{"id":97349,"date":"2020-10-17T14:42:14","date_gmt":"2020-10-17T12:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/minimizacziya-riskov-ispolzovaniya-dns-over-tls-dot-i-dns-over-https-doh"},"modified":"2020-10-17T14:42:14","modified_gmt":"2020-10-17T12:42:14","slug":"minimizacziya-riskov-ispolzovaniya-dns-over-tls-dot-i-dns-over-https-doh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/minimizacziya-riskov-ispolzovaniya-dns-over-tls-dot-i-dns-over-https-doh","title":{"rendered":"DNS-over-TLS (DoT) ja DNS-over-HTTPS (DoH) kasutamise riskide minimeerimine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"DNS-over-TLS (DoT) ja DNS-over-HTTPS (DoH) kasutamise riskide minimeerimine\" src=\"\/wp-content\/uploads\/2020\/10\/8a0e2dc9bf2f465277a2284fc595a472.jpg\" style=\"display:block;margin: 0 auto;\" \/>DoH ja DoT kasutamise riski minimeerimine<\/p>\n<h2>Kaitse DoH ja DoT eest<\/h2>\n<p>Kas te kontrollite oma DNS-i liiklust? Organisatsioonid investeerivad palju aega, raha ja ressursse oma v\u00f5rkude turvalisusesse. Siiski on DNS \u00fcks valdkondi, millele sageli piisavalt t\u00e4helepanu ei p\u00f6\u00f6rata. <\/p>\n<p>Hea \u00fclevaade DNS-i p\u00f5hjustatud riskidest on <noindex><a rel=\"nofollow\" href=\"https:\/\/www.infosecurityeurope.com\/__novadocuments\/484127\">Verisigni esitlus<\/a><\/noindex> Infosecurity konverentsil. <\/p>\n<p><img decoding=\"async\" alt=\"DNS-over-TLS (DoT) ja DNS-over-HTTPS (DoH) kasutamise riskide minimeerimine\" src=\"\/wp-content\/uploads\/2020\/10\/f6ccff28c50acaa63796479ecf74d717.jpg\" style=\"display:block;margin: 0 auto;\" \/>31% uuritud lunavaravormidest kasutas DNS-i v\u00f5tmevahetuseks. Uuringu tulemused<\/p>\n<p>31% uuritud lunavaravormidest kasutas DNS-i v\u00f5tmevahetuseks.<\/p>\n<p>Probleem on t\u00f5sine. Palo Alto Networks Unit 42 teaduslabori andmetel kasutab umbes 85% pahavarast DNS-i haldamise ja kontrollimise kanali loomiseks, v\u00f5imaldades kurjategijatel kergesti pahavara teie v\u00f5rku sisestada ja andmeid varastada. Alates oma loomisest on DNS-i liiklus peamiselt olnud kr\u00fcpteerimata ja seda sai NGFW kaitses\u00fcsteemide abil kergesti anal\u00fc\u00fcsida.&nbsp;<\/p>\n<p>\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u0434\u043b\u044f DNS, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DNS \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439. \u041e\u043d\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0435\u0434\u0443\u0449\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0421\u043a\u043e\u0440\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u043d\u0430\u0447\u043d\u0435\u0442\u0441\u044f \u0440\u043e\u0441\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e DNS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0417\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a DNS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0442\u0430\u043a\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u043b\u043e\u043a\u0435\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 DNS \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u0435\u0439\u0447\u0430\u0441 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0432\u044b\u043a\u0443\u043f \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0437\u0430 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0430\u0448\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Garmin, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440,&nbsp;\u0437\u0430\u043f\u043b\u0430\u0442\u0438\u043b\u0438&nbsp;10 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.<\/p>\n<p>\u00d5igesti seadistatud NGFW-d v\u00f5ivad keelata v\u00f5i kaitsta DNS-over-TLS (DoT) kasutamist ning neid saab kasutada DNS-over-HTTPS (DoH) kasutamise keelamiseks, v\u00f5imaldades seega anal\u00fc\u00fcsida kogu DNS-i liiklust teie v\u00f5rgus.<\/p>\n<h2>Mis on kr\u00fcpteeritud DNS?<\/h2>\n<p>Mis on DNS<\/p>\n<p>Domeenide nimede s\u00fcsteem (DNS) muundab inimkeele arusaadavaks domeeninimeks (nt aadress&nbsp;<noindex><a rel=\"nofollow\" href=\"http:\/\/www.paloaltonetworks.com\/\">www.paloaltonetworks.com<\/a><\/noindex>&nbsp;) IP-aadressides (n\u00e4iteks 34.107.151.202). Kui kasutaja sisestab domeeninime veebibrauserisse, saadab brauser DNS-p\u00e4ringu DNS-serverile, k\u00fcsides selle domeeninimega seotud IP-aadressi. Vastuseks tagastab DNS-server IP-aadressi, mida brauser kasutatakse.