{"id":36712,"date":"2019-10-31T22:13:19","date_gmt":"2019-10-31T19:13:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https\/"},"modified":"2019-10-31T22:13:19","modified_gmt":"2019-10-31T19:13:19","slug":"v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","title":{"rendered":"I Firefox vil der blive gennemf\u00f8rt et eksperiment relateret til DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mozilla-udviklerne meldte<\/a><\/noindex> om gennemf\u00f8relsen af en ny unders\u00f8gelse i forbindelse med forberedelserne til implementeringen af DNS-anmodninger over HTTPS (DoH, DNS over HTTPS). Under det udf\u00f8rte eksperiment p\u00e5 systemer for en del brugere af Firefox-udgivelser i USA vil der blive indsamlet statistik om brugen af for\u00e6ldrekontrolsystemer og virksomhedens resolver. Deltagelse i eksperimentet kan afsl\u00e5s via siden «about:studies» (unders\u00f8gelsen er pr\u00e6senteret p\u00e5 listen som «Detection Logic for DNS-over-HTTPS»).<\/p>\n

Til unders\u00f8gelsen vil der blive indsamlet anonymiserede data, der kun inkluderer t\u00e6llere, uden angivelse af specifikke adresser og dom\u00e6ner. For at identificere systemer til for\u00e6ldrekontrol vil der blive sendt en anmodning om bestemmelse af navnet exampleadultsite.com, og hvis det ikke stemmer overens med den faktiske IP, kan det antages, at der er aktiveret blokering af voksenindhold p\u00e5 DNS-niveau. Desuden vil der blive vurderet IP-adresser<\/a> de data, der returneres for Google og YouTube, for at kontrollere deres substitution til restrict.youtube.com, forcesafesearch.google.com og restrictmoderate.youtube.com. <\/p>\n

For at identificere brugen af interne virksomhedens resolvere vil de v\u00e6rter, der identificeres ved \u00e5bning af websteder, blive kontrolleret for brugen af atypiske dom\u00e6ner p\u00e5 f\u00f8rste niveau (TLD) og for at se, om der returneres intranet-adresser for dem. Motivet bag eksperimentet var bekymringer om, at aktivering af DNS-over-HTTPS som standard kan forstyrre funktionaliteten af eksisterende for\u00e6ldrekontrolsystemer, der fungerer via DNS, samt skabe problemer for brugere af virksomhedsnetv\u00e6rk, der bruger DNS-servere, der leverer oplysninger om interne dom\u00e6ner, som ikke er synlige i det eksterne netv\u00e6rk.<\/p>\n

Vi minder om, at DoH kan v\u00e6re nyttigt til at forhindre l\u00e6kager af oplysninger om anmodede v\u00e6rtsnavne via udbyderens DNS-servere, bek\u00e6mpe MITM-angreb og manipulering af DNS-trafik, modst\u00e5 blokeringer p\u00e5 DNS-niveau, eller til at organisere drift i tilf\u00e6lde af, at direkte adgang til DNS-servere ikke er muligt (for eksempel ved brug af en proxy). I normale situationer sendes DNS-foresp\u00f8rgsler direkte til specificerede DNS-servere i systemkonfigurationen; i tilf\u00e6lde af DoH indkapsles foresp\u00f8rgslen om at bestemme IP-adressen for v\u00e6rten i HTTPS-trafik og sendes til en HTTP-server, hvor resolveren behandler foresp\u00f8rgsler via Web API. Den eksisterende standard DNSSEC bruger kryptering kun til autentifikation af klienten og serveren, men beskytter ikke trafikken mod opsnapning og garanterer ikke fortrolighed af foresp\u00f8rgsler. <\/p>\n

For at aktivere DoH i about:config skal v\u00e6rdien af variablen network.trr.mode \u00e6ndres, som st\u00f8ttes fra Firefox 60. V\u00e6rdi 0 deaktiverer fuldst\u00e6ndigt DoH; 1 \u2014 bruger DNS eller DoH, afh\u00e6ngigt af hvad der er hurtigere; 2 \u2014 bruger DoH som standard, og DNS som backup; 3 \u2014 bruger kun DoH; 4 \u2014 spejlingstilstand, hvor DoH og DNS anvendes parallelt. Som standard bruges CloudFlare DNS-serveren, men den kan \u00e6ndres via parameteren network.trr.uri; for eksempel kan man s\u00e6tte \"https:\/\/dns.google.com\/experimental\" eller \"https:\/\/9.9.9.9\/dns-query\".<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS (DoH, DNS over HTTPS). \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Firefox \u0438\u0437 \u0421\u0428\u0410 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u043e\u0432. \u041e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043c\u043e\u0436\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 «about:studies» (\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36712","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Der vil blive udf\u00f8rt et eksperiment i Firefox relateret til DNS-over-HTTPS | ProHoster","description":"Mozilla-udviklerne har rapporteret om udf\u00f8relsen.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Firefox \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 DNS-over-HTTPS | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:19+00:00","article:modified_time":"2019-10-31T19:13:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36712","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:28:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:40:22","updated":"2026-02-08 20:28:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/36712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=36712"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/36712\/revisions"}],"predecessor-version":[{"id":157824,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/36712\/revisions\/157824"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=36712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=36712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=36712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}