{"id":94799,"date":"2020-09-22T01:41:57","date_gmt":"2020-09-21T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta"},"modified":"2020-09-22T01:41:57","modified_gmt":"2020-09-21T23:41:57","slug":"v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","title":{"rendered":"Russia intends to ban protocols that conceal website names.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Started Public discussion<\/a><\/noindex> the draft legal act amending Federal Law \"On Information, Information Technology, and Information Protection,\" developed by the Ministry of Digital Development, Communications and Mass Media. The law proposes to introduce a ban on the use in the territory of the Russian Federation \"encryption protocols that allow concealing the name (identifier) of a webpage or website on the Internet, except in cases established by the legislation of the Russian Federation.\" <\/p>\n

For violations of the ban on the use of encryption protocols that allow concealing the name of a website, it is proposed to suspend the operation of the Internet resource no later than 1 (one) business day from the day the violation is detected by the authorized federal executive authority. The main goal of blocking is the TLS extension ECH<\/a><\/noindex> (previously known as ESNI), which can be used in conjunction with TLS 1.3 and is already blocked<\/a><\/noindex> in China. Since the wording in the bill is vague and lacks specifics, in addition to ECH\/ESNI, practically any protocols that provide complete encryption of the communication channel could formally fall under the ban, as well as the protocols DNS over HTTPS<\/a><\/noindex> (DoH) and DNS over TLS<\/a><\/noindex> (DoT).<\/p>\n

Let us remind you that to organize the work of multiple HTTPS sites on a single IP address, the SNI extension was developed, which transmits the host name in clear text in the ClientHello message, sent before establishing a secure communication channel. This feature allows the Internet service provider to selectively filter HTTPS traffic and analyze which sites the user visits, which does not allow for complete confidentiality when using HTTPS. <\/p>\n

ECH\/ESNI completely eliminates the leakage of information about the requested site during the analysis of HTTPS connections. In conjunction with requests through a content delivery network, the use of ECH\/ESNI also allows concealing the IP address of the requested resource from the provider \u2014 traffic inspection systems only see requests to the CDN and cannot impose a block without altering the TLS session, in which case the user's browser will display a corresponding notification about the certificate replacement. In the event of a ban on ECH\/ESNI to counter such a possibility, only a complete restriction of access to content delivery networks (CDNs) supporting ECH\/ESNI can help; otherwise, the blocking will be ineffective and can be easily circumvented using a CDN.<\/p>\n

When using ECH\/ESNI, the hostname is transmitted in the ClientHello message just like in SNI, but the contents of the transmitted data in this message are encrypted. A secret, computed based on the server and client keys, is used for encryption. To decrypt the intercepted or obtained value of the ECH\/ESNI field, it is necessary to know the private key of the client or server (plus the public keys of the server or client). Information about the public keys is transmitted for the server key in DNS, and for the client key in the ClientHello message. Decryption is also possible using the shared secret agreed upon during the establishment of the TLS connection, known only to the client and server. <\/p>\n

<\/a><\/noindex><\/p>\n

Source: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u0440\u0430\u0432\u043e\u0432\u043e\u0433\u043e \u0430\u043a\u0442\u0430 \u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043a\u043e\u043d «\u041e\u0431 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u0445 \u0438 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438», \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f, \u0441\u0432\u044f\u0437\u0438 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439. \u0412 \u0437\u0430\u043a\u043e\u043d \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0432\u0432\u0435\u0441\u0442\u0438 \u0437\u0430\u043f\u0440\u0435\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 «\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043c\u044f (\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440) ‎\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0438\u043b\u0438 \u0441\u0430\u0439\u0442\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-94799","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47There are plans in Russia to ban protocols that conceal the website name | ProHoster","description":"A public discussion of the draft law to amend the Federal Law \"On Information\" has begun.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0420\u0424 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043c\u044f \u0441\u0430\u0439\u0442\u0430 | ProHoster","og:description":"\u041d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u0440\u0430\u0432\u043e\u0432\u043e\u0433\u043e \u0430\u043a\u0442\u0430 \u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043a\u043e\u043d "\u041e\u0431 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-21T23:41:57+00:00","article:modified_time":"2020-09-21T23:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94799","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:17:29","updated":"2022-10-03 07:45:53","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/94799","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=94799"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/94799\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=94799"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=94799"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=94799"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}