{"id":38121,"date":"2019-10-31T22:21:46","date_gmt":"2019-10-31T19:21:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https\/"},"modified":"2019-10-31T22:21:46","modified_gmt":"2019-10-31T19:21:46","slug":"v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","title":{"rendered":"A Chrome 78-ben elkezd\u0151dnek a DNS-over-HTTPS bevezet\u00e9s\u00e9re ir\u00e1nyul\u00f3 k\u00eds\u00e9rletek","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ezt k\u00f6vet\u0151en Mozilla<\/a><\/noindex> a Google c\u00e9g bejelentette<\/a><\/noindex> a k\u00eds\u00e9rlet sz\u00e1nd\u00e9k\u00e1r\u00f3l, amely a Chrome b\u00f6ng\u00e9sz\u0151h\u00f6z fejlesztett \"DNS over HTTPS\" (DoH, DNS HTTPS-en) megval\u00f3s\u00edt\u00e1s ellen\u0151rz\u00e9s\u00e9re ir\u00e1nyul. A Chrome 78-as kiad\u00e1s\u00e1ban, amely okt\u00f3ber 22-\u00e9n esed\u00e9kes, egyes felhaszn\u00e1l\u00f3i kateg\u00f3ri\u00e1k alap\u00e9rtelmezetten \u00e1t\u00e1ll\u00edtanak<\/a><\/noindex> a DoH haszn\u00e1lat\u00e1ra. A DoH bevezet\u00e9s\u00e9hez csak azok a felhaszn\u00e1l\u00f3k csatlakoznak, akiknek a jelenlegi rendszerbe\u00e1ll\u00edt\u00e1saiban olyan DNS-szolg\u00e1ltat\u00f3k szerepelnek, amelyek kompatibilisek a DoH-val. <\/p>\n

A DNS-szolg\u00e1ltat\u00f3k feh\u00e9r list\u00e1j\u00e1ba tartozik a k\u00f6vetkez\u0151 szolg\u00e1ltat\u00e1sok<\/a><\/noindex> Google (8.8.8.8, 8.8.4.4), Cloudflare (1.1.1.1, 1.0.0.1), OpenDNS (208.67.222.222, 208.67.220.220), Quad9 (9.9.9.9, 149.112.112.112), Cleanbrowsing (185.228.168.168, 185.228.169.168) \u00e9s DNS.SB (185.222.222.222, 185.184.222.222). Ha a felhaszn\u00e1l\u00f3 DNS-be\u00e1ll\u00edt\u00e1saiban az eml\u00edtett DNS-szerverek egyike szerepel, a DoH alap\u00e9rtelmez\u00e9s szerint aktiv\u00e1lva lesz a Chrome-ban. Azok sz\u00e1m\u00e1ra, akik a helyi internetszolg\u00e1ltat\u00f3 \u00e1ltal biztos\u00edtott DNS-szervereket haszn\u00e1lj\u00e1k, minden a r\u00e9gi marad, \u00e9s a DNS-lek\u00e9rdez\u00e9sekhez tov\u00e1bbra is a rendszeres felbont\u00f3 ker\u00fcl felhaszn\u00e1l\u00e1sra. <\/p>\n

Fontos elt\u00e9r\u00e9s a Firefox DoH bevezet\u00e9s\u00e9t\u0151l, ahol a DoH fokozatos alap\u00e9rtelmez\u00e9s szerinti aktiv\u00e1l\u00e1sa m\u00e1r<\/a><\/noindex> szeptember v\u00e9g\u00e9n kezd\u0151dik, hogy a Chrome nem k\u00f6t\u0151dik egyetlen DoH-szolg\u00e1ltat\u00f3hoz sem. Ha a Firefox alap\u00e9rtelmez\u00e9s szerint haszn\u00e1lj\u00e1k<\/a><\/noindex> a CloudFlare DNS-szerver\u00e9t haszn\u00e1lja, akkor a Chrome-ban csak a DNS kezel\u00e9s\u00e9nek m\u00f3dszere friss\u00fcl egy megfelel\u0151 szolg\u00e1ltat\u00e1sra, an\u00e9lk\u00fcl, hogy a DNS-szolg\u00e1ltat\u00f3t cser\u00e9ln\u00e9k. P\u00e9ld\u00e1ul, ha a felhaszn\u00e1l\u00f3 a rendszerbe\u00e1ll\u00edt\u00e1sokban az 8.8.8.8 DNS-t jel\u00f6lte meg, akkor a Chrome-ban aktiv\u00e1lva lesz<\/a><\/noindex> a Google DoH szolg\u00e1ltat\u00e1s\u00e1t (\"https:\/\/dns.google.com\/dns-query\"), ha a DNS - 1.1.1.1, akkor a Cloudflare DoH szolg\u00e1ltat\u00e1sa (\"https:\/\/cloudflare-dns.com\/dns-query\") \u00e9s stb.<\/a><\/noindex><\/p>\n

