{"id":36712,"date":"2019-10-31T22:13:19","date_gmt":"2019-10-31T19:13:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https\/"},"modified":"2019-10-31T22:13:19","modified_gmt":"2019-10-31T19:13:19","slug":"v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","title":{"rendered":"Firefox tiks veikts eksperimenta saist\u012bb\u0101 ar DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mozilla Developers zi\u0146oja<\/a><\/noindex> par jauno p\u0113t\u012bjumu, kas tiek veikts, lai sagatavotos DNS piepras\u012bjumu veik\u0161anai, izmantojot HTTPS (DoH, DNS p\u0101r HTTPS). Eksperimenta laik\u0101 tiks v\u0101kti dati par vec\u0101ku kontro\u013cu sist\u0113mu un korporat\u012bvo resolveru izmanto\u0161anu ASV Firefox izlai\u0161anas lietot\u0101ju sist\u0113m\u0101s. Ir iesp\u0113jams atteikties no dal\u012bbas eksperiment\u0101, izmantojot lapu «about:studies» (p\u0113t\u012bjums ir nor\u0101d\u012bts sarakst\u0101 k\u0101 «Detection Logic for DNS-over-HTTPS»).<\/p>\n

Izp\u0113tes laik\u0101 tiks v\u0101kti anonimie dati, kas ietver tikai skait\u012bt\u0101jus, bez konkr\u0113tu adres\u0101tu un dom\u0113nu nor\u0101d\u012b\u0161anas. Lai atkl\u0101tu vec\u0101ku kontroles sist\u0113mas, tiks nos\u016bt\u012bts piepras\u012bjums uz nosaukumu exampleadultsite.com, un, ja tas nesakrit\u012bs ar faktisko IP adresi, tas nor\u0101d\u012bs, ka pieaugu\u0161\u0101 satura blo\u0137\u0113\u0161ana darbojas DNS l\u012bmen\u012b. Tiks v\u0113rt\u0113ti ar\u012b IP adreses<\/a> dati, kas tiek atgriezti Google un YouTube, lai p\u0101rbaud\u012btu to aizvieto\u0161anu ar restrict.youtube.com, forcesafesearch.google.com un restrictmoderate.youtube.com. <\/p>\n

Lai identific\u0113tu iek\u0161\u0113jo korporat\u012bvo rezolv\u0113t\u0101ju izmanto\u0161anu, izveidotie saimniekdom\u0113ni atverot vietnes tiks p\u0101rbaud\u012bti uz neparastiem augst\u0101k\u0101 l\u012bme\u0146a dom\u0113niem (TLD) un intraneta adres\u0113m. Eksperimenta m\u0113r\u0137is ir noskaidrot, vai p\u0113c noklus\u0113juma DNS-over-HTTPS aktiv\u0113\u0161ana var\u0113tu trauc\u0113t darb\u012bbu eso\u0161aj\u0101m DNS vec\u0101ku kontroles sist\u0113m\u0101m, k\u0101 ar\u012b rad\u012bt probl\u0113mas korporat\u012bvo t\u012bklu lietot\u0101jiem, kuri izmanto DNS serverus, kas sniedz inform\u0101ciju par iek\u0161\u0113jiem dom\u0113niem, kuri nav redzami \u0101r\u0113j\u0101 t\u012bkl\u0101.<\/p>\n

Atg\u0101din\u0101m, ka DoH var b\u016bt noder\u012bgs, lai nov\u0113rstu inform\u0101cijas nopl\u016bdi par piepras\u012btajiem viesu v\u0101rdiem caur pakalpojumu sniedz\u0113ju DNS serveriem, c\u012bn\u012btos pret MITM uzbrukumiem un DNS trafika vilto\u0161anu, pretotos blo\u0137\u0113\u0161anai DNS l\u012bmen\u012b vai organiz\u0113tu darb\u012bbu gad\u012bjum\u0101, ja nav iesp\u0113jams tie\u0161i piek\u013c\u016bt DNS serveriem (piem\u0113ram, str\u0101d\u0101jot caur proksi). Ja parast\u0101 situ\u0101cij\u0101 DNS piepras\u012bjumi tiek nos\u016bt\u012bti tie\u0161i noteiktiem DNS serveriem atbilsto\u0161i sist\u0113mas konfigur\u0101cijai, tad DoH gad\u012bjum\u0101 piepras\u012bjums p\u0113c IP adreses ir ietverts HTTPS trafika ietvaros un nos\u016bt\u012bts uz HTTP serveri, kur rezolvers apstr\u0101d\u0101 piepras\u012bjumus caur Web API. Eso\u0161ais standarts DNSSEC izmanto \u0161ifr\u0113\u0161anu tikai klienta un servera autentifik\u0101cijai, bet nepasarg\u0101 trafiku no p\u0101rtver\u0161anas un negarant\u0113 piepras\u012bjumu konfidencialit\u0101ti. <\/p>\n

Lai aktiviz\u0113tu DoH, lap\u0101 about:config j\u0101maina main\u012bg\u0101 network.trr.mode v\u0113rt\u012bba, kas tiek atbalst\u012bta kop\u0161 Firefox 60. V\u0113rt\u012bba 0 piln\u012bb\u0101 atsl\u0113dz DoH; 1 \u2014 tiek izmantots DNS vai DoH, atkar\u012bb\u0101 no t\u0101, kas ir \u0101tr\u0101k; 2 \u2014 p\u0113c noklus\u0113juma tiek izmantots DoH, bet DNS k\u0101 rezerves variants; 3 \u2014 tiek izmantots tikai DoH; 4 \u2014 re\u017e\u012bms, kad DoH un DNS tiek izmantoti paral\u0113li. P\u0113c noklus\u0113juma tiek izmantots CloudFlare DNS serveris, ta\u010du to var main\u012bt ar main\u012bg\u0101 network.trr.uri pal\u012bdz\u012bbu; piem\u0113ram, var iestat\u012bt «https:\/\/dns.google.com\/experimental» vai «https:\/\/9.9.9.9\/dns-query».<\/p>\n

<\/a><\/noindex><\/p>\n

Avots: opennet.lv<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS (DoH, DNS over HTTPS). \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Firefox \u0438\u0437 \u0421\u0428\u0410 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u043e\u0432. \u041e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043c\u043e\u0436\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 «about:studies» (\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36712","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firefox tiks \u012bstenots eksperiments, kas saist\u012bts ar DNS-over-HTTPS | ProHoster","description":"Mozilla izstr\u0101d\u0101t\u0101ji zi\u0146o par eksperimenta veik\u0161anu.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Firefox \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 DNS-over-HTTPS | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:19+00:00","article:modified_time":"2019-10-31T19:13:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36712","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:28:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:40:22","updated":"2026-02-08 20:28:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/36712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=36712"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/36712\/revisions"}],"predecessor-version":[{"id":157824,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/36712\/revisions\/157824"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=36712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=36712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=36712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}