浣犲彲鑳借寰楀紑浜?FA灏遍珮鏋曟棤蹇т簡銆備絾鐜板疄鏄細SIM鍗′氦鎹㈡敾鍑诲彲浠ュ湪30绉掑唴鍔寔浣犵殑鐭俊楠岃瘉鐮?/strong>锛岄挀楸肩綉绔欏彲浠ラ獥璧颁綘鐨凾OTP鍔ㄦ€佸瘑鐮佲€斺€斾綘绮惧績璁剧疆鐨勩€屽弻閲嶄繚闄┿€嶏紝鍦ㄩ粦瀹㈢溂閲屼笉杩囨槸涓ら亾钖勭罕銆?/p>

涓€銆佷紶缁?FA鐨勪笁澶ц嚧鍛芥紡娲?/h2>

鍏堟潵璁ゆ竻鐜板疄锛歋MS楠岃瘉鐮佸拰TOTP璁よ瘉鍣紙Google Authenticator锛夎繖涓ょ鏈€甯歌鐨?FA鏂规锛屽叾瀹為兘鏈夎缁曡繃鐨勬垚鐔熸敾鍑昏矾寰勩€?/p>

1. SIM鍗′氦鎹㈡敾鍑伙紙SIM Swapping锛?/h3>

鏀诲嚮鑰呭彧闇€鍐掑厖浣犺嚧鐢佃繍钀ュ晢瀹㈡湇锛屾彁渚涗綘鐨勫鍚嶅拰灏戦噺涓汉淇℃伅锛屽嵆鍙皢浣犵殑鎵嬫満鍙风爜銆岃浆绉汇€嶅埌鏀诲嚮鑰呮寔鏈夌殑SIM鍗′笂銆備竴鏃︽垚鍔燂紝浣犵殑鎵€鏈夌煭淇￠獙璇佺爜閮戒細鍙戦€佸埌鏀诲嚮鑰呮墜涓€?/p>

鐪熷疄妗堜緥锛?/strong>Twitter CEO鏉板厠路澶氳タ锛圝ack Dorsey锛夊氨鏇惧洜SIM鍗′氦鎹㈡敾鍑伙紝Twitter璐﹀彿鍦?019骞磋鍔寔锛屾暣涓繃绋嬩笉鍒板嚑鍒嗛挓銆?/p>

2. SMS鎷︽埅涓庨挀楸?/h3>

鍗充究娌℃湁鐗╃悊SIM鍗★紝榛戝涔熷彲閫氳繃浼熀绔欙紙IMSI鎹曢泦鍣級琚姩鐩戝惉鐭俊锛屾垨閫氳繃閽撻奔椤甸潰璇卞鐢ㄦ埛鍦ㄤ吉閫犵綉绔欒緭鍏ラ獙璇佺爜鈥斺€旇繖涓繃绋嬭绉颁负瀹炴椂閽撻奔锛圧eal-Time Phishing锛?/strong>銆?/p>

3. TOTP绉嶅瓙娉勯湶

Google Authenticator绛塗OTP搴旂敤灏嗗姞瀵嗙瀛愬瓨鍦ㄦ墜鏈烘湰鍦般€傚鏋滄墜鏈鸿root/瓒婄嫳锛屾垨閫氳繃iCloud/Google璐﹀彿鍚屾澶囦唤锛屾敾鍑昏€呮嬁鍒板浠藉嵆鍙敓鎴愪换鎰忔椂闂存鐨勫姩鎬佸瘑鐮併€?/p>