a felhaszn\u00e1l\u00f3 k\u00e9r\u00e9s\u00e9re aktiv\u00e1lhatja vagy deaktiv\u00e1lhatja a DoH-t a \"chrome:\/\/flags\/#dns-over-https\" be\u00e1ll\u00edt\u00e1s seg\u00edts\u00e9g\u00e9vel. H\u00e1rom m\u0171k\u00f6d\u00e9si m\u00f3dot t\u00e1mogat: \"secure\", \"automatic\" \u00e9s \"off\". A \"secure\" m\u00f3dban a hosztok kiz\u00e1r\u00f3lag kor\u00e1bban gyors\u00edt\u00f3t\u00e1razott biztons\u00e1gos \u00e9rt\u00e9kek (v\u00e9dett kapcsolaton kereszt\u00fcl megszerzett) \u00e9s DoH-n kereszt\u00fcli lek\u00e9rdez\u00e9sek alapj\u00e1n ker\u00fclnek meghat\u00e1roz\u00e1sra, a norm\u00e1l DNS-re val\u00f3 visszaalak\u00edt\u00e1s nem t\u00f6rt\u00e9nik meg. \"Automatic\" m\u00f3dban, ha a DoH \u00e9s a v\u00e9dett gyors\u00edt\u00f3t\u00e1r nem el\u00e9rhet\u0151, megengedett az adatok beszerz\u00e9se a nem biztons\u00e1gos gyors\u00edt\u00f3t\u00e1rb\u00f3l \u00e9s a hagyom\u00e1nyos DNS haszn\u00e1lata. \"Off\" m\u00f3dban el\u0151sz\u00f6r az \u00e1ltal\u00e1nos gyors\u00edt\u00f3t\u00e1rat ellen\u0151rzik, \u00e9s ha nincsenek adatok, a lek\u00e9rdez\u00e9st a rendszer DNS-\u00e9n kereszt\u00fcl k\u00fcldik. A m\u00f3d be\u00e1ll\u00edt\u00e1sa a be\u00e1ll\u00edt\u00e1ssal<\/a><\/noindex> kDnsOverHttpsMode , m\u00edg a szerverekhez val\u00f3 hozz\u00e1rendel\u00e9s mint\u00e1ja a kDnsOverHttpsTemplates r\u00e9v\u00e9n \u00e1ll\u00edthat\u00f3 be.<\/p>\n

A DoH activation experiment will be conducted on all platforms supported by Chrome, except for Linux and iOS due to the non-triviality of parsing resolver settings and restricted access to DNS system settings. If any issues arise when sending requests to the DoH server after enabling DoH (for instance, due to its blocking, network connectivity issues, or malfunctions), the browser will automatically revert to the system DNS settings. <\/p>\n

The purpose of conducting the experiment is the final verification of DoH implementation and studying its impact on performance. It is worth noting that support for DoH was actually added hozz\u00e1adva lett<\/a><\/noindex> to the Chrome codebase back in February, but required launching Chrome with a special flag and a non-obvious set of options.<\/a><\/noindex> Let's remember that DoH can be beneficial to eliminate leaks of information regarding requested hostnames through provider DNS servers, combat MITM attacks and DNS traffic replacement (for example, when connecting to public Wi-Fi), resist DNS-level blocks (DoH cannot replace VPN in bypassing blocks implemented at the DPI level), or organize operations in cases where direct access to DNS servers is not possible (for instance, when working through a proxy). In normal situations, DNS queries are directly sent to specific DNS servers defined in the system configuration, but in the case of DoH, the request to determine a host's IP address is encapsulated in HTTPS traffic and sent to an HTTP server, where the resolver processes requests through a Web API. The existing DNSSEC standard only uses encryption for client and server authentication but does not protect traffic from interception and does not guarantee the confidentiality of queries.<\/p>\n

The release of the Funtoo 1.4 distribution, developed by the founder of Gentoo Linux <\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS). \u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 78, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 22 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 DoH. \u0412 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u043f\u0440\u0438\u043c\u0443\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u0439\u043a\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38121","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Chrome 78-ban megkezd\u0151dnek a DNS-over-HTTPS k\u00eds\u00e9rletek | ProHoster","description":"\ud83e\udd47Experiments with enabling DNS-over-HTTPS will begin in Chrome 78 | ProHoster","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome 78 \u043d\u0430\u0447\u043d\u0443\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c DNS-over-HTTPS | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:46+00:00","article:modified_time":"2019-10-31T19:21:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38121","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:23","updated":"2026-01-23 20:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=38121"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/38121\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=38121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=38121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=38121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}