{"id":38615,"date":"2019-10-31T22:24:52","date_gmt":"2019-10-31T19:24:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https\/"},"modified":"2019-10-31T22:24:52","modified_gmt":"2019-10-31T19:24:52","slug":"assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","title":{"rendered":"Asociace poskytovatel\u016f v USA se postavily proti centralizaci p\u0159i zav\u00e1d\u011bn\u00ed DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Oborov\u00e9 asociace NCTA<\/a><\/noindex>, CTIA<\/a><\/noindex> a USTelecom<\/a><\/noindex>, kter\u00e9 h\u00e1j\u00ed z\u00e1jmy poskytovatel\u016f internetu, se obr\u00e1tily<\/a><\/noindex> do Kongresu USA s \u017e\u00e1dost\u00ed o pozornost k probl\u00e9mu implementace \u201eDNS p\u0159es HTTPS\u201c (DoH, DNS over HTTPS) a po\u017e\u00e1dat Google o podrobn\u00e9 informace o aktu\u00e1ln\u00edch a budouc\u00edch pl\u00e1nech na za\u010dlen\u011bn\u00ed DoH do sv\u00fdch produkt\u016f, stejn\u011b jako z\u00edskat z\u00e1vazek, \u017ee nebude v\u00fdchoz\u00ed nastaven\u00ed pro centralizovan\u00e9 zpracov\u00e1n\u00ed DNS dotaz\u016f v Chromu a Androidu bez p\u0159edchoz\u00edho d\u016fkladn\u00e9ho projedn\u00e1n\u00ed s ostatn\u00edmi z\u00e1stupci ekosyst\u00e9mu a zohledn\u011bn\u00ed mo\u017en\u00fdch negativn\u00edch dopad\u016f.<\/p>\n

S v\u011bdom\u00edm celkov\u00e9ho p\u0159\u00ednosu \u0161ifrov\u00e1n\u00ed pro DNS provoz, asociace pova\u017euj\u00ed za nep\u0159ijateln\u00e9 soust\u0159ed\u011bn\u00ed kontroly nad p\u0159ekladem jmen do jedn\u011bch rukou a vazbu na tento mechanismus jako v\u00fdchoz\u00ed na centralizovan\u00e9 DNS slu\u017eby. Konkr\u00e9tn\u011b se uv\u00e1d\u00ed, \u017ee Google sm\u011b\u0159uje k zaveden\u00ed DoH jako v\u00fdchoz\u00edho mechanismu v Androidu a Chromu, co\u017e v p\u0159\u00edpad\u011b vazby na servery Google povede k naru\u0161en\u00ed decentralizovan\u00e9ho charakteru infrastruktury DNS a vzniku jedin\u00e9ho bodu selh\u00e1n\u00ed.<\/p>\n

Jeliko\u017e Chrome a Android dominuj\u00ed na trhu, v p\u0159\u00edpad\u011b, \u017ee Google vnucuje sv\u00e9 DoH servery, z\u00edsk\u00e1 mo\u017enost kontrolovat v\u011bt\u0161inu sm\u011bru DNS dotaz\u016f u\u017eivatel\u016f. Krom\u011b sn\u00ed\u017een\u00ed spolehlivosti infrastruktury by tento krok tak\u00e9 dal Googlu neod\u016fvodn\u011bn\u00e9 v\u00fdhody p\u0159ed konkurenc\u00ed, nebo\u0165 by z\u00edskal dal\u0161\u00ed informace o \u010dinnosti u\u017eivatel\u016f, kter\u00e9 mohou b\u00fdt pou\u017eity ke sledov\u00e1n\u00ed \u010dinnosti u\u017eivatel\u016f a sm\u011brov\u00e1n\u00ed relevantn\u00ed reklamy. <\/p>\n

Zaveden\u00ed DoH m\u016f\u017ee tak\u00e9 naru\u0161it funkci v oblastech jako jsou syst\u00e9my rodi\u010dovsk\u00e9 kontroly, p\u0159\u00edstup k vnit\u0159n\u00edm prostor\u016fm jmen v podnikov\u00fdch syst\u00e9mech, v\u00fdb\u011br tras v syst\u00e9mech optimalizace dod\u00e1vky obsahu a v\u00fdkon soudn\u00edch p\u0159\u00edkaz\u016f v boji proti \u0161\u00ed\u0159en\u00ed nez\u00e1konn\u00e9ho obsahu a zneu\u017e\u00edv\u00e1n\u00ed nezletil\u00fdch. Z\u00e1m\u011bna DNS se tak\u00e9 \u010dasto pou\u017e\u00edv\u00e1 k p\u0159esm\u011brov\u00e1n\u00ed u\u017eivatel\u016f na str\u00e1nku s informacemi o vy\u010derp\u00e1n\u00ed prost\u0159edk\u016f u p\u0159edplatitel\u016f nebo k p\u0159ihl\u00e1\u0161en\u00ed do bezdr\u00e1tov\u00e9 s\u00edt\u011b.<\/p>\n

