{"id":94799,"date":"2020-09-22T01:41:57","date_gmt":"2020-09-21T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta"},"modified":"2020-09-22T01:41:57","modified_gmt":"2020-09-21T23:41:57","slug":"v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","title":{"rendered":"Venemaal plaanitakse keelata protokollid, mis v\u00f5imaldavad peita veebisaidi nime","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Alustas avalik arutelu<\/a><\/noindex> \u00f5igusakti projekti, millega muudetakse f\u00f6deraalse seaduse \"Teabe, infotehnoloogiate ja teabe kaitse kohta\" s\u00e4tteid, on koostanud digitaalarengu, side ja massikommunikatsiooni ministeerium. Seaduses on ettepanek kehtestada Venemaa F\u00f6deratsiooni territooriumil keeld \"\u0161ifreerimisprotokollide kasutamiseks, mis v\u00f5imaldavad varjata Interneti-lehe v\u00f5i saidi nime (tuvastajat), v\u00e4lja arvatud seaduses s\u00e4testatud juhtudel.\" <\/p>\n

\u0160ifreerimisprotokollide kasutamise keelu rikkumise korral on ettepanek peatada Interneti-ressursi toimimine hiljemalt 1 (\u00fche) t\u00f6\u00f6p\u00e4eva jooksul alates selle rikkumise tuvastamisest volitatud f\u00f6deraalse t\u00e4itevv\u00f5imu organi poolt. Peamine eesm\u00e4rk on TLS-laienduse blokeerimine ECH<\/a><\/noindex> (varem tuntud kui ESNI), mida saab kasutada koos TLS 1.3 ja juba blokeeritud<\/a><\/noindex> Hiinas. Kuna seaduseeln\u00f5u s\u00f5nastus on ebaselge ja puudub konkreetsus, v\u00f5ivad ECH\/ESNI k\u00f5rval formaalselt blokeeritud olla praktiliselt k\u00f5ik protokollid, mis tagavad kanali t\u00e4iesti kr\u00fcpteerimise, samuti protokollid DNS HTTPS-i kaudu<\/a><\/noindex> (DoH) ja DNS TLS-i kaudu<\/a><\/noindex> (DoT).<\/p>\n

Tuletame meelde, et mitme HTTPS-saiaga t\u00f6\u00f6tamiseks \u00fche IP-aadressi peal on kunagi v\u00e4lja t\u00f6\u00f6tatud SNI-laiend, mis edastab hostinime avatud kujul ClientHello s\u00f5numis, mis saadetakse enne kr\u00fcpteeritud sidekanali loomist. Selline omadus v\u00f5imaldab internetiteenuse pakkujal valikuliselt filtreerida HTTPS-i liiklust ja anal\u00fc\u00fcsida, milliseid saite kasutaja avab, mis ei v\u00f5imalda saavutada t\u00e4ielikku konfidentsiaalsust HTTPS-i kasutamisel. <\/p>\n

ECH\/ESNI v\u00e4listab t\u00e4ielikult teabe leket k\u00fcsitava saidi kohta HTTPS-\u00fchenduste anal\u00fc\u00fcsimisel. Koos sisu\u00fclekandev\u00f5rguga (CDN) \u00fchenduse loomisega v\u00f5imaldab ECH\/ESNI ka peita k\u00fcsitava ressursi IP-aadressi teenusepakkuja eest - liikluse inspekteerimise s\u00fcsteem n\u00e4eb ainult \u00fchendusi CDN-iga ja ei saa blokeeringut rakendada ilma TLS-seansi asendamiseta, mille korral kuvatakse kasutaja brauseris vastav sertifikaadi asendamise teade. ECH\/ESNI keelu kehtestamise korral v\u00f5ivad sarnastele v\u00f5imalustele vastu seista vaid t\u00e4ielikud piirangud sisu\u00fclekandev\u00f5rkudesse (CDN), mis toetavad ECH\/ESNI, muidu osutub blokeering ebaefektiivseks ja seda on lihtne m\u00f6\u00f6da hiilida CDN-i abil.<\/p>\n

ECH\/ESNI kasutamisel edastatakse hostinimi nagu ka SNI-s ClientHello s\u00f5numis, kuid edastatavate andmete sisu on kr\u00fcpteeritud. Kr\u00fcpteerimiseks kasutatakse saladust, mis on arvutatud serveri ja kliendi v\u00f5tmete p\u00f5hjal. ECH\/ESNI v\u00e4ljaande v\u00f5i saadud v\u00e4\u00e4rtuse v\u00e4ljav\u00f5tte dekr\u00fcpteerimiseks on vajalik teada kliendi v\u00f5i serveri privaatv\u00f5tit (pluss serveri v\u00f5i kliendi avalikud v\u00f5tmed). Avalike v\u00f5tmete teave edastatakse serveri v\u00f5tme jaoks DNS-is ja kliendi v\u00f5tme jaoks ClientHello s\u00f5numis. Dekr\u00fcpteerimine on v\u00f5imalik ka TLS-\u00fchenduse loomise protsessi k\u00e4igus kokku leppitud \u00fchiselt tuntud saladuse abil, mis on tuntud ainult kliendi ja serveri vahel. <\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u0440\u0430\u0432\u043e\u0432\u043e\u0433\u043e \u0430\u043a\u0442\u0430 \u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043a\u043e\u043d «\u041e\u0431 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u0445 \u0438 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438», \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f, \u0441\u0432\u044f\u0437\u0438 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439. \u0412 \u0437\u0430\u043a\u043e\u043d \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0432\u0432\u0435\u0441\u0442\u0438 \u0437\u0430\u043f\u0440\u0435\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 «\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043c\u044f (\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440) ‎\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0438\u043b\u0438 \u0441\u0430\u0439\u0442\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-94799","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Venemaal kavatsetakse keelata protokollid, mis v\u00f5imaldavad varjata saidi nime | ProHoster","description":"On alanud avalik arutelu seadusprojekti \u00fcle, mis muudab f\u00f6deraalse seaduse \"Teabest\".","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0420\u0424 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043c\u044f \u0441\u0430\u0439\u0442\u0430 | ProHoster","og:description":"\u041d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u0440\u0430\u0432\u043e\u0432\u043e\u0433\u043e \u0430\u043a\u0442\u0430 \u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043a\u043e\u043d "\u041e\u0431 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-21T23:41:57+00:00","article:modified_time":"2020-09-21T23:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94799","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:17:29","updated":"2022-10-03 07:45:53","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94799","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=94799"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/94799\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=94799"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=94799"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=94799"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}