涓夌2FA瀹夊叏瀵规瘮琛?/h3>

闃叉姢缁村害	SMS楠岃瘉鐮?/td>	TOTP鍔ㄦ€佸瘑鐮?/td>	U2F/FIDO2瀹夊叏閽ュ寵
SIM鍗′氦鎹㈡敾鍑?/td>	X 瀹屽叏鏃犳晥	~ 涓嶅彈褰卞搷	V 瀹屽叏鍏嶇柅
瀹炴椂閽撻奔	X 瀹屽叏鏃犳晥	~ 楠岃瘉鐮佷粛鍙閽?/td>	V 瀹屽叏鍏嶇柅
璁惧涓㈠け椋庨櫓	楂橈紙鎵嬫満鍙锋槗杞Щ锛?/td>	涓紙鍙鍑虹瀛愶級	浣庯紙鐗╃悊閽ュ寵鍒嗙锛?/td>
璺ㄨ澶囧悓姝?/td>	V 鏃犻渶閰嶇疆	~ 闇€鎵嬪姩杩佺Щ	~ 闇€閲嶆柊娉ㄥ唽
鐢熺墿鐗瑰緛楠岃瘉	X 鏃?/td>	X 鏃?/td>	V 鏀寔鎸囩汗/闈㈤儴
鎶椾腑闂翠汉鏀诲嚮	X 鏃?/td>	~ 寮?/td>	V 寮?/td>

浜屻€乁2F/FIDO2鏄粈涔堬紵鐗╃悊瀵嗛挜鐨勫伐浣滃師鐞?/h2>

U2F锛圲niversal 2nd Factor锛?/strong>鍜屽叾鍗囩骇鐗?strong>FIDO2/WebAuthn鏄浗闄匜IDO鑱旂洘鎺ㄥ嚭鐨勫紑鏀捐璇佹爣鍑嗭紝鏃ㄥ湪浠庢牴鏈笂娑堥櫎瀵嗙爜鍜岄獙璇佺爜鐨勫畨鍏ㄩ殣鎮ｃ€?/p>

U2F瀹夊叏閽ュ寵锛堝YubiKey銆丟oogle Titan Key銆丱nlyKey锛夋槸涓€绉嶇墿鐞哢SB鎴朜FC璁惧锛屽畠涓嶄紶杈撲綘鐨勫瘑鐮佹垨瀵嗛挜鏈韩锛岃€屾槸鎵ц涓€绉?strong>鎸戞垬-鍝嶅簲锛圕hallenge-Response锛?/strong>鍗忚锛?/p>

U2F璁よ瘉宸ヤ綔娴佺▼

1. 娉ㄥ唽闃舵锛?/strong>缃戠珯鐢熸垚涓€涓殢鏈恒€屾寫鎴樺€笺€嶏紙Challenge锛夛紝瀹夊叏閽ュ寵浣跨敤浣犵殑绉侀挜瀵硅繖涓寫鎴樺€肩鍚嶏紝鐢熸垚銆岃璇佸０鏄庛€嶈繑鍥炵粰缃戠珯銆傜綉绔欏瓨鍌ㄥ叕閽ワ紝绉侀挜姘镐笉绂诲紑閽ュ寵銆?/li>
2. 鐧诲綍闃舵锛?/strong>缃戠珯鍐嶆鍙戦€佷笉鍚岀殑鎸戞垬鍊硷紝瀹夊叏閽ュ寵鐢ㄧ閽ョ鍚嶏紝鍙湁鎻掑叆閽ュ寵锛堟垨瑙︾鎰熷簲鍖猴級鎵嶈兘瀹屾垚鍝嶅簲銆?/li>
3. 閽撻奔闃叉姢鏈哄埗锛?/strong>姣忎釜鎸戞垬鍊奸兘缁戝畾浜嗙壒瀹氱殑渚濊禆鏂规爣璇嗙锛圧P ID锛?/strong>鈥斺€斾篃灏辨槸鍩熷悕銆傚鏋滀綘璇曞浘鍦ㄩ挀楸肩綉绔欍€宲roton-mail.fake.com銆嶇櫥褰曪紝瀹夊叏閽ュ寵浼氭嫆缁濆搷搴旓紝鍥犱负瀹冨彧璁ゃ€宲roton.me銆嶃€?/li>

