{"id":16670,"date":"2025-06-24T08:30:38","date_gmt":"2025-06-24T05:30:38","guid":{"rendered":"https:\/\/blog.sh.com.tr\/?p=16670"},"modified":"2025-06-24T09:29:06","modified_gmt":"2025-06-24T06:29:06","slug":"ssl-sertifikasi-siber-saldirilara-karsi-ne-kadar-guvenli","status":"publish","type":"post","link":"https:\/\/sh.com.tr\/blog\/ssl-sertifikasi-siber-saldirilara-karsi-ne-kadar-guvenli\/","title":{"rendered":"SSL Sertifikas\u0131 Siber Sald\u0131r\u0131lara Kar\u015f\u0131 Ne Kadar G\u00fcvenli?"},"content":{"rendered":"<p style=\"text-align: justify;\" data-start=\"345\" data-end=\"644\"><strong data-start=\"345\" data-end=\"367\">\u0130nternet g\u00fcvenli\u011fi<\/strong>, dijital \u00e7a\u011fda her sekt\u00f6rde kritik bir \u00f6neme sahiptir. Bankac\u0131l\u0131ktan e-ticarete, sa\u011fl\u0131k sistemlerinden ki\u015fisel bloglara kadar t\u00fcm \u00e7evrimi\u00e7i platformlar, kullan\u0131c\u0131 verilerini g\u00fcvenli \u015fekilde i\u015flemek zorundad\u0131r. Bu g\u00fcvenli\u011fin en temel ta\u015flar\u0131ndan biri de <strong data-start=\"621\" data-end=\"640\">SSL sertifikas\u0131<\/strong>d\u0131r.<\/p>\n<p style=\"text-align: justify;\" data-start=\"646\" data-end=\"828\">Peki, <strong data-start=\"652\" data-end=\"671\">SSL sertifikas\u0131<\/strong> ger\u00e7ekten siber sald\u0131r\u0131lara kar\u015f\u0131 ne kadar g\u00fcvenlidir? Bu sorunun yan\u0131t\u0131, sertifikan\u0131n nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131na ve ne t\u00fcr tehditlere kar\u015f\u0131 etkin oldu\u011funa ba\u011fl\u0131d\u0131r.<\/p>\n<h2 style=\"text-align: justify;\" data-start=\"835\" data-end=\"871\"><strong data-start=\"838\" data-end=\"871\">SSL Sertifikas\u0131 Ne \u0130\u015fe Yarar?<\/strong><\/h2>\n<p style=\"text-align: justify;\" data-start=\"873\" data-end=\"1167\"><strong data-start=\"873\" data-end=\"892\">SSL sertifikas\u0131<\/strong>, bir web sitesi ile ziyaret\u00e7i taray\u0131c\u0131s\u0131 aras\u0131nda ger\u00e7ekle\u015fen veri aktar\u0131m\u0131n\u0131 \u015fifreleyerek, \u00fc\u00e7\u00fcnc\u00fc \u015fah\u0131slar\u0131n bu verilere eri\u015fmesini veya de\u011fi\u015ftirmesini engeller. Bu sistem, <strong data-start=\"1067\" data-end=\"1101\">TLS (Transport Layer Security)<\/strong> protokol\u00fcne dayan\u0131r ve temel olarak a\u015fa\u011f\u0131daki g\u00f6revleri \u00fcstlenir:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"1169\" data-end=\"1434\">\n<li data-start=\"1169\" data-end=\"1288\"><strong data-start=\"1171\" data-end=\"1190\">Veri \u015fifreleme:<\/strong> Kullan\u0131c\u0131lar\u0131n g\u00f6nderdi\u011fi bilgiler (\u015fifre, kredi kart\u0131, form verileri) okunamaz hale getirilir.<\/li>\n<li data-start=\"1289\" data-end=\"1358\"><strong data-start=\"1291\" data-end=\"1312\">Kimlik do\u011frulama:<\/strong> Taray\u0131c\u0131, web sitesinin kimli\u011fini do\u011frular.<\/li>\n<li data-start=\"1359\" data-end=\"1434\"><strong data-start=\"1361\" data-end=\"1380\">Veri b\u00fct\u00fcnl\u00fc\u011f\u00fc:<\/strong> Aktar\u0131lan bilginin de\u011fi\u015ftirilmedi\u011fini garanti eder.