不安全通信中的用户隐私泄露问题

摘要

The Internet has become an inseparable part of our daily life and work, but also become the chief culprit of user's privacy leakage. First, the current status of privacy leakage was overviewed, and the typical privacy leakage events in recent years were summarized. Second, the major approaches of user's information leakage were analyzed from three aspects: the client, the network communication and the server. Then, the privacy leakage caused by insecure communication during the users surifng the Internet was mainly studied, including plaintext login, MD5 authentication login and user registration. Finally, suggestions are put forward from the aspects of privacy protection technology, laws and regulations.%网络已经成为人们日常生活和工作中密不可分的一部分,但也是泄露用户隐私信息的罪魁祸首.首先,文章对当前隐私泄露的现状进行概述,总结了近几年典型的隐私泄露事件.然后,从用户端、通信网络和服务端三个方面分析了主要的用户信息泄露途径.接着,重点对用户上网过程中不安全通信造成的隐私泄露问题进行了研究,包括明文登录、MD5认证登录以及注册过程.最后,从隐私保护技术和法律法规方面提出了相关建议.