{"id":113276,"date":"2024-01-31T13:41:06","date_gmt":"2024-01-31T11:41:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec"},"modified":"2024-01-31T13:41:06","modified_gmt":"2024-01-31T11:41:10","slug":"sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","title":{"rendered":"V\u00fdpadek v dom\u00e9nov\u00e9 z\u00f3n\u011b RU kv\u016fli chyb\u011b p\u0159i v\u00fdm\u011bn\u011b kl\u00ed\u010d\u016f DNSSEC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

30. ledna v 18:20 (MSK) se u\u017eivatel\u00e9 setkali s masivn\u00edm v\u00fdpadkem ur\u010den\u00ed hostitel\u016f v dom\u00e9nov\u00e9 z\u00f3n\u011b RU, kter\u00fd byl zp\u016fsoben chybou p\u0159i zm\u011bn\u011b kl\u00ed\u010d\u016f pou\u017e\u00edvan\u00fdch pro ov\u011b\u0159ov\u00e1n\u00ed autenticity z\u00f3ny RU prost\u0159ednictv\u00edm DNSSEC. V d\u016fsledku incidentu na DNS serverech, kter\u00e9 vyu\u017e\u00edvaj\u00ed DNSSEC pro ov\u011b\u0159ov\u00e1n\u00ed dat, p\u0159estaly b\u00fdt ur\u010dov\u00e1ny v\u0161echny dom\u00e9ny v z\u00f3n\u011b \u201e.ru\u201c. Probl\u00e9m se dotkl pouze u\u017eivatel\u016f, kte\u0159\u00ed pou\u017e\u00edvaj\u00ed DNS resolver poskytovatel\u016f nebo ve\u0159ejn\u00e9 DNS slu\u017eby, jako je 8.8.8.8, ov\u011b\u0159uj\u00edc\u00ed autenticitu po\u017eadavk\u016f pomoc\u00ed DNSSEC. U\u017eivatel\u00e9 DNS resolver\u016f, na kter\u00fdch je DNSSEC vypnuto, nebyli posti\u017eeni. <\/p>\n

To, co se stalo, p\u0159ipom\u00edn\u00e1 incident z lo\u0148sk\u00e9ho roku s registr\u00e1torem InternetNZ, kter\u00fd odpov\u00edd\u00e1 za dom\u00e9novou z\u00f3nu \u201e.NZ\u201c, kter\u00fd vedl k v\u00fdpadku v resolvov\u00e1n\u00ed. dom\u00e9nov\u00fdch jmen<\/a> v z\u00f3n\u011b \u201e.nz\u201c kv\u016fli chyb\u011b p\u0159i rotaci KSK kl\u00ed\u010d\u016f (Key Signing Key), kter\u00e9 jsou pou\u017e\u00edv\u00e1ny pro digit\u00e1ln\u00ed podpisy z\u00e1znam\u016f DNSKEY, obsahuj\u00edc\u00edch kl\u00ed\u010de pro podepisov\u00e1n\u00ed dom\u00e9nov\u00e9 z\u00f3ny (ZSK, Zone Signing Key). V p\u0159\u00edpad\u011b InternetNZ byla chyba spojena se zm\u011bnou form\u00e1tu kl\u00ed\u010d\u016f p\u0159i p\u0159echodu na nov\u00fd informa\u010dn\u00ed syst\u00e9m registr\u00e1tora. D\u016fvody incidentu v z\u00f3n\u011b RU dosud nebyly podrobn\u011b pops\u00e1ny \u2014 Koordina\u010dn\u00ed centrum dom\u00e9n RU pouze v obecn\u00fdch rysech potvrdilo, \u017ee probl\u00e9m souvis\u00ed s p\u0159enastaven\u00edm DNSSEC. <\/p>\n

Na z\u00e1klad\u011b vn\u011bj\u0161\u00edch projev\u016f se zd\u00e1, \u017ee v\u00fdpadek nastal v d\u016fsledku pokusu o v\u00fdm\u011bnu kl\u00ed\u010de pou\u017e\u00edvan\u00e9ho pro ov\u011b\u0159ov\u00e1n\u00ed z\u00f3ny RU. Tento kl\u00ed\u010d je ko\u0159enem d\u016fv\u011bry pro ostatn\u00ed kl\u00ed\u010de pou\u017e\u00edvan\u00e9 v dom\u00e9n\u00e1ch druh\u00e9ho stupn\u011b a z\u00e1rove\u0148 pou\u017e\u00edv\u00e1 kl\u00ed\u010d dom\u00e9ny \u201e.\u201d jako nad\u0159azen\u00fd pro potvrzen\u00ed sv\u00e9 d\u016fv\u011bry. 26. ledna se v nastaven\u00ed DNSEC z\u00f3ny RU, krom\u011b hlavn\u00edho kl\u00ed\u010de s identifik\u00e1torem 44301, objevil dal\u0161\u00ed kl\u00ed\u010d 52263.

