{"id":38615,"date":"2019-10-31T22:24:52","date_gmt":"2019-10-31T19:24:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https\/"},"modified":"2019-10-31T22:24:52","modified_gmt":"2019-10-31T19:24:52","slug":"assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","title":{"rendered":"USA teeniteenusepakkujate assotsiatsioonid seisavad vastu keskse kureerimisele DNS-over-HTTPS'i rakendamisel","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kaupade assotsiatsioonid NCTA<\/a><\/noindex>, CTIA<\/a><\/noindex> ja USTelecom<\/a><\/noindex>, kes kaitsevad internetiteenusepakkujate huve, on p\u00f6\u00f6rdunud<\/a><\/noindex> Ameerika \u00dchendriikide Kongressi palvega p\u00f6\u00f6rata t\u00e4helepanu probleemile, mis on seotud «DNS HTTPS-i \u00fcle» (DoH, DNS over HTTPS) juurutamisega ning k\u00fcsida Google'ilt \u00fcksikasjalikku teavet praeguste ja tulevaste plaanide kohta DoH integreerimiseks oma toodetesse, samuti saada kohustus mitte aktiveerida vaikimisi tsentraliseeritud DNS-p\u00e4ringute t\u00f6\u00f6tlemist Chrome'is ja Androidis ilma eelneva p\u00f5hjaliku arutelu pidamiseta teiste \u00f6kos\u00fcsteemi esindajatega ja v\u00f5imalike negatiivsete tagaj\u00e4rgede arvestamiseta.<\/p>\n

M\u00f5istes kr\u00fcpteerimise kasutamise \u00fcldist kasu DNS-i liikluses, peavad assotsiatsioonid \u00fchem\u00f5tteliselt valeseks kesksete k\u00e4tesse kontsentreerumisega kontrolli nimekasutuse \u00fcle ning selle mehhanismi vaikimisi sidumisega tsentraliseeritud DNS-teenustega. Eriti v\u00e4idetakse, et Google liigub suunas DoH-i vaikimisi rakendamise suunas Androidis ja Chrome'is, mis seondub Google'i serveritega, viib DNS-infrastruktuuri detsentraliseerimise iseloomu rikkumiseni ja ainulaadse talitlush\u00e4ire punkti tekkimiseni.<\/p>\n

Kuna Chrome ja Android valitsevad turul, annab Google'ile DoH-serverite pealesurumisel v\u00f5imaluse kontrollida suurt osa kasutajate DNS-p\u00e4ringute voogudest. Lisaks infrastruktuuri usaldusv\u00e4\u00e4rsuse v\u00e4henemisele annab see samas Google'ile \u00f5igustamatud eelised konkurentide ees, kuna ettev\u00f5te saab lisainfot kasutajate tegevuse kohta, mida saab kasutada kasutaja aktiivsuse j\u00e4lgimiseks ja asjakohase reklaami kuvamiseks. <\/p>\n

DoH-i rakendamine v\u00f5ib kahjustada ka selliseid valdkondi nagu vanema kontrolli s\u00fcsteemid, juurdep\u00e4\u00e4s sisemistele nimedele ettev\u00f5ttesisestes s\u00fcsteemides, marsruudivalik sisuhalduse optimeerimise s\u00fcsteemides ning kohtupoolsete m\u00e4\u00e4ruste t\u00e4itmine ebaseadusliku sisu leviku ja alaealiste ekspluateerimise vastu. DNS-i v\u00e4\u00e4rkasutamine kasutatakse sageli kasutajate suunamiseks informatsiooni lehele, kui abonendi rahalised vahendid on l\u00f5ppenud v\u00f5i traadita v\u00f5rku sisenemiseks.<\/p>\n

Google'i ettev\u00f5te teatanud<\/a><\/noindex>, mist\u00f5ttu on mured alusetud, kuna nad ei plaani vaikimisi DoH-i aktiveerida Chrome'is ja Androidis. T\u00e4histatud<\/a><\/noindex> Chromis 78 eksperimendiline DoH vaikimisi aktiveerimine katab ainult kasutajaid, kelle seadetesse on konfigureeritud DNS-teenuse pakkujad, kes v\u00f5imaldavad DoH-i kasutamist traditsiooniliste DNS-teenuste alternatiivina. Neile, kes kasutavad kohaliku interneti teenuse pakkuja poolt pakutavaid DNS-servereid, saadetakse DNS-p\u00e4ringud siiski s\u00fcsteemi resolveri kaudu. See t\u00e4hendab, et Google'i tegevus seisneb vaid praeguse teenuse pakkuja teenuse ekvivalentse teenuse asendamises, et liikuda DNS-i turvalisemasse t\u00f6\u00f6tamismeetodisse. Firefoxis plaanitakse ka eksperimendiline DoH aktiveerimine, kuid erinevalt Google'ist on Mozilla kavas<\/a><\/noindex> kasutama<\/a><\/noindex> vaikimisi DNS-server CloudFlare. See l\u00e4henemine on juba k\u00e4ivitanud , kuna termin replica on pigem seotud andmebaasidega ning moonutab t\u00e4hendust helis\u00fcsteemi kontekstis. L\u00f5puks valiti asendamiseks<\/a><\/noindex> vastuolu OpenBSD projektist.<\/p>\n

Tuletame meelde, et DoH v\u00f5ib olla kasulik, et v\u00e4ltida teavet, mis lekib DNS-serverite kaudu, k\u00e4mpida MITM-r\u00fcnnakute ja DNS-liikluse asendamisega (n\u00e4iteks avalikus Wi-Fi-\u00fchenduses), vastanduda DNS tasemel blokeerimisele (DoH ei suuda asendada VPN-i blokeeringute \u00fcletamisel, mis on rakendatud DPI tasemel) v\u00f5i korraldada t\u00f6\u00f6tamine, kui otsene juurdep\u00e4\u00e4s DNS-serveritele ei ole v\u00f5imalik (n\u00e4iteks l\u00e4bi proksi t\u00f6\u00f6tades). <\/p>\n

Kui normaalses olukorras saadetakse DNS-p\u00e4ringud otse s\u00fcsteemi konfiguratsioonis m\u00e4\u00e4ratud DNS-serveritele, siis DoH korral kapseldatakse hosti IP-aadressi m\u00e4\u00e4ramise p\u00e4ring HTTPS-i liikluses ja saadetakse HTTP-serverile, kus resolver t\u00f6\u00f6tab p\u00e4ringud Web API kaudu. Ahnne standard DNSSEC kasutab kr\u00fcpteerimist vaid kliendi ja serveri autentimiseks, kuid ei kaitse liiklust pealtkuulamise eest ega garanteeri p\u00e4ringute konfidentsiaalsust. Praegu toetab umbes 30 avalikku DNS-serverit<\/a><\/noindex> DoH-i.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38615","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47USA teenuse pakkujate assotsiatsioonid on vastu DNS-over-HTTPS-i rakendamise kesksele l\u00e4henemisele | ProHoster","description":"Kaubandusliidud NCTA,","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA,","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:52+00:00","article:modified_time":"2019-10-31T19:24:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38615","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:45:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:06:24","updated":"2026-01-23 22:45:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38615"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38615\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}