{"id":38121,"date":"2019-10-31T22:21:46","date_gmt":"2019-10-31T19:21:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https\/"},"modified":"2019-10-31T22:21:46","modified_gmt":"2019-10-31T19:21:46","slug":"v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","title":{"rendered":"I Chrome 78 p\u00e5begyndes eksperimenter med aktivering af DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Efter Mozilla<\/a><\/noindex> firmaet Google i sin officielle blog og deler relevante diagrammer.<\/a><\/noindex> om intentionen om at gennemf\u00f8re et eksperiment for at teste den version af \u00abDNS over HTTPS\u00bb (DoH, DNS over HTTPS), der udvikles til Chrome-browseren. I udgivelsen Chrome 78, planlagt til den 22. oktober, vil nogle brugergrupper som standard blive omdirigeret<\/a><\/noindex> til at bruge DoH. Eksperimentet med aktivering af DoH vil kun inkludere brugere, hvis nuv\u00e6rende systemindstillinger angiver bestemte DNS-udbydere, der er anerkendt som kompatible med DoH. <\/p>\n

De DNS-udbydere, der er inkluderet p\u00e5 hvidlisten, er tjenesterne<\/a><\/noindex> Google (8.8.8.8, 8.8.4.4), Cloudflare (1.1.1.1, 1.0.0.1), OpenDNS (208.67.222.222, 208.67.220.220), Quad9 (9.9.9.9, 149.112.112.112), Cleanbrowsing (185.228.168.168, 185.228.169.168) og DNS.SB (185.222.222.222, 185.184.222.222). Hvis en af de n\u00e6vnte DNS-servere er angivet i brugerens DNS-indstillinger, aktiveres DoH i Chrome som standard. For dem, der bruger DNS-servere leveret af lokale internetudbydere, forbliver alt u\u00e6ndret, og systemresolveren forts\u00e6tter med at blive brugt til DNS-foresp\u00f8rgsler. <\/p>\n

En vigtig forskel fra implementeringen af DoH i Firefox, hvor den gradvise aktivering af DoH som standard begynder<\/a><\/noindex> allerede i slutningen af september, er frav\u00e6ret af binding til en enkelt DoH-tjeneste. I Firefox er kun 14,3% af webstederne i hele verden.<\/a><\/noindex> CloudFlare DNS-serveren som standard, mens Chrome kun vil opdatere metoden til at arbejde med DNS til en \u00e6kvivalent tjeneste uden at \u00e6ndre DNS-udbyderen. For eksempel, hvis brugeren har angivet DNS 8.8.8.8 i systemindstillingerne, vil Chrome v\u00e6re aktiveret<\/a><\/noindex> DoH-tjenesten Google (\u00abhttps:\/\/dns.google.com\/dns-query\u00bb), hvis DNS - 1.1.1.1, s\u00e5 DoH-tjenesten Cloudflare (\u00abhttps:\/\/cloudflare-dns.com\/dns-query\u00bb) og m.m.<\/a><\/noindex><\/p>\n

Brugeren vil kunne aktivere eller deaktivere DoH ved hj\u00e6lp af indstillingen \u00abchrome:\/\/flags\/#dns-over-https\u00bb. Tre driftsformer underst\u00f8ttes: \u00absecure\u00bb, \u00abautomatic\u00bb og \u00aboff\u00bb. I \u00absecure\u00bb-tilstand identificeres v\u00e6rter kun p\u00e5 baggrund af tidligere cachelagrede sikre v\u00e6rdier (modtaget via en sikker forbindelse) og foresp\u00f8rgsler gennem DoH, tilbagevenden til almindelig DNS anvendes ikke. I \u00abautomatic\u00bb-tilstand, hvis DoH og den sikre cache ikke er tilg\u00e6ngelige, tillades hentning af data fra usikre caches og tilgang via traditionel DNS. I \u00aboff\u00bb-tilstand bliver den almindelige cache f\u00f8rst kontroleret, og hvis der ikke er nogen data, sendes foresp\u00f8rgslen gennem systemets DNS. Tilstanden angives gennem indstillingen<\/a><\/noindex> kDnsOverHttpsMode, og server-matching skabelonen via kDnsOverHttpsTemplates.<\/p>\n

Eksperimentet med at aktivere DoH vil blive udf\u00f8rt p\u00e5 alle underst\u00f8ttede platforme i Chrome, undtagen Linux og iOS p\u00e5 grund af kompleksiteten i at analysere resolver-indstillingerne og begr\u00e6nsninger i adgangen til systemindstillingerne for DNS. Hvis der opst\u00e5r problemer med at sende anmodninger til DoH-serveren efter aktivering af DoH (for eksempel p\u00e5 grund af dens blokering, netv\u00e6rksproblemer eller nedbrud), vil browseren automatisk returnere de systemm\u00e6ssige DNS-indstillinger. <\/p>\n

Form\u00e5let med eksperimentet er den endelige kontrol af implementeringen af DoH og unders\u00f8gelsen af indflydelsen af DoH p\u00e5 ydeevnen. Det skal bem\u00e6rkes, at st\u00f8tten til DoH faktisk blev tilf\u00f8jet<\/a><\/noindex> tilf\u00f8jet til Chrome-kodebasen allerede i februar, men aktivering og indstilling af DoH kr\u00e6vede<\/a><\/noindex> start af Chrome med et s\u00e6rligt flag og en uklar samling af indstillinger.<\/p>\n

Lad os minde om, at DoH kan v\u00e6re nyttigt til at undg\u00e5 l\u00e6kager af informationer om de anmodede v\u00e6rtens navne gennem DNS-servere fra udbydere, bek\u00e6mpelse af MITM-angreb og DNS-trafikmanipulation (for eksempel n\u00e5r man tilslutter sig offentlige Wi-Fi), modvirke blokeringer p\u00e5 DNS-niveau (DoH kan ikke erstatte VPN i forhold til at omg\u00e5 blokeringer, der er implementeret p\u00e5 DPI-niveau) eller til at organisere arbejdet i tilf\u00e6lde af, at direkte adgang til DNS-servere ikke er mulig (for eksempel ved brug af proxy). I normale situationer sendes DNS-anmodninger direkte til de DNS-servere, der er angivet i systemkonfigurationen, mens med DoH, indkapsles anmodningen om at bestemme IP-adressen i HTTPS-trafikken og sendes til HTTP-serveren, hvor resolveren behandler anmodningerne via Web API. Den eksisterende standard DNSSEC bruger kryptering kun til at autentificere klienten og serveren, men beskytter ikke trafikken mod aflytning og garanterer ikke fortroligheden af anmodningerne. <\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS). \u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 78, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 22 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 DoH. \u0412 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u043f\u0440\u0438\u043c\u0443\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u0439\u043a\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38121","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eksperimenter med aktivering af DNS-over-HTTPS begynder i Chrome 78 | ProHoster","description":"Efter Mozilla f\u00f8lger Google","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome 78 \u043d\u0430\u0447\u043d\u0443\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c DNS-over-HTTPS | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:46+00:00","article:modified_time":"2019-10-31T19:21:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38121","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:23","updated":"2026-01-23 20:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=38121"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38121\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=38121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=38121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=38121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}