<\/p>\n<p>DNS-p\u00e4ringud ja -vastused edastatakse v\u00f5rgus lihttekstsena ja kr\u00fcpteerimata kujul, mis muudab need nuhkimise v\u00f5i vastuste muutmise ja brauseri suunamise pahatahtlikele serveritele haavatavaks. DNS-i kr\u00fcpteerimine muudab DNS-p\u00e4ringute j\u00e4lgimise v\u00f5i nende muutmise k\u00fcsimaski. DNS-p\u00e4ringute ja -vastuste kr\u00fcpteerimine kaitseb teid Man-in-the-Middle r\u00fcnnakute eest, samas teostades samu funktsioone nagu traditsiooniline avatud tekstiga DNS-protokoll (domeenide s\u00fcsteem).&nbsp;<\/p>\n<p>Viimase paari aasta jooksul on kasutusele v\u00f5etud kaks DNS-i kr\u00fcpteerimise protokolli:<\/p>\n<ol>\n<li>\n<p>DNS-over-HTTPS (DoH)<\/p>\n<\/li>\n<li>\n<p>DNS-over-TLS (DoT) <\/p>\n<\/li>\n<\/ol>\n<p>\u042d\u0442\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u0438\u043c\u0435\u044e\u0442 \u043e\u0434\u043d\u0443 \u043e\u0431\u0449\u0443\u044e \u0447\u0435\u0440\u0442\u0443: \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e \u043f\u0440\u044f\u0447\u0443\u0442 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043e\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430&#8230; \u0438 \u043e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b TLS (Transport Layer Security) \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0438\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0449\u0438\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u044b DNS, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 DNS.<\/p>\n<p>The privacy of DNS requests is a significant advantage of these protocols. However, they pose challenges for security personnel who must monitor network traffic and detect and block malicious connections. Because protocols differ in their implementation, analysis methods will vary between DoH and DoT.<\/p>\n<h2>DNS over HTTPS (DoH)<\/h2>\n<p><img decoding=\"async\" alt=\"DNS-over-TLS (DoT) ja DNS-over-HTTPS (DoH) kasutamise riskide minimeerimine\" src=\"\/wp-content\/uploads\/2020\/10\/e22b3de1268de10d51471a734ae4b783.jpg\" style=\"display:block;margin: 0 auto;\" \/>DNS within HTTPS<\/p>\n<p>DoH uses the well-known port 443 for HTTPS, which is specifically outlined in the RFC as a means to \"mix DoH traffic with other HTTPS traffic in the same connection,\" making DNS traffic analysis more difficult and, thus, bypassing corporate control measures (&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc8484#section-8.1\">RFC 8484 DoH, Section 8.1<\/a><\/noindex>&nbsp;). DoH protokoll kasutab TLS-i kr\u00fcptimist ja p\u00e4ringute s\u00fcntaksit, mida pakuvad \u00fcldised HTTPS ja HTTP\/2 standardid, lisades DNS-i p\u00e4ringud ja vastused standardsete HTTP p\u00e4ringute peale.<\/p>\n<h2>DoH-iga seotud riskid<\/h2>\n<p>Kui te ei suuda tavalist HTTPS-i liiklust DoH p\u00e4ringutest eristada, v\u00f5ivad teie organisatsiooni rakendused (ja nad t\u00f5en\u00e4oliselt teevad seda) muuta kohalikke DNS-i seadeid, suunates p\u00e4ringud kolmandatele osapooltele, mis vastavad DoH p\u00e4ringutele, mis k\u00f5rvaldab k\u00f5ik j\u00e4lgimise v\u00f5imalused, st h\u00e4vitab DNS-i liikluse kontrollimise v\u00f5imaluse. Ideaalses olukorras peaksite DoH kontrollima, kasutades HTTPS-i dekr\u00fcpteerimise funktsioone.&nbsp;<\/p>\n<p>JA&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/blog\/2020\/02\/25\/firefox-continues-push-to-bring-dns-over-https-by-default-for-us-users\/\">Google ja Mozilla on rakendanud DoH v\u00f5imalusi<\/a><\/noindex>&nbsp;oma brauserite viimases versioonis ning m\u00f5lemad ettev\u00f5tted t\u00f6\u00f6tavad selle nimel, et DoH oleks vaikimisi k\u00f5igi DNS-i p\u00e4ringute puhul.