{"id":38121,"date":"2019-10-31T22:21:46","date_gmt":"2019-10-31T19:21:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https\/"},"modified":"2019-10-31T22:21:46","modified_gmt":"2019-10-31T19:21:46","slug":"v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","title":{"rendered":"Chrome 78 s\u0101ks eksperimentus ar DNS-over-HTTPS ievie\u0161anu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u0113c tam, kad Mozilla<\/a><\/noindex> komp\u0101nija Google zi\u0146oja<\/a><\/noindex> par eksperimenta veik\u0161anu, lai p\u0101rbaud\u012btu tiek izstr\u0101d\u0101tu Chrome p\u0101rl\u016bka \u012bstenojumu \u201eDNS p\u0101r HTTPS\u201d (DoH, DNS over HTTPS). Chrome 78 izlaidum\u0101, kas pl\u0101nots 22. oktobr\u012b, da\u017e\u0101m lietot\u0101ju kategorij\u0101m tas b\u016bs noklus\u0113ts p\u0101rv\u0113rstas<\/a><\/noindex> uz DoH izmanto\u0161anu. Eksperiment\u0101 par DoH iesaist\u012bsies tikai tie lietot\u0101ji, kuru pa\u0161reiz\u0113j\u0101s sist\u0113mas iestat\u012bjumos ir nor\u0101d\u012bti noteikti DNS pakalpojumu sniedz\u0113ji, kas atz\u012bti par DoH sader\u012bgiem. <\/p>\n

Lietot\u0101ju sarakst\u0101 ir iek\u013cauti pakalpojumi<\/a><\/noindex> Google (8.8.8.8, 8.8.4.4), Cloudflare (1.1.1.1, 1.0.0.1), OpenDNS (208.67.222.222, 208.67.220.220), Quad9 (9.9.9.9, 149.112.112.112), Cleanbrowsing (185.228.168.168, 185.228.169.168) un DNS.SB (185.222.222.222, 185.184.222.222). Ja lietot\u0101ja DNS iestat\u012bjumos ir nor\u0101d\u012bti k\u0101ds no iepriek\u0161 min\u0113tajiem DNS serveriem, DoH Chrome tiks aktiviz\u0113ts p\u0113c noklus\u0113juma. Lietot\u0101jiem, kas izmanto viet\u0113jo interneta pakalpojumu sniedz\u0113ja DNS serverus, viss paliks nemain\u012bgs, un DNS piepras\u012bjumiem turpin\u0101s izmantot sist\u0113mas rezolveri. <\/p>\n

Svar\u012bga at\u0161\u0137ir\u012bba no DoH ievie\u0161anas Firefox, kur\u0101 pak\u0101peniska DoH aktiviz\u0113\u0161ana p\u0113c noklus\u0113juma s\u0101kas<\/a><\/noindex> jau septembra beig\u0101s, ir saist\u012bta ar to, ka nav piesaistes vienam DoH pakalpojumu sniedz\u0113jam. Ja Firefox p\u0113c noklus\u0113juma tiek izmantota<\/a><\/noindex> izmanto Cloudflare DNS serveri, tad Chrome tikai atjaunin\u0101s mat\u0113riju DNS apstr\u0101d\u0113 uz ekvivalentu pakalpojumu, nesniedzot DNS pakalpojumu sniedz\u0113ja mai\u0146u. Piem\u0113ram, ja lietot\u0101ja sist\u0113mas iestat\u012bjumos ir nor\u0101d\u012bts DNS 8.8.8.8, tad Chrome izmantos ir aktiviz\u0113ts<\/a><\/noindex> Google DoH pakalpojums (\u201ehttps:\/\/dns.google.com\/dns-query\u201c), ja DNS \u2014 1.1.1.1, tad DoH pakalpojums Cloudflare (\u201ehttps:\/\/cloudflare-dns.com\/dns-query\u201c) un utt.<\/a><\/noindex><\/p>\n

ja lietot\u0101js to v\u0113las, var\u0113s iesl\u0113gt vai izsl\u0113gt DoH, izmantojot iestat\u012bjumu \u201echrome:\/\/flags\/#dns-over-https\u201c. Atbalsta tr\u012bs darb\u012bbas re\u017e\u012bmus: \u201esecure\u201c, \u201eautomatic\u201c un \u201eoff\u201c. Re\u017e\u012bm\u0101 \u201esecure\u201c hosti tiek noteikti tikai, pamatojoties uz iepriek\u0161 ke\u0161ot\u0101m dro\u0161\u0101m v\u0113rt\u012bb\u0101m (ieg\u016bt\u0101m, izmantojot aizsarg\u0101tu savienojumu) un piepras\u012bjumiem caur DoH, parast\u0101 DNS atgrie\u0161ana netiek piem\u0113rota. Re\u017e\u012bm\u0101 \u201eautomatic\u201c, ja DoH un dro\u0161ais ke\u0161atmi\u0146as nav pieejami, ir at\u013cauta datu ieg\u016b\u0161ana no nedro\u0161\u0101s ke\u0161atmi\u0146as un sazi\u0146a caur tradicion\u0101lo DNS. Re\u017e\u012bm\u0101 \u201eoff\u201c vispirms tiek p\u0101rbaud\u012bta kop\u0113j\u0101 ke\u0161atmi\u0146a, un, ja datu nav, piepras\u012bjums tiek nos\u016bt\u012bts caur sistem\u0101tisko DNS. Re\u017e\u012bmu nosaka iestat\u012bjums iestat\u012bjumu<\/a><\/noindex> kDnsOverHttpsMode, un serveru saska\u0146o\u0161anas \u0161ablons ir caur kDnsOverHttpsTemplates.<\/p>\n