杩欐剰鍛崇潃锛氬嵆渚夸綘鍦ㄩ挀楸肩綉绔欒緭鍏ヤ簡鎵€鏈夋纭俊鎭紝娌℃湁鐗╃悊鎻掑叆浣犵殑U2F閽ュ寵锛屾敾鍑绘案杩滄棤娉曞畬鎴愩€?/p>

涓夈€丳roton Mail鐨刄2F鏀寔涓嶴entinel鍗忓悓闃叉姢

Proton Mail鏃╁湪2019骞村氨瀹ｅ竷鏀寔U2F/FIDO2瀹夊叏閽ュ寵锛屾槸闅愮閭棰嗗煙鏈€鏃╄惤鍦扮‖浠跺瘑閽ョ殑涓绘祦鏈嶅姟鍟嗕箣涓€銆?/p>

Proton Mail涓惎鐢║2F鐨勬楠?/h3>

1. 鐧诲綍 mail.proton.me - 鐐瑰嚮鍙充笂瑙掑ご鍍?- 璁剧疆 - 瀹夊叏鍜岄殣绉?/strong>
2. 鎵惧埌銆?strong>鍙岄噸璁よ瘉銆?銆?strong>娣诲姞U2F瀵嗛挜銆?/li>
3. 灏嗕綘鐨刌ubiKey鎻掑叆USB鎺ュ彛锛屾垨閫氳繃NFC瑙︾
4. 涓哄瘑閽ュ懡鍚嶏紙濡傘€孻ubiKey 5 NFC銆嶏級锛屽畬鎴愭敞鍐?/li>
5. 寤鸿娉ㄥ唽鑷冲皯涓ゆ妸閽ュ寵锛堜竴鎶婂父鐢紝涓€鎶婂畨鍏ㄥ湴鐐瑰浠斤級

U2F + Proton Sentinel锛氫富鍔ㄩ槻寰″弻淇濋櫓

U2F鐗╃悊閽ュ寵闃插尽鐨勬槸鐧诲綍鐜妭琚姭鎸侊紱鑰?strong>Proton Sentinel锛圓I琛屼负鍒嗘瀽绯荤粺锛夐槻寰＄殑鏄?strong>鐧诲綍鍚庣殑寮傚父琛屼负銆備袱鑰呯粨鍚堬紝鏋勬垚浜嗕粠鍏ュ彛鍒板唴閮ㄧ殑瀹屾暣瀹夊叏闂幆锛?/p>

• 鍏ュ彛灞傦細U2F閽ュ寵闃绘柇閽撻奔/SIM浜ゆ崲/鏆村姏鐮磋В
• 琛屼负灞傦細Sentinel鐩戞帶寮傚父鎿嶄綔锛堝紓甯窱P/鏃堕棿娈?琛屼负妯″紡锛?/li>
• 鍝嶅簲灞傦細Sentinel浜哄伐瀹℃牳鍥㈤槦鍦ㄥ彲鐤戞椿鍔ㄦ椂涓诲姩鍐荤粨璐﹀彿

鍥涖€乊ubiKey閫夎喘鎸囧崡锛氬摢娆炬渶閫傚悎Proton鐢ㄦ埛锛?/h2>

鍨嬪彿	鎺ュ彛	浠锋牸鍖洪棿	鎺ㄨ崘鍦烘櫙	Proton鍏煎
YubiKey 5 NFC	USB-A + NFC	绾?0缇庡厓	鏃ュ父涓诲姏閽ュ寵锛屾敮鎸佹墜鏈篘FC	V 瀹屽叏鏀寔
YubiKey 5C NFC	USB-C + NFC	绾?5缇庡厓	MacBook/鏂板瀷绗旇鏈敤鎴?/td>	V 瀹屽叏鏀寔
YubiKey Bio	USB-A + 鎸囩汗	绾?5缇庡厓	楂樺畨鍏ㄩ渶姹傦紝鎸囩汗鏇夸唬PIN	V 瀹屽叏鏀寔
Security Key by Yubico	USB-A	绾?0缇庡厓	棰勭畻鏈夐檺锛屼粎FIDO2鏍囧噯	V 鏀寔锛堟棤NFC锛?/td>
Google Titan Key	USB-A + BLE	绾?0缇庡厓	澶囩敤閽ュ寵锛岄潪涓诲姏	V 鏀寔

