Firefox cov neeg tsim khoom tau tshaj tawm qhov nthuav dav ntawm DNS dhau HTTPS (DoH) hom, uas yuav qhib los ntawm lub neej ntawd rau cov neeg siv hauv Canada (yav dhau los, DoH tsuas yog lub neej ntawd rau Asmeskas). Enabling DoH rau Canadian cov neeg siv tau muab faib ua ntau theem: Thaum Lub Xya Hli 20, DoH yuav qhib rau 1% ntawm cov neeg siv Canadian thiab, txwv tsis pub muaj teeb meem npaj txhij, kev pab them nqi yuav nce mus rau 100% thaum kawg lub Cuaj Hli.
Kev hloov pauv ntawm Canadian Firefox cov neeg siv mus rau DoH yog ua nrog kev koom tes ntawm CIRA (Canadian Internet Registration Authority), uas tswj kev txhim kho Internet hauv Canada thiab yog lub luag haujlwm rau qib siab tshaj plaws "ca". CIRA kuj tau kos npe rau TRR (Trusted Recursive Resolver) thiab yog ib qho ntawm DNS-dhau-HTTPS cov chaw muab kev pabcuam muaj nyob hauv Firefox.
Tom qab qhib DoH, ceeb toom yuav tshwm rau ntawm tus neeg siv lub kaw lus, tso cai, yog tias xav tau, kom tsis kam hloov mus rau DoH thiab txuas ntxiv siv cov txheej txheem ib txwm xa cov lus thov tsis tau nkag mus rau tus kws kho mob DNS server. Koj tuaj yeem hloov tus neeg muab kev pabcuam lossis lov tes taw DoH hauv kev sib txuas network. Ntxiv rau CIRA DoH servers, koj tuaj yeem xaiv Cloudflare thiab NextDNS cov kev pabcuam.
DoH cov chaw muab kev pabcuam hauv Firefox raug xaiv raws li qhov yuav tsum tau muaj rau kev ntseeg siab DNS daws teeb meem, raws li tus neeg teb xov tooj DNS tuaj yeem siv cov ntaub ntawv tau txais kev daws teeb meem nkaus xwb kom ntseeg tau tias kev ua haujlwm ntawm kev pabcuam, yuav tsum tsis txhob khaws cov ntaub ntawv ntev dua 24 teev, thiab tsis tuaj yeem. Hloov cov ntaub ntawv mus rau lwm tus neeg sab nrauv thiab yuav tsum tau nthuav tawm cov ntaub ntawv hais txog cov txheej txheem ua cov ntaub ntawv. Cov kev pabcuam yuav tsum tau pom zoo kom tsis txhob censor, lim, cuam tshuam lossis thaiv DNS tsheb, tshwj tsis yog hauv cov xwm txheej uas tau muab los ntawm txoj cai.
Cia peb nco qab tias DoH tuaj yeem muaj txiaj ntsig zoo rau kev tiv thaiv kev xau ntawm cov ntaub ntawv hais txog cov npe thov los ntawm DNS servers ntawm cov chaw muab kev pabcuam, tiv thaiv MITM kev tawm tsam thiab DNS kev spoofing (piv txwv li, thaum txuas rau pej xeem Wi-Fi), tiv thaiv kev thaiv ntawm DNS theem (DoH tsis tuaj yeem hloov lub VPN hauv thaj tsam ntawm kev hla kev thaiv kev siv ntawm DPI qib) lossis rau kev teeb tsa ua haujlwm yog tias nws tsis tuaj yeem nkag mus rau DNS servers ncaj qha (piv txwv li, thaum ua haujlwm los ntawm lub npe). Yog tias nyob rau hauv ib qho xwm txheej DNS thov raug xa ncaj qha mus rau DNS servers uas tau teev tseg hauv qhov system teeb tsa, tom qab ntawd hauv DoH, qhov kev thov kom txiav txim siab tus tswv tsev IP chaw nyob yog encapsulated hauv HTTPS tsheb thiab xa mus rau HTTP server, qhov twg cov txheej txheem daws teeb meem. thov los ntawm Web API. Tus txheej txheem DNSSEC uas twb muaj lawm siv encryption tsuas yog txhawm rau txheeb xyuas tus neeg siv khoom thiab cov neeg rau zaub mov, tab sis tsis tiv thaiv kev tsheb los ntawm kev cuam tshuam thiab tsis lees paub qhov tsis pub lwm tus paub ntawm kev thov.
Tau qhov twg los: opennet.ru