Eksperiments par DoH aktiviz\u0113\u0161anu tiks veikts vis\u0101s Chrome atbalst\u012btaj\u0101s platform\u0101s, iz\u0146emot Linux un iOS, jo ir sare\u017e\u0123\u012bti analiz\u0113t resolveru iestat\u012bjumus un ierobe\u017eots piek\u013cuves l\u012bmenis sist\u0113mas DNS iestat\u012bjumiem. Ja p\u0113c DoH aktiviz\u0113\u0161anas rastos probl\u0113mas ar piepras\u012bjumu nos\u016bt\u012b\u0161anu uz DoH serveri (piem\u0113ram, t\u0101 blo\u0137\u0113\u0161anas, t\u012bkla savienojam\u012bbas p\u0101rtraukuma vai k\u013c\u016bmes d\u0113\u013c), p\u0101rl\u016bks autom\u0101tiski atgriez\u012bsies pie sist\u0113mas DNS iestat\u012bjumiem. <\/p>\n

Eksperimenta m\u0113r\u0137is ir gal\u012bg\u0101 DoH \u012bsteno\u0161anas p\u0101rbaude un DoH ietekmes uz veiktsp\u0113ju izp\u0113te. J\u0101atz\u012bm\u0113, ka faktisk\u0101 DoH atbalsts pievienots<\/a><\/noindex> iek\u013cauta Chrome koda b\u0101z\u0113 jau febru\u0101r\u012b, ta\u010du DoH akt\u012bvas lieto\u0161anas<\/a><\/noindex> s\u0101k\u0161anai bija nepiecie\u0161ama Chrome palai\u0161ana ar \u012bpa\u0161u karogu un neskaidru opciju kopumu.<\/p>\n

Atg\u0101din\u0101m, ka DoH var b\u016bt noder\u012bgs, lai nov\u0113rstu inform\u0101cijas nopl\u016bdes par piepras\u012btajiem resursdatoru nosaukumiem caur pakalpojumu sniedz\u0113ju DNS serveriem, c\u012b\u0146\u0101 pret MITM uzbrukumiem un DNS satiksmes vilto\u0161anu (piem\u0113ram, piesl\u0113dzoties publiskam Wi-Fi), k\u0101 ar\u012b, lai pretrun\u0113tu DNS l\u012bme\u0146a blo\u0137\u0113\u0161anai (DoH nevar aizvietot VPN blo\u0137\u0113\u0161anas apiet sp\u0113j\u0101s, kas \u012bstenotas DPI l\u012bmen\u012b) vai, lai organiz\u0113tu darb\u012bbu gad\u012bjum\u0101, ja nav iesp\u0113jams tie\u0161i sazin\u0101ties ar DNS serveriem (piem\u0113ram, str\u0101d\u0101jot caur starpniekserveri). Parast\u0101 situ\u0101cij\u0101 DNS piepras\u012bjumi tiek tie\u0161i nos\u016bt\u012bti uz sist\u0113mas konfigur\u0101cij\u0101 noteiktiem DNS serveriem, bet DoH gad\u012bjum\u0101 piepras\u012bjums par resursdatora IP adreses noteik\u0161anu tiek inkapsul\u0113ts HTTPS satiksm\u0113 un nos\u016bt\u012bts uz HTTP serveri, kur rezolv\u0113t\u0101js apstr\u0101d\u0101 piepras\u012bjumus caur Web API. Eso\u0161ais DNSSEC standarts izmanto \u0161ifr\u0113\u0161anu tikai klienta un servera autentifik\u0101cijai, bet nepasarg\u0101 satiksmi no noklaus\u012b\u0161an\u0101s un garant\u0113 priv\u0101tumu piepras\u012bjumos. <\/p>\n

<\/a><\/noindex><\/p>\n

Avots: opennet.lv<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS). \u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 78, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 22 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 DoH. \u0412 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u043f\u0440\u0438\u043c\u0443\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u0439\u043a\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38121","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eksperimenti ar DNS-over-HTTPS aktiviz\u0113\u0161anu Chrome 78 | ProHoster","description":"P\u0113c Mozilla seko Google uz\u0146\u0113mums","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome 78 \u043d\u0430\u0447\u043d\u0443\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c DNS-over-HTTPS | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:46+00:00","article:modified_time":"2019-10-31T19:21:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38121","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:23","updated":"2026-01-23 20:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/38121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=38121"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/38121\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=38121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=38121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=38121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}