{"id":38615,"date":"2019-10-31T22:24:52","date_gmt":"2019-10-31T19:24:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https\/"},"modified":"2019-10-31T22:24:52","modified_gmt":"2019-10-31T19:24:52","slug":"assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","title":{"rendered":"USA teenusepakkujate assotsiatsioonid on vastu keskendumisele DNS-over-HTTPS rakendamisel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kaubanduse assotsatsioonid NCTA<\/a><\/noindex>, CTIA<\/a><\/noindex> ja USTelecom<\/a><\/noindex>, kes kaitsevad internetipakkujate huve, p\u00f6\u00f6rdusid<\/a><\/noindex> Ameerika \u00dchendriikide Kongressile on esitatud palve t\u00e4helepanu juhtida \u201eDNS HTTPS-i kohal\u201d (DoH, DNS over HTTPS) rakendamise probleemile ning k\u00fcsida Google'ilt p\u00f5hjalikku teavet k\u00e4esolevate ja tulevaste plaanide kohta DoH integreerimise osas oma toodetes. Samuti tuleks k\u00fcsida kohustust mitte lubada tsentraliseeritud DNS-p\u00e4ringute t\u00f6\u00f6tlemist vaikimisi Chrome'is ja Androidis ilma eelneva ulatusliku arutelu pidamiseta teiste \u00f6kos\u00fcsteemi esindajatega ning kaaluda v\u00f5imalikke negatiivseid tagaj\u00e4rgi.<\/p>\n

M\u00f5istes kr\u00fcpteerimise \u00fcldist kasu DNS-liiklusele, peavad assotsatsioonid lubamatuks kontrolli koondamise \u00fche k\u00e4e alla ning selle mehhanismi vaikimisi seotust tsentraliseeritud DNS-teenustega. Eriti v\u00e4idetakse, et Google liigub suunas, kus DoH rakendatakse vaikimisi Androidis ja Chrome'is, mis, kui see on seotud Google'i serveritega, viib DNS-i infrastruktuuri detsentraliseerimise rikka olemuse rikkumiseni ja loob ainulaadse t\u00f5rkepunkti.<\/p>\n

Kuna Chrome ja Android domineerivad turul, siis Google\u2019i DoH-serverite peale sunnimise korral saab ettev\u00f5te kontrollida suuremat osa kasutajate DNS-p\u00e4ringute vooge. Lisaks infrastruktuuri usaldusv\u00e4\u00e4rsuse v\u00e4henemisele annab selline samm Google\u2019ile ka p\u00f5hjendamatuid eeliseid konkurentide ees, kuna ettev\u00f5te saab t\u00e4iendavaid teadmisi kasutajate tegevuste kohta, mida saab kasutada kasutajate aktiivsuse j\u00e4lgimiseks ja sihitud reklaami pakkumiseks. <\/p>\n

DoH rakendamine v\u00f5ib samuti segada selliste valdkondade t\u00f6\u00f6d nagu vanemate kontrolli s\u00fcsteemid, juurdep\u00e4\u00e4s sisemistele domeeninimedele ettev\u00f5tte s\u00fcsteemides, marsruutide valik sisuhalduse optimeerimise s\u00fcsteemides ja kohtum\u00e4\u00e4ruste t\u00e4itmine, mis on seotud ebaseadusliku sisu levimise ja alaealiste \u00e4rakasutamise vastu v\u00f5itlemisega. DNS-i asendamist kasutatakse sageli ka kasutajate suunamiseks lehele, mis informeerib neid tasude l\u00f5ppemisest v\u00f5i traadita v\u00f5rku sisenemiseks.<\/p>\n

Google teatanud<\/a><\/noindex>, mist\u00f5ttu on mured p\u00f5hjendamatud, kuna ettev\u00f5te ei kavatse vaikimisi DoH-i Chrome\u2019is ja Androidis aktiveerida. Planeeritud<\/a><\/noindex> Chrome 78 eksperimentaalne vaikeseade DoH katab ainult kasutajaid, kelle seadistustes on m\u00e4\u00e4ratud DNS-teenuse pakkujad, mis pakuvad DoH-i kasutamise v\u00f5imalust traditsiooniliste DNS-ide alternatiivina. Neile, kes kasutavad kohalikest interneti teenuse pakkujatest saadud DNS-servereid, saadetakse DNS-p\u00e4ringud edasi s\u00fcsteemi resolverti kaudu. See t\u00e4hendab, et Google'i tegevus t\u00e4hendab lihtsalt teenuse v\u00e4ljavahetamist jooksva pakkuja sama teenuse vastu turvalisema DNS-t\u00f6\u00f6meetodi suunas. Eksperimentaalset DoH-i l\u00fclitamist on plaanitud ka Firefoxis, kuid erinevalt Google'ist on Mozilla kavatseb<\/a><\/noindex> kasutada<\/a><\/noindex> vaikeserverina CloudFlare'i DNS-i. Selline l\u00e4henemine on juba tekitanud kriitikat<\/a><\/noindex> OpenBSD projekti poolt.<\/p>\n

Tuletame meelde, et DoH v\u00f5ib olla kasulik, et v\u00e4ltida hostinimede p\u00e4ringute lekkeid teenusepakkujate DNS-serverite kaudu, v\u00f5idelda MITM-r\u00fcnnakute ja DNS-liikluse petmisega (nt kui olete \u00fchendatud avalikesse Wi-Fi-v\u00f5rkudesse), takistada DNS-tasandi blokeeringute \u00fcletamist (DoH ei saa VPN-i asendada DPI-tasandi blokeeringute v\u00e4ltimisel) v\u00f5i korraldada t\u00f6\u00f6d, kui otsene \u00fchendus DNS-serveritega ei ole v\u00f5imalik (nt kui t\u00f6\u00f6tate l\u00e4bi proksiserveri). <\/p>\n

Tavalistes olukordades saadetakse DNS-p\u00e4ringud otse s\u00fcsteemi konfigureeritud DNS-serveritele, kuid DoH puhul kapseldatakse hosti IP-aadressi m\u00e4\u00e4ramise p\u00e4ring HTTPS-liiklusesse ja saadetakse HTTP-serverisse, kus resolver k\u00e4sitleb p\u00e4ringuid Web API kaudu. Praegune DNSSEC standard kasutab kr\u00fcpteerimist ainult kliendi ja serveri autentimiseks, kuid ei kaitse liiklust pealtkuulmisen eest ega taga p\u00e4ringute konfidentsiaalsust. Praegu toetab umbes 30 avalikku DNS-serverit<\/a><\/noindex> DoH-i.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38615","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47US provider associations oppose centralization in implementing DNS-over-HTTPS | ProHoster","description":"USA internet service provider associations NCTA, CTIA, and USTelecom have appealed to the US Congress to address the issue of implementing \"DNS over HTTPS\" (DoH) and to request detailed information from Google about current and future plans for integrating DoH into their products, as well as a commitment not to include centralized processing by default.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c "DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS" (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:52+00:00","article:modified_time":"2019-10-31T19:24:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38615","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:45:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:06:24","updated":"2026-01-23 22:45:21"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38615"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38615\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}