Spole\u010dnost Google prohl\u00e1sila<\/a><\/noindex>, \u017ee obavy jsou neopodstatn\u011bn\u00e9, jeliko\u017e nem\u00e1 v \u00famyslu v\u00fdchoz\u00ed zapnut\u00ed DoH v Chrome a Androidu. Pl\u00e1novan\u00e9<\/a><\/noindex> V prohl\u00ed\u017ee\u010di Chrome 78 bude experiment\u00e1ln\u00ed funkce DoH ve v\u00fdchoz\u00edm nastaven\u00ed pokr\u00fdvat pouze u\u017eivatele, kte\u0159\u00ed ve sv\u00fdch nastaven\u00edch uvedli DNS poskytovatele, kte\u0159\u00ed nab\u00edzej\u00ed mo\u017enost pou\u017e\u00edvat DoH jako alternativu k tradi\u010dn\u00edm DNS. U t\u011bch, kte\u0159\u00ed pou\u017e\u00edvaj\u00ed DNS servery poskytovan\u00e9 m\u00edstn\u00edm internetov\u00fdm poskytovatelem, budou DNS dotazy i nad\u00e1le odes\u00edl\u00e1ny p\u0159es syst\u00e9mov\u00fd resolver. Tedy akce Google spo\u010d\u00edv\u00e1 pouze v nahrazen\u00ed na ekvivalentn\u00ed slu\u017ebu aktu\u00e1ln\u00edho poskytovatele pro p\u0159echod na zabezpe\u010denou metodu pr\u00e1ce s DNS. Experiment\u00e1ln\u00ed zaveden\u00ed DoH je tak\u00e9 pl\u00e1nov\u00e1no v prohl\u00ed\u017ee\u010di Firefox, ale na rozd\u00edl od Google firma Mozilla m\u00e1 v \u00famyslu<\/a><\/noindex> pou\u017e\u00edt<\/a><\/noindex> nimi ve v\u00fdchoz\u00edm nastaven\u00ed DNS server CloudFlare. Tento p\u0159\u00edstup ji\u017e vyvolal kritiku<\/a><\/noindex> reakce ze strany projektu OpenBSD.<\/p>\n

P\u0159ipome\u0148me, \u017ee DoH m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00e9 pro vylou\u010den\u00ed \u00fanik\u016f informac\u00ed o po\u017eadovan\u00fdch n\u00e1zvech hostitel\u016f prost\u0159ednictv\u00edm DNS server\u016f poskytovatel\u016f, boj proti MITM \u00fatok\u016fm a pad\u011bl\u00e1n\u00ed DNS provozu (nap\u0159\u00edklad p\u0159i p\u0159ipojen\u00ed k ve\u0159ejn\u00e9 Wi-Fi), proti blokov\u00e1n\u00ed na \u00farovni DNS (DoH nem\u016f\u017ee nahradit VPN v oblasti obch\u00e1zen\u00ed blokac\u00ed, kter\u00e9 byly realizov\u00e1ny na \u00farovni DPI) nebo pro organizaci pr\u00e1ce v p\u0159\u00edpad\u011b nemo\u017enosti p\u0159\u00edm\u00e9ho p\u0159\u00edstupu k DNS server\u016fm (nap\u0159\u00edklad p\u0159i pr\u00e1ci p\u0159es proxy). <\/p>\n

Pokud se obvykle DNS dotazy odes\u00edlaj\u00ed p\u0159\u00edmo na ur\u010dit\u00e9 DNS servery uveden\u00e9 v konfiguraci syst\u00e9mu, pak v p\u0159\u00edpad\u011b DoH je dotaz na ur\u010den\u00ed IP adresy hostitele zakomponov\u00e1n do HTTPS provozu a odesl\u00e1n na HTTP server, na kter\u00e9m resolver zpracov\u00e1v\u00e1 dotazy prost\u0159ednictv\u00edm Web API. Existuj\u00edc\u00ed standard DNSSEC pou\u017e\u00edv\u00e1 \u0161ifrov\u00e1n\u00ed pouze pro autentizaci klienta a serveru, ale nechr\u00e1n\u00ed provoz p\u0159ed zachycen\u00edm a nezaru\u010duje d\u016fv\u011brnost dotaz\u016f. V sou\u010dasn\u00e9 dob\u011b p\u0159ibli\u017en\u011b 30 ve\u0159ejn\u00fdch DNS server\u016f<\/a><\/noindex> podporuje DoH.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38615","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Asociace poskytovatel\u016f v USA se postavila proti centralizaci p\u0159i zav\u00e1d\u011bn\u00ed DNS-over-HTTPS | ProHoster","description":"Obchodn\u00ed sdru\u017een\u00ed NCTA,","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA,","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:52+00:00","article:modified_time":"2019-10-31T19:24:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38615","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:45:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:06:24","updated":"2026-01-23 22:45:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=38615"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38615\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=38615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=38615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=38615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}