<\/li>\n<\/ul>\n<p style=\"text-align: justify;\" data-start=\"1436\" data-end=\"1541\">Sonu\u00e7 olarak, <strong data-start=\"1450\" data-end=\"1469\">SSL sertifikas\u0131<\/strong>, ba\u011flant\u0131 g\u00fcvenli\u011fini sa\u011flar ama i\u00e7erik g\u00fcvenli\u011finden sorumlu de\u011fildir.<\/p>\n<h2 style=\"text-align: justify;\" data-start=\"1548\" data-end=\"1589\"><strong data-start=\"1551\" data-end=\"1589\">Hangi Sald\u0131r\u0131lara Kar\u015f\u0131 Etkilidir?<\/strong><\/h2>\n<h3 style=\"text-align: justify;\" data-start=\"1591\" data-end=\"1640\"><strong data-start=\"1595\" data-end=\"1638\">Man-in-the-Middle (MITM) Sald\u0131r\u0131lar\u0131<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"1641\" data-end=\"1872\">K\u00f6t\u00fc niyetli bir ki\u015fi, kullan\u0131c\u0131 ile sunucu aras\u0131ndaki ileti\u015fimi dinleyebilir. E\u011fer veri a\u00e7\u0131k metin olarak g\u00f6nderiliyorsa (\u00f6rne\u011fin <strong data-start=\"1772\" data-end=\"1780\">HTTP<\/strong> protokol\u00fcyle), kredi kart\u0131 numaralar\u0131, giri\u015f \u015fifreleri gibi bilgiler kolayca \u00e7al\u0131nabilir.<\/p>\n<p style=\"text-align: justify;\" data-start=\"1874\" data-end=\"2007\"><a href=\"https:\/\/sh.com.tr\/ssl\"><strong data-start=\"1874\" data-end=\"1893\">SSL sertifikas\u0131<\/strong><\/a> sayesinde bu ileti\u015fim \u015fifrelenir ve sald\u0131rgan veriyi \u00e7\u00f6zemez. Bu, \u00f6zellikle halka a\u00e7\u0131k Wi-Fi a\u011flar\u0131nda \u00f6nemlidir.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"2009\" data-end=\"2049\"><strong data-start=\"2013\" data-end=\"2047\">Paket Sniffing (A\u011f Dinleme)<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"2050\" data-end=\"2291\">Ayn\u0131 a\u011fda bulunan kullan\u0131c\u0131lar, verilerinizi izinsiz \u015fekilde takip etmeye \u00e7al\u0131\u015fabilir. Bu sald\u0131r\u0131 t\u00fcr\u00fc, \u015fifrelenmemi\u015f ba\u011flant\u0131larda \u00e7ok yayg\u0131nd\u0131r.<br data-start=\"2196\" data-end=\"2199\" \/><strong data-start=\"2199\" data-end=\"2218\">SSL sertifikas\u0131<\/strong> devredeyse, a\u011f dinleme ara\u00e7lar\u0131 sadece anlams\u0131z, \u015fifreli veri g\u00f6rebilir.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"2293\" data-end=\"2336\"><strong data-start=\"2297\" data-end=\"2334\">Veri De\u011fi\u015ftirme \/ Enjekte Etme<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"2337\" data-end=\"2532\">Taray\u0131c\u0131 ile sunucu aras\u0131ndaki veri de\u011fi\u015ftirilerek y\u00f6nlendirilebilir (\u00f6rne\u011fin sahte bir kampanya sayfas\u0131na).<br data-start=\"2445\" data-end=\"2448\" \/><strong data-start=\"2448\" data-end=\"2467\">SSL sertifikas\u0131<\/strong>, bu t\u00fcr manip\u00fclasyonlar\u0131 engelleyerek verinin b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc korur.<\/p>\n<h2 style=\"text-align: justify;\" data-start=\"2539\" data-end=\"2586\"><strong data-start=\"2542\" data-end=\"2586\">Ne T\u00fcr Sald\u0131r\u0131lara Kar\u015f\u0131 Yetersiz Kal\u0131r?