隐私不仅会受到您经常访问的网站的侵犯，而且还会受到ISP^(ISPs)、公共WiFi连接等的侵犯。建议使用确保阻止网站建立您的个人资料的 VPN 。^{(use a VPN)}但是，如果您不能，我们强烈建议您进行浏览体验安全检查。

Cloudflare开发了ESNI 检查器^{(ESNI checker)}或加密服务器名称指示工具^{(Encrypted Server Name Indication tool)}。该服务可以检查您的浏览体验是否安全以及DNS查询是否已加密。也就是说，让我们清楚地理解一件事。如果您连接到公共 WiFi^{(Public WiFi)}或开放网络，则不要期望有好的结果。此工具可以帮助您了解您正在使用的工具或任何声称安全的服务的合法性。

浏览体验安全检查

Cloudflare ESNI 检查器自动测试：^{(Cloudflare ESNI checker automatically test:)}

1. 您的DNS 查询^(queries)和答案是否已加密
2. 如果 DNS 解析器使用 DNSSEC，
3. 用于连接页面的TLS版本
4. 以及您的浏览器是否支持加密的服务器名称指示^{(Server Name Indication)}( SNI )。

任何失败都表明浏览数据可能容易受到攻击，即任何欺骗网络的人都可能侵入您的数据，包括您正在访问的服务器或您正在使用的证书。如果DNS响应是欺诈性的，您还可能最终访问并向意外方提供数据。

您的浏览器有多安全？

运行此测试^{(Once you run this test)}后，您将获得有关每个测试的信息、它们是否失败以及它们的含义。它还建议解决方案来帮助您解决问题。也就是说，让我们了解这些术语的含义：

安全 DNS：^{(Secure DNS:)} Cloudflare DNS或Google DNS是安全DNS的示例。他们确保在离开DNS时对数据进行加密。大多数ISP^(ISPs)不管理安全DNS。因此，如果可能，请确保在您的计算机或路由器上进行更改^{(change this on your computer or router)}。

DNSSEC：如果你通过这个，这意味着发送数据的网站实际上是他们发送的，而不是其他任何人发送的。

TLS 1.3： 它是TLS协议的最新版本，包含许多性能和隐私方面的改进。

加密 SNI：^{(Encrypted SNI:)}此功能可确保在您访问启用了加密SNI的站点时保持主机名的私密性。

因此，如果您的浏览器支持它，它会让您安全吗？^{(So if your browser supports it, does it make you secure?)}

可悲的是，不。这是一条双向路径。您正在访问的域应该提供对ESNI的支持。如果您访问的域不支持DNSSEC、TLS 1.3和Encrypted SNI，您仍然可能容易受到攻击。

我在所有浏览器上都运行了这个工具，但似乎没有人是完美的。Firefox预计会带来此功能，但使用最新版本运行此测试会导致其他结果。因此，如果您未通过浏览体验安全检查^{(Browsing Experience Security Check)}，请不要进入恐慌模式，这可能需要一些时间。

Browsing Experience Security Check: How secure is your browser?

Privacy is nоt just breached bу websіtes which you often visit, but they are also violated by ISPs, рυblic WiFi connection and so on. It is reсommended to use a VPN which makes sure to block websites to build your profile. However, if you cannot, we would highly recommend doing a browsing experience security check.

Cloudflare has developed an ESNI checker or Encrypted Server Name Indication tool. This service can check if your browsing experience is safe and the DNS queries are encrypted. That said, let’s understand one thing clearly. Don’t expect good results if you connect to Public WiFi or open networks. This tool can help you know the legitimacy of a tool you are using or any service which claims to be secure.

Browsing Experience Security Check

Cloudflare ESNI checker automatically test:

1. Whether your DNS queries and answers are encrypted
2. If DNS resolver uses DNSSEC,
3. The version of TLS is used to connect to the page
4. and whether your browser supports encrypted Server Name Indication (SNI).

Any failure indicates that browsing data could be vulnerable, i.e., anybody spoofing the network might tap into your data including servers you are visiting, or the certificate you are using. If the DNS response is fraudulent, you could also end up visiting and providing data to an unintended party.

How secure is your browser?

Once you run this test, you will get information about each, if they failed, and what do they mean. It also suggests solutions to help you resolve. That said, let’s get to understand what each of these terms means:

Secure DNS: Cloudflare DNS or Google DNS are examples of secure DNS. They make sure the data is encrypted when they leave DNS. Most of the ISPs don’t manage secure DNS. So if possible, make sure to change this on your computer or router.

DNSSEC: If you pass this, it means websites sending data is actually sent by them, and not anybody else.

TLS 1.3: It is the latest version of the TLS protocol and contains many improvements for performance & privacy.

Encrypted SNI: This feature makes sure to keep the hostname private when you are visiting an Encrypted SNI enabled site.

So if your browser supports it, does it make you secure?

Sadly, No. It is a two-way path. Support for ESNI should be available on the domain you are visiting. If the domain you visit doesn’t support DNSSEC, TLS 1.3, and Encrypted SNI, you are still potentially vulnerable.

I ran this tool on all browsers, but nobody seems to be perfect. Firefox was expected to bring this feature, but running this test with the latest version resulted otherwise. So if you fail the Browsing Experience Security Check, don’t get into a panic mode, this may take some time.

Related posts

• Browser Security Test检查您的Browser是否安全

• 如何在Chrome，Firefox，Edge浏览器中黑名单或块网站

• Windows 10中的Kernel Security Check Failure error

• 如何使用Check Disk（CHKDSK）在Windows 10中测试和修复硬盘驱动器错误

• Windows 体验指数 - 如何使用它并解释结果

• Fix err_connection_closed windows 10上的错误

• 是私有Browsing safe？什么时候应该使用Incognito Mode？

• Create单个desktop shortcut在Windows 10打开多个网页

• 10 Best Chrome，Edge和Firefox延伸页面以保存页面稍后阅读

• Share Button Plugins为Chrome，Firefox and Edge browsers

• 什么是Lazy Loading？在Chrome，Firefox，Edge中启用或禁用它

• 如何将网页保存为Chrome or Firefox中的PDF

• SoftPerfect Cache Relocator用于Windows 10

• 如何在Chrome，Firefox and Edge中翻译Web page

• 在 Windows 7 中使用检查磁盘 (chkdsk) 测试和修复驱动器上的错误

• 如何改变Default Font在Chrome，Edge，Firefox browser

• 关闭所有在一次Chrome，Edge，或Firefox打开browser tabs

• 它是安全的保存密码在Chrome，Firefox or Edge browser？

• 400 Bad Request，Cookie Too Large - Chrome，Edge，Firefox，即

• Force Links在Chrome，Edge，Firefox，Opera中打开背景Tab