{"id":38615,"date":"2019-10-31T22:24:52","date_gmt":"2019-10-31T19:24:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https\/"},"modified":"2019-10-31T22:24:52","modified_gmt":"2019-10-31T19:24:52","slug":"assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","title":{"rendered":"Amerikaanse providerassociaties zijn tegen centralisatie bij de implementatie van DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Handelsorganisaties NCTA<\/a><\/noindex>, CTIA<\/a><\/noindex> en USTelecom<\/a><\/noindex>, die de belangen van internetproviders behartigen, hebben zich<\/a><\/noindex> aan het Congres van de Verenigde Staten met het verzoek aandacht te besteden aan het probleem van de implementatie van «DNS over HTTPS» (DoH, DNS over HTTPS) en om Google te vragen om gedetailleerde informatie over de huidige en toekomstige plannen voor de opname van DoH in zijn producten, evenals het verkrijgen van de toezegging om gecentraliseerde verwerking van DNS-verzoeken in Chrome en Android niet standaard in te schakelen zonder voorafgaande uitgebreide discussie met andere vertegenwoordigers van het ecosysteem en rekening te houden met mogelijke negatieve gevolgen.<\/p>\n

Met het bewustzijn van de algemene voordelen van encryptie voor DNS-verkeer, vinden de associaties het onacceptabel om de controle over de naamconversie in \u00e9\u00e9n hand te concentreren en deze standaardmechanisme te koppelen aan gecentraliseerde DNS-diensten. In het bijzonder wordt gesteld dat Google op weg is naar de standaardimplementatie van DoH in Android en Chrome, wat, indien gekoppeld aan Google-servers, de gedecentraliseerde aard van de DNS-infrastructuur zou verzwakken en een enkel punt van falen zou cre\u00ebren.<\/p>\n

Aangezien Chrome en Android de markt domineren, zou Google bij het opleggen van zijn DoH-servers de mogelijkheid krijgen om het grootste deel van het verkeer van DNS-verzoeken van gebruikers te controleren. Naast de vermindering van de betrouwbaarheid van de infrastructuur zou een dergelijke stap Google ook onterechte voordelen ten opzichte van concurrenten opleveren, aangezien het bedrijf aanvullende informatie over het gedrag van gebruikers zou verkrijgen, die kunnen worden gebruikt voor het volgen van gebruikersactiviteit en het afstemmen van relevante advertenties. <\/p>\n

De toepassing van DoH kan ook de werking verstoren in gebieden zoals ouderlijke controlesystemen, toegang tot interne naamruimtes in bedrijfsomgevingen, routekeuze in contentdistributie-optimalisatiesystemen en de uitvoering van gerechtelijke bevelen met betrekking tot de bestrijding van de verspreiding van illegale content en exploitatie van minderjarigen. DNS-omleiding wordt ook vaak gebruikt om gebruikers om te leiden naar een pagina met informatie over het be\u00ebindigen van middelen bij de abonnee of voor toegang tot een draadloos netwerk.<\/p>\n

Google verklapte<\/a><\/noindex>, dat de zorgen ongegrond zijn, aangezien zij niet van plan is DoH standaard in Chrome en Android in te schakelen. Voorgenomen<\/a><\/noindex> In Chrome 78, the experimental default activation of DoH will only cover users whose settings specify DNS providers that allow DoH as an alternative to traditional DNS. For those using DNS servers provided by their local internet service providers, DNS requests will continue to be sent through the system resolver. That is, Google's actions amount to merely replacing the equivalent service of the current provider to transition to a secure method of handling DNS. An experimental activation of DoH is also planned in Firefox, but unlike Google, the company Mozilla is van plan<\/a><\/noindex> gebruikt<\/a><\/noindex> defaults to the CloudFlare DNS server. This approach has already sparked criticism<\/a><\/noindex> from the OpenBSD project.<\/p>\n

It is worth noting that DoH can be useful for preventing leaks of information about requested hostnames through providers' DNS servers, combating MITM attacks and DNS traffic spoofing (e.g., when connecting to public Wi-Fi), resisting DNS-level blocks (DoH cannot replace VPNs in circumventing blocks implemented at the DPI level), or for facilitating operation in cases where direct access to DNS servers is not possible (e.g., when working through proxies). <\/p>\n

In a normal situation, DNS requests are sent directly to the DNS servers specified in the system configuration, but in the case of DoH, the request to determine the IP address of the host is encapsulated in HTTPS traffic and sent to an HTTP server, where the resolver processes requests via the Web API. The existing DNSSEC standard uses encryption only for client and server authentication but does not protect traffic from interception and does not guarantee the confidentiality of requests. Currently, about 30 public DNS servers<\/a><\/noindex> support DoH.<\/p>\n

<\/a><\/noindex><\/p>\n

Bron: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38615","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47The US providers' association opposes centralization in the implementation of DNS-over-HTTPS | ProHoster","description":"The trade associations NCTA,","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA,","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:52+00:00","article:modified_time":"2019-10-31T19:24:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38615","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:45:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:06:24","updated":"2026-01-23 22:45:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/38615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=38615"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/38615\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=38615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=38615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=38615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}