&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/techcommunity.microsoft.com\/t5\/networking-blog\/windows-will-improve-user-privacy-with-dns-over-https\/ba-p\/1014229\">Microsoft t\u00f6\u00f6tab samuti<\/a><\/noindex>&nbsp;DoH integreerimise plaanide kallal oma operatsioonis\u00fcsteemides. Miinus on see, et mitte ainult mainekad tarkvara arendajad, vaid ka kurjategijad on hakanud kasutama DoH-i kui vahendit traditsiooniliste ettev\u00f5tte tulem\u00fc\u00fcride meetmete m\u00f6\u00f6da hiilimiseks. ( N\u00e4iteks vaadake j\u00e4rgmisi artikleid:&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/psixbot-now-using-google-dns-over-https-and-possible-new-sexploitation-module\">PsiXBot kasutab n\u00fc\u00fcd Google DoH-i<\/a><\/noindex>&nbsp;,&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/psixbot-continues-evolve-updated-dns-infrastructure\">PsiXBot j\u00e4tkab arenemist uuendatud DNS-infrastruktuuriga<\/a><\/noindex>&nbsp;ja&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/blog.netlab.360.com\/an-analysis-of-godlua-backdoor-en\/\">Godlua tagavarakoopiate anal\u00fc\u00fcs<\/a><\/noindex>&nbsp;.) Igal juhul j\u00e4\u00e4vad nii hea kui ka pahatahtlik DoH liiklus m\u00e4rkamatuks, j\u00e4ttes organisatsiooni pimedaks pahatahtliku DoH kasutamise osas pahavarakanali (C2) ja konfidentsiaalsete andmete varguse jaoks.<\/p>\n<h2>DoH liikluse n\u00e4htavuse ja kontrolli tagamine<\/h2>\n<p>Parimaks lahenduseks DoH kontrollimiseks soovitame seadistada NGFW HTTPS-liikluse dekr\u00fcpteerimise ja DoH liikluse blokeerimise (rakenduse nimi: dns-over-https).&nbsp;<\/p>\n<p>Esiteks veenduge, et NGFW oleks seadistatud HTTPS-i dekr\u00fcpteerimiseks, vastavalt&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/docs.paloaltonetworks.com\/best-practices\/9-0\/decryption-best-practices.html\">parimate praktika dekr\u00fcpteerimise juhendile<\/a><\/noindex>.<\/p>\n<p>Teiseks looge reegel rakenduse 'dns-over-https' jaoks, nagu allpool n\u00e4idatud:<\/p>\n<p><img decoding=\"async\" alt=\"DNS-over-TLS (DoT) ja DNS-over-HTTPS (DoH) kasutamise riskide minimeerimine\" src=\"\/wp-content\/uploads\/2020\/10\/7876ec3c8af4177e9a81433eec91d419.jpg\" style=\"display:block;margin: 0 auto;\" \/>Palo Alto Networks NGFW reegel DNS-over-HTTPS blokeerimiseks<\/p>\n<p>Vahealternatiivina (kui teie organisatsioon ei ole t\u00e4ielikult rakendanud HTTPS-i dekr\u00fcpteerimist) saab NGFW-i seadistada rakenduse identifikaatori \u201edns-over-https\u201d jaoks tegevuse \u201ekeelda\u201d rakendamiseks, kuid m\u00f5ju on piiratud teatud h\u00e4sti tuntud DoH-serverite domeeninime kaudu blokeerimisega, kuna ilma HTTPS-i dekr\u00fcpteerimiseta ei saa DoH-i liiklust t\u00e4ielikult kontrollida (vt.&nbsp;&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/applipedia.paloaltonetworks.com\/\">Palo Alto Networks Applipedia<\/a><\/noindex>&nbsp;&nbsp; ja otsige fraasi \u201edns-over-https\u201d).<\/p>\n<h2>DNS \u00fcle TLS (DoT)<\/h2>\n<p><img decoding=\"async\" alt=\"DNS-over-TLS (DoT) ja DNS-over-HTTPS (DoH) kasutamise riskide minimeerimine\" src=\"\/wp-content\/uploads\/2020\/10\/1ce6c475d123f807971bbc286915349a.jpg\" style=\"display:block;margin: 0 auto;\" \/>DNS TLS-i sees<\/p>\n<p>Kuigi DoH-protokoll p\u00fc\u00fcab seguneda sama sadama teise liiklusega, kasutab DoT vaikimisi spetsiaalset sadamat, mis on reserveeritud selleks ainukeseks otstarbeks, keelates isegi sama sadama kasutamise traditsioonilise kr\u00fcpteerimata DNS-i liikluse jaoks (&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc7858#section-3.1\">RFC 7858, jaotis 3.1<\/a><\/noindex>&nbsp;).<\/p>\n<p>DoT-protokoll kasutab TLS-i protokolli \u0161ifreerimise tagamiseks, mis kapseldab standardseid DNS-i protokolli p\u00e4ringuid, liiklusele, mis kasutab h\u00e4sti tuntud sadamat 853 (&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc7858#section-6\">RFC 7858, jaotis 6<\/a><\/noindex>&nbsp;).&nbsp; \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b DoT \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d, \u0447\u0442\u043e\u0431\u044b \u0443\u043f\u0440\u043e\u0441\u0442\u0438\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e \u043f\u043e\u0440\u0442\u0443, \u043b\u0438\u0431\u043e \u0441\u043e\u0433\u043b\u0430\u0448\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435, \u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0443 \u043d\u0430 \u044d\u0442\u043e\u043c \u043f\u043e\u0440\u0442\u0443.