{"id":106529,"date":"2023-01-27T12:48:11","date_gmt":"2023-01-27T10:48:12","guid":{"rendered":"https:\/\/prohoster.info\/?p=106529"},"modified":"2023-02-07T12:09:04","modified_gmt":"2023-02-07T10:09:04","slug":"vypusk-web-brauzera-ceno-2-0-ispolzuyushhego-p2p-set-dlya-obhoda-blokirovok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/vypusk-web-brauzera-ceno-2-0-ispolzuyushhego-p2p-set-dlya-obhoda-blokirovok","title":{"rendered":"Vyd\u00e1n\u00ed webov\u00e9ho prohl\u00ed\u017ee\u010de CENO 2.0, kter\u00fd vyu\u017e\u00edv\u00e1 P2P s\u00ed\u0165 pro obch\u00e1zen\u00ed blokac\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost eQualite zve\u0159ejnila vyd\u00e1n\u00ed mobiln\u00edho webov\u00e9ho prohl\u00ed\u017ee\u010de CENO 2.0.0 (CEnsorship.NO), ur\u010den\u00e9ho pro zaji\u0161t\u011bn\u00ed p\u0159\u00edstupu k informac\u00edm v podm\u00ednk\u00e1ch cenzury, filtrov\u00e1n\u00ed provozu nebo odstaven\u00ed segment\u016f internetu od glob\u00e1ln\u00ed s\u00edt\u011b. Prohl\u00ed\u017ee\u010d je postaven na enginu GeckoView (pou\u017e\u00edvan\u00e9m ve Firefoxu pro Android), roz\u0161\u00ed\u0159en\u00e9m o mo\u017enost v\u00fdm\u011bny dat prost\u0159ednictv\u00edm decentralizovan\u00e9 P2P s\u00edt\u011b, v n\u00ed\u017e u\u017eivatel\u00e9 pom\u00e1haj\u00ed p\u0159i p\u0159esm\u011brov\u00e1n\u00ed provozu k extern\u00edm br\u00e1n\u00e1m, zaji\u0161\u0165uj\u00edc\u00edm p\u0159\u00edstup k informac\u00edm obch\u00e1zej\u00edc\u00edm filtry. V\u00fdvoj projektu je \u0161\u00ed\u0159en pod licenc\u00ed MIT. Hotov\u00e9 sestaven\u00ed jsou k dispozici v Google Play. <\/p>\n

Funk\u010dnost P2P byla odd\u011blena do samostatn\u00e9 knihovny Ouinet, kter\u00e1 m\u016f\u017ee b\u00fdt pou\u017eita pro p\u0159id\u00e1n\u00ed prost\u0159edk\u016f k obch\u00e1zen\u00ed cenzury do jak\u00fdchkoli aplikac\u00ed. Prohl\u00ed\u017ee\u010d CENO a knihovna Ouinet umo\u017e\u0148uj\u00ed p\u0159\u00edstup k informac\u00edm v podm\u00ednk\u00e1ch aktivn\u00ed blokace proxy server\u016f, VPN<\/a>, bran a dal\u0161\u00edch centralizovan\u00fdch mechanism\u016f obch\u00e1zen\u00ed filtrov\u00e1n\u00ed provozu, a\u017e do \u00fapln\u00e9ho odstaven\u00ed internetu v cenzurovan\u00fdch oblastech (p\u0159i \u00fapln\u00e9 blokaci m\u016f\u017ee obsah b\u00fdt distribuov\u00e1n z cache nebo m\u00edstn\u00edch \u00falo\u017ei\u0161\u0165). <\/p>\n

Projekt vyu\u017e\u00edv\u00e1 ke\u0161ov\u00e1n\u00ed obsahu na stran\u011b ka\u017ed\u00e9ho u\u017eivatele s podporou decentralizovan\u00e9 ke\u0161e popul\u00e1rn\u00edho obsahu. P\u0159i otev\u0159en\u00ed webov\u00e9 str\u00e1nky u\u017eivatelem se sta\u017een\u00fd obsah ukl\u00e1d\u00e1 v m\u00edstn\u00edm syst\u00e9mu a st\u00e1v\u00e1 se dostupn\u00fdm pro \u00fa\u010dastn\u00edky P2P s\u00edt\u011b, kte\u0159\u00ed nemohou z\u00edskat p\u0159\u00edm\u00fd p\u0159\u00edstup k zdroji nebo k br\u00e1n\u00e1m pro obch\u00e1zen\u00ed blokac\u00ed. Na ka\u017ed\u00e9m za\u0159\u00edzen\u00ed jsou uchov\u00e1v\u00e1na pouze data, kter\u00e1 byla p\u0159\u00edmo po\u017eadov\u00e1na z tohoto za\u0159\u00edzen\u00ed. Identifikace str\u00e1nek v ke\u0161i prob\u00edh\u00e1 za pou\u017eit\u00ed hash URL. V\u0161echny souvisej\u00edc\u00ed \u00fadaje o str\u00e1nce, jako jsou obr\u00e1zky, skripty a styly, jsou seskupeny a odesl\u00e1ny spole\u010dn\u011b pod jedn\u00edm identifik\u00e1torem. <\/p>\n