<\/strong><\/h2>\n<h3 style=\"text-align: justify;\" data-start=\"2588\" data-end=\"2622\"><strong data-start=\"2592\" data-end=\"2620\">Phishing (Kimlik Av\u0131)<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"2623\" data-end=\"2911\">Sahte siteler, <strong data-start=\"2638\" data-end=\"2657\">SSL sertifikas\u0131<\/strong> kullanarak kullan\u0131c\u0131ya g\u00fcven veriyor gibi g\u00f6r\u00fcnebilir.<br data-start=\"2712\" data-end=\"2715\" \/>Bir\u00e7ok kimlik av\u0131 sitesi bug\u00fcnlerde \u00fccretsiz <strong data-start=\"2760\" data-end=\"2779\">SSL sertifikas\u0131<\/strong> kullanmaktad\u0131r (\u00f6rne\u011fin Let&#8217;s Encrypt). Bu nedenle adres \u00e7ubu\u011fundaki kilit simgesi <strong data-start=\"2863\" data-end=\"2908\">tek ba\u015f\u0131na g\u00fcvenli\u011fin g\u00f6stergesi de\u011fildir<\/strong>.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"2913\" data-end=\"2963\"><strong data-start=\"2917\" data-end=\"2961\">Zararl\u0131 Yaz\u0131l\u0131m (Malware) Enjeksiyonu<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"2964\" data-end=\"3129\">Kullan\u0131c\u0131n\u0131n cihaz\u0131nda bulunan bir zararl\u0131 yaz\u0131l\u0131m, web sitesinin i\u00e7eri\u011fini de\u011fi\u015ftirebilir.<br data-start=\"3055\" data-end=\"3058\" \/><strong data-start=\"3058\" data-end=\"3077\">SSL sertifikas\u0131<\/strong>, cihaz\u0131n i\u00e7indeki tehditlere kar\u015f\u0131 koruma sa\u011flamaz.<\/p>\n<h3 style=\"text-align: justify;\" data-start=\"3131\" data-end=\"3178\"><strong data-start=\"3135\" data-end=\"3176\">Zay\u0131f Kodlama ve G\u00fcvenlik A\u00e7\u0131klar\u0131<\/strong><\/h3>\n<p style=\"text-align: justify;\" data-start=\"3179\" data-end=\"3316\">Web siteniz SQL enjeksiyonu, XSS (Cross Site Scripting) gibi a\u00e7\u0131klara sahipse, <strong data-start=\"3258\" data-end=\"3277\">SSL sertifikas\u0131<\/strong> bu sald\u0131r\u0131lara kar\u015f\u0131 sizi koruyamaz.<\/p>\n<p style=\"text-align: justify;\" data-start=\"3318\" data-end=\"3427\">Yani, <strong data-start=\"3324\" data-end=\"3377\">SSL sadece &#8220;ta\u015f\u0131y\u0131c\u0131 boruyu&#8221; g\u00fcvenli hale getirir<\/strong>; &#8220;i\u00e7inden ge\u00e7en verinin ne oldu\u011fuyla&#8221; ilgilenmez.<\/p>\n<h2 style=\"text-align: justify;\" data-start=\"3434\" data-end=\"3490\"><strong data-start=\"3437\" data-end=\"3490\">Farkl\u0131 SSL Sertifika T\u00fcrleri Ne Kadar G\u00fcvenlidir?<\/strong><\/h2>\n<p style=\"text-align: justify;\" data-start=\"3492\" data-end=\"3592\">SSL sertifikalar\u0131n\u0131n g\u00fcvenli\u011fi, sa\u011flad\u0131\u011f\u0131 \u015fifreleme seviyesinden \u00e7ok, <strong data-start=\"3562\" data-end=\"3582\">do\u011frulama t\u00fcr\u00fcne<\/strong> ba\u011fl\u0131d\u0131r:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"3594\" data-end=\"3930\">\n<li data-start=\"3594\" data-end=\"3690\"><strong data-start=\"3596\" data-end=\"3627\">DV SSL (Domain Validation):<\/strong> En temel d\u00fczeyde g\u00fcvenlik sunar. Sadece alan ad\u0131 do\u011frulan\u0131r.