<\/p>\n<h2>Seotud riskid DoT-iga<\/h2>\n<p>Google rakendas DoT oma kliendis&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/android-developers.googleblog.com\/2018\/04\/dns-over-tls-support-in-android-p.html\">Android 9 Pie ja uuemates versioonides<\/a><\/noindex>&nbsp;, samas on vaikimisi aktiveeritud automaatse DoT kasutamise seade, kui see on saadaval. Kui olete riskid hinnanud ja olete valmis kasutama DoT tasemel organisatsioonis, peavad v\u00f5rguadministraatorid selgelt lubama v\u00e4ljuvat liiklust sadamale 853 l\u00e4bi nende perimeetri selle uue protokolli jaoks.<\/p>\n<h2>DoT liikluse n\u00e4htavuse ja kontrolli tagamine<\/h2>\n<p>Parimate praktikate kohaselt DoT-i kontrollimiseks soovitame \u00fchte j\u00e4rgmist, olenevalt teie organisatsiooni n\u00f5uetest:<\/p>\n<ul>\n<li>\n<p>Seadistage NGFW liikluse desifreerimiseks sihtsadama 853 jaoks. Liikluse desifreerimise kaudu kuvatakse DoT DNS rakendusena, millele saate rakendada mis tahes toimingut, n\u00e4iteks lubada tellimust.&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/docs.paloaltonetworks.com\/pan-os\/9-0\/pan-os-admin\/threat-prevention\/dns-security\/enable-dns-security\">Palo Alto Networks DNS Security<\/a><\/noindex>&nbsp;\u0434\u043b\u044f&nbsp;\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f DGA \u0434\u043e\u043c\u0435\u043d\u043e\u0432&nbsp;\u0438\u043b\u0438 \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u0439\u0441\u044f&nbsp;<noindex><a rel=\"nofollow\" href=\"https:\/\/safebdv.blogspot.com\/2019\/11\/dga.html\">DNS Sinkholing&nbsp;<\/a><\/noindex>ja anti-spyware.<\/p>\n<\/li>\n<li>\n<p>\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0432\u0438\u0436\u043a\u043e\u043c App-ID \u0442\u0440\u0430\u0444\u0438\u043a &#8216;dns-over-tls&#8217; \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 853. \u041e\u0431\u044b\u0447\u043d\u043e \u043e\u043d \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f (\u0435\u0441\u043b\u0438 \u0432\u044b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 &#8216;dns-over-tls&#8217; \u0438\u043b\u0438 \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 853).<\/p>\n<\/li>\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/523676\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f DoH \u0438 DoT \u0417\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DoH \u0438 DoT \u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442\u0435 \u043b\u0438 \u0432\u044b \u0441\u0432\u043e\u0439 DNS \u0442\u0440\u0430\u0444\u0438\u043a? \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u0435\u043d\u0435\u0433 \u0438 \u0443\u0441\u0438\u043b\u0438\u0439 \u0432 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0442\u0435\u0439. \u041e\u0434\u043d\u0430\u043a\u043e, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0447\u0430\u0441\u0442\u043e \u043d\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f DNS. \u0425\u043e\u0440\u043e\u0448\u0438\u043c \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u0440\u0438\u0441\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u043e\u0441\u0438\u0442 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u044f Verisign \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Infosecurity. 31% \u043e\u0431\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97350,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97349","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f DoH \u0438 DoT\u0417\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DoH \u0438 DoT\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442\u0435 \u043b\u0438 \u0432\u044b \u0441\u0432\u043e\u0439 DNS \u0442\u0440\u0430\u0444\u0438\u043a? \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u0435\u043d\u0435\u0433 \u0438 \u0443\u0441\u0438\u043b\u0438\u0439 \u0432 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0442\u0435\u0439. \u041e\u0434\u043d\u0430\u043a\u043e, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0447\u0430\u0441\u0442\u043e \u043d\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f DNS. \u0425\u043e\u0440\u043e\u0448\u0438\u043c \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u0440\u0438\u0441\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u043e\u0441\u0438\u0442 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u044f Verisign \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Infosecurity. 