浜斻€丼IM鍗′氦鎹㈡敾鍑婚槻寰★細杩愯惀鍟嗗眰闈㈢殑鑷晳

闄や簡鍦≒roton绔娇鐢║2F锛屽鏋滀綘浣跨敤鐨勬槸瀹炰綋SIM鍗★紝杩樺彲浠ュ悜杩愯惀鍟嗙敵璇?strong>SIM鍗′氦鎹繚鎶?/strong>锛?/p>

• 涓浗鐢ㄦ埛锛?/strong>鑷寸數杩愯惀鍟嗗鏈嶏紝瑕佹眰寮€鍚€孲IM鍗″姞閿併€嶆垨銆孭UK鐮佷繚鎶ゃ€嶏紝璁剧疆SIM鍗IN鐮?/li>
• 缇庡浗鐢ㄦ埛锛?/strong>鍚慉T&T/Verizon/T-Mobile鐢宠銆孭ort Freeze銆嶆垨銆孨umber Lock銆嶆湇鍔★紝闃叉鏈粡鎺堟潈鐨勫彿鐮佽浆绉?/li>
• 閫氱敤寤鸿锛?/strong>灏嗗父鐢ㄩ偖绠憋紙灏ゅ叾鏄疨roton璐﹀彿鐨勬仮澶嶉偖绠憋級缁戝畾鍦?strong>鐗╃悊SIM+eSIM鍙屽緟鎵嬫満涓婏紝闄嶄綆鍗曠偣鏁呴殰椋庨櫓

鍏€佸畬鏁村畨鍏ㄥ崌绾ц矾寰勶細闆跺熀纭€鍒癠2F涓撳

1. 绗竴闃舵锛堜粖澶╋級锛?/strong>纭繚宸插紑鍚疶OTP 2FA锛圙oogle Authenticator锛?/li>
2. 绗簩闃舵锛堟湰鍛級锛?/strong>璐拱YubiKey 5 NFC锛屾敞鍐屽埌Proton璐﹀彿
3. 绗笁闃舵锛堟湰鏈堬級锛?/strong>璐拱绗簩鎶婂浠介挜鍖欙紝瀛樻斁鍦ㄥ畨鍏ㄧ殑鐗╃悊浣嶇疆
4. 绗洓闃舵锛堥暱鏈燂級锛?/strong>鍚敤Proton Sentinel锛屽鏌ユ墍鏈夋椿璺冧細璇濓紝瀹氭湡杞崲瀵嗙爜

缁撹锛氭妸瀹夊叏鍙樻垚涓€绉嶄範鎯?/h2>

U2F瀹夊叏閽ュ寵涓嶆槸鏋佸涓撳睘鐜╁叿锛屽畠鏄竴绉?strong>鎶婂畨鍏ㄤ粠銆岃蒋浠朵範鎯€嶅崌绾т负銆岀墿鐞嗕繚闅溿€?/strong>鐨勭畝鍗曟柟寮忋€傜煭淇￠獙璇佺爜銆乀OTP鍔ㄦ€佸瘑鐮佲€︹€﹁繖浜涙浘缁忚浣犳劅鍒般€屽畨鍏ㄣ€嶇殑鍙屽洜绱犺璇侊紝鍦⊿IM鍗′氦鎹㈠拰瀹炴椂閽撻奔闈㈠墠鍏跺疄涓嶅牚涓€鍑汇€?/p>

涓€鎶?00澶氬厓鐨刌ubiKey锛岄厤鍚圥roton Mail鐨刄2F鏀寔锛岃兘璁╀綘鐨勮处鍙峰畨鍏ㄦ彁鍗?00鍊嶃€傛洿閲嶈鐨勬槸锛?strong>瀹夊叏搴旇鏄竴浠剁畝鍗曠殑浜?/strong>鈥斺€旀彃涓婇挜鍖欙紝瑙︾璁よ瘉锛屽氨瀹屾垚浜嗐€傛瘮杈撳叆6浣嶆暟瀛楁洿绠€鍗曪紝姣旇鐩楀彿涔嬪悗鐨勯夯鐑︽洿鏄交鏉句竴涓囧€嶃€?/p>

---

-> 鐜板湪灏辫鍔細鐢?Proton Mail 娉ㄥ唽璐﹀彿锛屽紑鍚?U2F 瀹夊叏閽ュ寵璁よ瘉锛屾妸浣犵殑閭欢瀹夊叏浠庛€屽亣淇濋晼銆嶅崌绾т负銆岀湡鎶ょ浘銆嶏細
https://pr.tn/ref/KMW8V941

鏈枃灞炰簬銆孭roton Mail 瀹夊叏杩涢樁銆嶇郴鍒楋紝鎸佺画瑙ｉ攣闅愮閭鐨勬繁灞傝兘鍔涖€?/em>