<\/li>\n<li data-start=\"3691\" data-end=\"3786\"><strong data-start=\"3693\" data-end=\"3730\">OV SSL (Organization Validation):<\/strong> Alan ad\u0131n\u0131n yan\u0131 s\u0131ra \u015firket bilgileri de do\u011frulan\u0131r.<\/li>\n<li data-start=\"3787\" data-end=\"3930\"><strong data-start=\"3789\" data-end=\"3822\">EV SSL (Extended Validation):<\/strong> En kapsaml\u0131 g\u00fcvenlik d\u00fczeyini sunar. Adres \u00e7ubu\u011funda \u015firket ad\u0131 g\u00f6r\u00fcn\u00fcr ve kimlik do\u011frulamas\u0131 detayl\u0131d\u0131r.<\/li>\n<\/ul>\n<p style=\"text-align: justify;\" data-start=\"3932\" data-end=\"4102\">Her \u00fc\u00e7 t\u00fcr de ayn\u0131 d\u00fczeyde \u015fifreleme sunar, farklar\u0131 do\u011frulama s\u00fcrecindedir. <strong data-start=\"4009\" data-end=\"4102\">Siber sald\u0131r\u0131lara kar\u015f\u0131 daha fazla g\u00fcven sa\u011flamak i\u00e7in OV veya EV SSL tercih edilmelidir.<\/strong><\/p>\n<h2 style=\"text-align: justify;\" data-start=\"4109\" data-end=\"4156\"><strong data-start=\"4112\" data-end=\"4156\">SSL Sertifikas\u0131 + Ek G\u00fcvenlik Katmanlar\u0131<\/strong><\/h2>\n<p style=\"text-align: justify;\" data-start=\"4158\" data-end=\"4317\">Bir web sitesini siber sald\u0131r\u0131lara kar\u015f\u0131 daha dayan\u0131kl\u0131 hale getirmek i\u00e7in a\u015fa\u011f\u0131daki g\u00fcvenlik uygulamalar\u0131 da <strong data-start=\"4268\" data-end=\"4287\">SSL sertifikas\u0131<\/strong> ile birlikte kullan\u0131lmal\u0131d\u0131r:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"4319\" data-end=\"4589\">\n<li data-start=\"4319\" data-end=\"4367\"><strong data-start=\"4321\" data-end=\"4355\">WAF (Web Application Firewall)<\/strong> kullan\u0131m\u0131<\/li>\n<li data-start=\"4368\" data-end=\"4404\"><strong data-start=\"4370\" data-end=\"4402\">G\u00fcncel yaz\u0131l\u0131m ve eklentiler<\/strong><\/li>\n<li data-start=\"4405\" data-end=\"4440\"><strong data-start=\"4407\" data-end=\"4438\">D\u00fczenli g\u00fcvenlik taramalar\u0131<\/strong><\/li>\n<li data-start=\"4441\" data-end=\"4462\"><strong data-start=\"4443\" data-end=\"4460\">DDoS korumas\u0131<\/strong><\/li>\n<li data-start=\"4463\" data-end=\"4499\"><strong data-start=\"4465\" data-end=\"4497\">Kapsaml\u0131 yedekleme \u00e7\u00f6z\u00fcmleri<\/strong><\/li>\n<li data-start=\"4500\" data-end=\"4543\"><strong data-start=\"4502\" data-end=\"4541\">\u0130ki fakt\u00f6rl\u00fc kimlik do\u011frulama (2FA)<\/strong><\/li>\n<li data-start=\"4544\" data-end=\"4589\"><strong data-start=\"4546\" data-end=\"4589\">Sosyal m\u00fchendislik fark\u0131ndal\u0131\u011f\u0131 e\u011fitimi<\/strong><\/li>\n<\/ul>\n<h2 style=\"text-align: justify;\" data-start=\"4596\" data-end=\"4643\"><strong data-start=\"4599\" data-end=\"4643\">SSL Sertifikas\u0131 Ne Kadar G\u00fcvenli?