Pro p\u0159\u00edstup k nov\u00e9mu obsahu, kter\u00fd je blokov\u00e1n, se pou\u017e\u00edvaj\u00ed speci\u00e1ln\u00ed proxy br\u00e1ny (injectory), kter\u00e9 jsou um\u00edst\u011bny na extern\u00edch \u010d\u00e1stech s\u00edt\u011b, kter\u00e9 nejsou cenzurov\u00e1ny. Informace mezi klientem a branou jsou \u0161ifrov\u00e1ny pomoc\u00ed \u0161ifrov\u00e1n\u00ed na b\u00e1zi ve\u0159ejn\u00fdch kl\u00ed\u010d\u016f. Pro identifikaci bran a prevenci zav\u00e1d\u011bn\u00ed \u0161kodliv\u00fdch bran se pou\u017e\u00edvaj\u00ed digit\u00e1ln\u00ed podpisy, a kl\u00ed\u010de brany podporovan\u00e9 projektem jsou zahrnuty v dod\u00e1vce prohl\u00ed\u017ee\u010de. <\/p>\n

Pro p\u0159\u00edstup k br\u00e1n\u011b v p\u0159\u00edpad\u011b jej\u00edho blokov\u00e1n\u00ed je podporov\u00e1no p\u0159ipojen\u00ed v \u0159et\u011bzci p\u0159es jin\u00e9 u\u017eivatele, kte\u0159\u00ed funguj\u00ed jako proxy pro p\u0159enos provozu k br\u00e1n\u011b (data jsou \u0161ifrov\u00e1na kl\u00ed\u010dem br\u00e1ny, co\u017e neumo\u017e\u0148uje tranzitn\u00edm u\u017eivatel\u016fm, skrze jejich\u017e syst\u00e9my je po\u017eadavek p\u0159ed\u00e1v\u00e1n, zasahovat do provozu nebo ur\u010dit obsah). Klientsk\u00e9 syst\u00e9my nepos\u00edlaj\u00ed extern\u00ed po\u017eadavky jm\u00e9nem jin\u00fdch u\u017eivatel\u016f, ale bu\u010f vracej\u00ed data z cache, nebo se pou\u017e\u00edvaj\u00ed jako spojen\u00ed pro nastaven\u00ed tunelu k proxy br\u00e1n\u011b. <\/p>\n

\"Vyd\u00e1n\u00ed<\/center> <\/p>\n

B\u011b\u017en\u00e9 dotazy se nejprve pokou\u0161\u00ed prohl\u00ed\u017ee\u010d doru\u010dit p\u0159\u00edmo, a pokud p\u0159\u00edm\u00fd dotaz neprojde \u2014 provede vyhled\u00e1v\u00e1n\u00ed v distribuovan\u00e9 cache. Pokud v cache nen\u00ed URL, informace se po\u017eaduje p\u0159es p\u0159ipojen\u00ed k proxy br\u00e1n\u011b nebo p\u0159\u00edstupem k br\u00e1n\u011b p\u0159es jin\u00e9ho u\u017eivatele. D\u016fv\u011brn\u00e9 \u00fadaje, jako jsou cookies, se v cache neukl\u00e1daj\u00ed. <\/p>\n

\"Vyd\u00e1n\u00ed<\/center> <\/p>\n

Ka\u017ed\u00fd syst\u00e9m v P2P s\u00edti je vybaven vnit\u0159n\u00edm identifik\u00e1torem, kter\u00fd se pou\u017e\u00edv\u00e1 p\u0159i sm\u011brov\u00e1n\u00ed v P2P s\u00edti, ale nen\u00ed spojen s fyzickou polohou u\u017eivatele. Autenticita p\u0159en\u00e1\u0161en\u00fdch a v cache ulo\u017een\u00fdch informac\u00ed je zaji\u0161t\u011bna pou\u017eit\u00edm digit\u00e1ln\u00edch podpis\u016f (Ed25519). P\u0159en\u00e1\u0161en\u00fd provoz je \u0161ifrov\u00e1n pomoc\u00ed TLS. Pro p\u0159\u00edstup k informac\u00edm o struktu\u0159e s\u00edt\u011b, \u00fa\u010dastn\u00edc\u00edch a vyrovnan\u00e9m obsahu se pou\u017e\u00edv\u00e1 distribuovan\u00e1 hash tabulka (DHT). Pokud je to nutn\u00e9, krom\u011b HTTP mohou b\u00fdt jako transport tak\u00e9 pou\u017eity \u03bcTP nebo Tor. <\/p>\n

V tomto p\u0159\u00edpad\u011b CENO nezaji\u0161\u0165uje anonymitu a informace o odes\u00edlan\u00fdch dotazech jsou dostupn\u00e9 pro anal\u00fdzu na za\u0159\u00edzen\u00edch \u00fa\u010dastn\u00edk\u016f (nap\u0159\u00edklad podle hash lze zjistit, \u017ee u\u017eivatel nav\u0161t\u00edvil ur\u010ditou str\u00e1nku). Pro d\u016fv\u011brn\u00e9 dotazy, nap\u0159\u00edklad vy\u017eaduj\u00edc\u00ed p\u0159ipojen\u00ed k vlastn\u00edmu \u00fa\u010dtu v e-mailu a soci\u00e1ln\u00edch s\u00edt\u00edch, se doporu\u010duje pou\u017e\u00edt samostatnou soukromou kartu, p\u0159i jej\u00edm\u017e pou\u017eit\u00ed se data dotazuj\u00ed pouze p\u0159\u00edmo nebo prost\u0159ednictv\u00edm proxy-br\u00e1ny, ale bez dotazov\u00e1n\u00ed na cache a bez ukl\u00e1d\u00e1n\u00ed do cache. <\/p>\n

Mezi zm\u011bnami v nov\u00e9m vyd\u00e1n\u00ed: <\/p>\n