31% \u043e\u0431\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/minimizacziya-riskov-ispolzovaniya-dns-over-tls-dot-i-dns-over-https-doh\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f DNS-over-TLS (DoT) \u0438 DNS-over-HTTPS (DoH) | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f DoH \u0438 DoT\u0417\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DoH \u0438 DoT\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442\u0435 \u043b\u0438 \u0432\u044b \u0441\u0432\u043e\u0439 DNS \u0442\u0440\u0430\u0444\u0438\u043a? \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u0435\u043d\u0435\u0433 \u0438 \u0443\u0441\u0438\u043b\u0438\u0439 \u0432 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0442\u0435\u0439. \u041e\u0434\u043d\u0430\u043a\u043e, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0447\u0430\u0441\u0442\u043e \u043d\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f DNS. \u0425\u043e\u0440\u043e\u0448\u0438\u043c \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u0440\u0438\u0441\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u043e\u0441\u0438\u0442 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u044f Verisign \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Infosecurity. 31% \u043e\u0431\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/minimizacziya-riskov-ispolzovaniya-dns-over-tls-dot-i-dns-over-https-doh\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-17T12:42:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-17T12:42:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNS-over-TLS (DoT) ja DNS-over-HTTPS (DoH) kasutamise riskide v\u00e4hendamine | ProHoster","description":"DoH ja DoT kasutamise riskide v\u00e4hendamine. Kas kontrollite oma DNS-i liiklust? Organisatsioonid investeerivad palju aega, raha ja ressursse oma v\u00f5rkude turvalisuse tagamisse. Kuid \u00fcks valdkond, mis j\u00e4\u00e4b sageli t\u00e4helepanuta, on DNS. H\u00e4sti toovad ohtu DNS-i riskid esile Verisigni esitlus konverentsil Infosecurity. 31% k\u00fcsitletud lunavarade klassidest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/minimizacziya-riskov-ispolzovaniya-dns-over-tls-dot-i-dns-over-https-doh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f DNS-over-TLS (DoT) \u0438 DNS-over-HTTPS (DoH) | ProHoster","og:description":"\u041c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f DoH \u0438 DoT\u0417\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 DoH \u0438 DoT\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442\u0435 \u043b\u0438 \u0432\u044b \u0441\u0432\u043e\u0439 DNS \u0442\u0440\u0430\u0444\u0438\u043a? \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0434\u0435\u043d\u0435\u0433 \u0438 \u0443\u0441\u0438\u043b\u0438\u0439 \u0432 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0442\u0435\u0439. \u041e\u0434\u043d\u0430\u043a\u043e, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0447\u0430\u0441\u0442\u043e \u043d\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f DNS. \u0425\u043e\u0440\u043e\u0448\u0438\u043c \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u0440\u0438\u0441\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438\u043d\u043e\u0441\u0438\u0442 DNS \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0437\u0435\u043d\u0442\u0430\u0446\u0438\u044f Verisign \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Infosecurity. 31% \u043e\u0431\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/minimizacziya-riskov-ispolzovaniya-dns-over-tls-dot-i-dns-over-https-doh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-17T12:42:14+00:00","article:modified_time":"2020-10-17T12:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97349","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:22:33","updated":"2022-09-28 02:55:30"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=97349"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97349\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/97350"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=97349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=97349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=97349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}