL sertifikalar\u0131n\u0131z\u0131 kolayca y\u00f6netebilir, yenileme zaman\u0131 geldi\u011finde otomatik bildirimler alabilirsiniz. Otomatik yenileme se\u00e7eneklerimiz sayesinde, sitenizin g\u00fcvenli\u011finin kesintiye u\u011framamas\u0131n\u0131 ve kullan\u0131c\u0131lar\u0131n\u0131z\u0131n her zaman &#8220;g\u00fcvenli ba\u011flant\u0131&#8221; uyar\u0131s\u0131n\u0131 g\u00f6rmesini sa\u011flayabilirsiniz. G\u00fcvenilir bir <a href=\"https:\/\/www.ihs.com.tr\/domain\/alan-adi-domain-tescili.html\" target=\"_blank\">alan ad\u0131<\/a> tescili ile ba\u015flayan dijital yolculu\u011funuz, \u0130HS Telekom&#8217;un sundu\u011fu kesintisiz g\u00fcvenlik \u00e7\u00f6z\u00fcmleriyle tamamlan\u0131r.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0130nternet g\u00fcvenli\u011fi, s\u00fcrekli bir evrim ve m\u00fccadele alan\u0131d\u0131r. Bazen, ge\u00e7mi\u015fte al\u0131nan ve o g\u00fcn\u00fcn \u015fartlar\u0131nda mant\u0131kl\u0131 g\u00f6r\u00fcnen kararlar, y\u0131llar sonra beklenmedik ve&hellip;<\/p>\n","protected":false},"author":3,"featured_media":16694,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[400],"tags":[],"class_list":["post-16693","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ssl-sertifikasi"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16693"}],"version-history":[{"count":2,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16693\/revisions"}],"predecessor-version":[{"id":16744,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16693\/revisions\/16744"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media\/16694"}],"wp:attachment":[{"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16693"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16693"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ihs.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}