<\/strong><\/h2>\n<p style=\"text-align: justify;\" data-start=\"4645\" data-end=\"4845\"><strong data-start=\"4645\" data-end=\"4664\">SSL sertifikas\u0131<\/strong>, veri iletimi s\u0131ras\u0131nda g\u00fcvenli\u011fi sa\u011flayan \u00e7ok \u00f6nemli bir teknolojidir. \u00d6zellikle <strong data-start=\"4747\" data-end=\"4760\">\u015fifreleme<\/strong>, <strong data-start=\"4762\" data-end=\"4782\">kimlik do\u011frulama<\/strong> ve <strong data-start=\"4786\" data-end=\"4804\">veri b\u00fct\u00fcnl\u00fc\u011f\u00fc<\/strong> a\u00e7\u0131s\u0131ndan g\u00fc\u00e7l\u00fc bir koruma sunar. Ancak:<\/p>\n<ul style=\"text-align: justify;\" data-start=\"4847\" data-end=\"4942\">\n<li data-start=\"4847\" data-end=\"4886\"><strong data-start=\"4849\" data-end=\"4886\">Web uygulamalar\u0131n\u0131n kod g\u00fcvenli\u011fi<\/strong><\/li>\n<li data-start=\"4887\" data-end=\"4910\"><strong data-start=\"4889\" data-end=\"4910\">Kullan\u0131c\u0131 e\u011fitimi<\/strong><\/li>\n<li data-start=\"4911\" data-end=\"4942\"><strong data-start=\"4913\" data-end=\"4940\">Sunucu tarafl\u0131 \u00f6nlemler<\/strong><\/li>\n<\/ul>\n<p style=\"text-align: justify;\" data-start=\"4944\" data-end=\"4991\">gibi ek g\u00fcvenlik unsurlar\u0131 da olmazsa olmazd\u0131r.<\/p>\n<p style=\"text-align: justify;\" data-start=\"4993\" data-end=\"5173\">K\u0131sacas\u0131, <a href=\"https:\/\/sh.com.tr\/ssl\"><strong data-start=\"5006\" data-end=\"5025\">SSL sertifikas\u0131<\/strong><\/a>, g\u00fcvenlik zincirinin g\u00fc\u00e7l\u00fc ama tek halkas\u0131 de\u011fildir. G\u00fcvenli bir web sitesi i\u00e7in bu temel halkay\u0131, di\u011fer savunma katmanlar\u0131yla desteklemek gerekir.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0130nternet g\u00fcvenli\u011fi, dijital \u00e7a\u011fda her sekt\u00f6rde kritik bir \u00f6neme sahiptir. Bankac\u0131l\u0131ktan e-ticarete, sa\u011fl\u0131k sistemlerinden ki\u015fisel bloglara kadar t\u00fcm \u00e7evrimi\u00e7i platformlar, kullan\u0131c\u0131 verilerini g\u00fcvenli \u015fekilde i\u015flemek zorundad\u0131r. Bu g\u00fcvenli\u011fin en temel ta\u015flar\u0131ndan biri de SSL sertifikas\u0131d\u0131r. Peki, SSL sertifikas\u0131 ger\u00e7ekten siber sald\u0131r\u0131lara kar\u015f\u0131 ne kadar g\u00fcvenlidir? Bu sorunun yan\u0131t\u0131, sertifikan\u0131n nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131na ve ne t\u00fcr tehditlere [&hellip;]<\/p>\n","protected":false},"author":7,"featured_media":16566,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[509,1773,253,1772],"class_list":["post-16670","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ssl-sertifikasi","tag-ssl-guvenligi","tag-ssl-guvenlik-seviyesi","tag-ssl-sertifikasi","tag-ssl-sifreleme-sistemi"],"_links":{"self":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16670","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/comments?post=16670"}],"version-history":[{"count":0,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/posts\/16670\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media\/16566"}],"wp:attachment":[{"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/media?parent=16670"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/categories?post=16670"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sh.com.tr\/blog\/wp-json\/wp\/v2\/tags?post=16670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}