\"V\u00fdpadek\"V\u00fdpadek<\/center> <\/p>\n

V\u010dera kolem 18:20 byl nov\u00fd kl\u00ed\u010d aktivov\u00e1n pro ov\u011b\u0159ov\u00e1n\u00ed z\u00e1znam\u016f v z\u00f3n\u011b RU, ale po p\u0159echodu na nov\u00fd kl\u00ed\u010d z d\u016fvodu chyby p\u0159estala prob\u00edhat autentifikace.

\"V\u00fdpadek<\/center> <\/p>\n

Podpis star\u00fdm kl\u00ed\u010dem byla obnovena p\u0159ibli\u017en\u011b v 21 hodin (MSK) a prvn\u00ed spr\u00e1vn\u00e1 odpov\u011b\u010f byla zaznamen\u00e1na slu\u017ebou dnsviz.net v 22:07 (MSK). Chybn\u00e9 nastaven\u00ed trvalo p\u0159ibli\u017en\u011b dva a p\u016fl hodiny, ale kv\u016fli usazov\u00e1n\u00ed chybn\u00fdch z\u00e1znam\u016f v ke\u0161\u00edch DNS server\u016f je k \u00fapln\u00e9mu obnoven\u00ed pot\u0159eba dal\u0161\u00ed \u010das, pokud se nedokon\u010d\u00ed povinn\u00e9 vypr\u00e1zdn\u011bn\u00ed cache na rekurzivn\u00edch DNS serverech. N\u011bkte\u0159\u00ed poskytovatel\u00e9 probl\u00e9m vy\u0159e\u0161ili rychleji a radik\u00e1ln\u011bji t\u00edm, \u017ee do\u010dasn\u011b zak\u00e1zali ov\u011b\u0159ov\u00e1n\u00ed pomoc\u00ed DNSSEC v nastaven\u00edch sv\u00fdch resolver\u016f.

\"V\u00fdpadek\"V\u00fdpadek<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

30 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 18:20 (MSK) \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0437\u043e\u043d\u044b RU \u0447\u0435\u0440\u0435\u0437 DNSSEC. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 DNSSEC \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c\u0441\u044f \u0432\u0441\u0435 \u0434\u043e\u043c\u0435\u043d\u044b \u0432 \u0437\u043e\u043d\u0435 «.ru». \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 DNS-\u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113277,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Selh\u00e1n\u00ed v dom\u00e9nov\u00e9 z\u00f3n\u011b RU kv\u016fli chyb\u011b p\u0159i v\u00fdm\u011bn\u011b kl\u00ed\u010d\u016f DNSSEC | ProHoster","description":"30. ledna v 18:20 (MSK) se u\u017eivatel\u00e9 setkali s hromadn\u00fdm selh\u00e1n\u00edm ur\u010dov\u00e1n\u00ed hostitel\u016f v dom\u00e9nov\u00e9 z\u00f3n\u011b RU, kter\u00e9 bylo zp\u016fsobeno chybou p\u0159i v\u00fdm\u011bn\u011b kl\u00ed\u010d\u016f pou\u017e\u00edvan\u00fdch pro ov\u011b\u0159ov\u00e1n\u00ed d\u016fv\u011bryhodnosti z\u00f3ny RU prost\u0159ednictv\u00edm DNSSEC.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0431\u043e\u0439 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438 \u0437\u0430\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 DNSSEC | ProHoster","og:description":"30 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 18:20 (MSK) \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0437\u043e\u043d\u044b RU \u0447\u0435\u0440\u0435\u0437 DNSSEC.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-31T11:41:10+00:00","article:modified_time":"2024-01-31T11:41:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"113276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:56:04","updated":"2026-02-08 20:56:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=113276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113276\/revisions"}],"predecessor-version":[{"id":158095,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/113276\/revisions\/158095"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/113277"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=113276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=113276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=113276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}