{"id":38615,"date":"2019-10-31T22:24:52","date_gmt":"2019-10-31T19:24:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https\/"},"modified":"2019-10-31T22:24:52","modified_gmt":"2019-10-31T19:24:52","slug":"assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","title":{"rendered":"USA's udbyderforeninger har gjort indsigelse mod centralisering ved implementeringen af DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Handelsforeninger NCTA<\/a><\/noindex>, CTIA<\/a><\/noindex> og USTelecom<\/a><\/noindex>, som repr\u00e6senterer interessen for internetudbydere, henvendte sig<\/a><\/noindex> til Kongressen i USA med en anmodning om at rette opm\u00e6rksomheden mod problemet med implementeringen af «DNS over HTTPS» (DoH, DNS over HTTPS) og anmode Google om detaljeret information om nuv\u00e6rende og fremtidige planer for at inkludere DoH i deres produkter, samt f\u00e5 en forpligtelse til ikke automatisk at inkludere centraliseret behandling af DNS-foresp\u00f8rgsler i Chrome og Android uden en tidligere omfattende dr\u00f8ftelse med andre repr\u00e6sentanter fra \u00f8kosystemet og tage hensyn til mulige negative konsekvenser.<\/p>\n

Idet de erkender den samlede fordel ved at anvende kryptering for DNS-trafik, anser foreningerne det for uacceptabelt at centralisere kontrollen over navne\u00e6ndringer og knytte denne mekanisme som standard til centraliserede DNS-tjenester. Det h\u00e6vdes specifikt, at Google bev\u00e6ger sig mod at indf\u00f8re DoH som standard i Android og Chrome, hvilket, hvis det knyttes til Google-servere, vil bryde det decentrale princip for DNS-infrastruktur og skabe en enkelt fejlkilde.<\/p>\n

Da Chrome og Android dominerer markedet, vil Google f\u00e5 mulighed for at kontrollere en stor del af brugernes DNS-anmodning str\u00f8mme, hvis de tvinger deres DoH-servere. Ud over at reducere p\u00e5lideligheden af infrastrukturen vil et s\u00e5dant skridt ogs\u00e5 give Google uretm\u00e6ssige fordele i forhold til konkurrenterne, da virksomheden vil f\u00e5 yderligere oplysninger om brugernes handlinger, som kan bruges til at overv\u00e5ge brugernes aktiviteter og m\u00e5lrette relevant reklame. <\/p>\n

Implementeringen af DoH kan ogs\u00e5 forstyrre funktioner inden for omr\u00e5der som for\u00e6lder kontrolsystemer, adgang til interne navnerum i virksomhedssystemer, rutevalg i indhold leverings optimeringssystemer samt opfyldelse af retskendelser til bek\u00e6mpelse af spredning af ulovligt indhold og udnyttelse af mindre\u00e5rige. Falsk DNS anvendes ofte til at omdirigere brugere til en meddelelse om, at abonnentens midler er udt\u00f8mt, eller til at logge ind p\u00e5 et Wi-Fi-netv\u00e6rk.<\/p>\n

Google at<\/a><\/noindex>, at bekymringerne er grundl\u00f8se, da de ikke agter at aktivere DoH som standard i Chrome og Android. Planlagt<\/a><\/noindex> I Chrome 78 vil eksperimentel aktivering af DoH som standard kun omfatte brugere, hvis indstillinger angiver DNS-udbydere, der tilbyder mulighed for at bruge DoH som et alternativ til traditionelle DNS. For dem, der bruger DNS-servere leveret af deres lokale internetudbyder, vil DNS-foresp\u00f8rgsler forts\u00e6tte med at blive sendt gennem systemets resolver. Alts\u00e5 handler Googles tiltag kun om at erstatte med en \u00e6kvivalent service fra den nuv\u00e6rende udbyder for at skifte til en sikker metode til at arbejde med DNS. Den eksperimentelle aktivering af DoH er ogs\u00e5 planlagt i Firefox, men i mods\u00e6tning til Google er Mozilla fast besluttet<\/a><\/noindex> bruges<\/a><\/noindex> som standard DNS-server CloudFlare. Denne tilgang har allerede udl\u00f8st , da termen replica er mere anvendelig i DBMS og fordrejer betydningen i konteksten af lydsystemet. Som et resultat blev der<\/a><\/noindex> fra projektet OpenBSD.<\/p>\n

Lad os huske, at DoH kan v\u00e6re nyttigt til at forhindre l\u00e6kage af oplysninger om de anmodede v\u00e6rtsnavne via udbydernes DNS-servere, bek\u00e6mpe MITM-angreb og manipulation af DNS-trafik (for eksempel n\u00e5r man tilslutter sig offentligt Wi-Fi), modst\u00e5 blokeringer p\u00e5 DNS-niveau (DoH kan ikke erstatte VPN i forhold til omg\u00e5else af blokeringer, der er implementeret p\u00e5 DPI-niveau) eller til at organisere arbejdet i situationer, hvor direkte adgang til DNS-servere ikke er mulig (for eksempel n\u00e5r man arbejder gennem en proxy). <\/p>\n

Hvis DNS-foresp\u00f8rgsler normalt sendes direkte til de i systemkonfigurationen angivne DNS-servere, s\u00e5 bliver anmodningen om at bestemme IP-adressen for v\u00e6rten indkapslet i HTTPS-trafik og sendt til en HTTP-server, hvor resolveren behandler anmodninger via Web API. Den eksisterende standard DNSSEC bruger kryptering kun til at autentificere klienten og serveren, men beskytter ikke trafikken mod opsnapning og garanterer ikke fortroligheden af anmodningerne. I \u00f8jeblikket underst\u00f8tter omkring 30 offentlige DNS-servere<\/a><\/noindex> DoH.<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38615","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Foreninger af udbydere i USA har imod centralisering ved implementeringen af DNS-over-HTTPS | ProHoster","description":"Handelsforeninger NCTA,","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA,","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:52+00:00","article:modified_time":"2019-10-31T19:24:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38615","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:45:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:06:24","updated":"2026-01-23 22:45:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=38615"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/38615\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=38615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=38615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=38615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}