Chrome ya Android tsopano imathandizira DNS-over-HTTPS

Google adalengeza za chiyambi cha kuphatikizidwa kwa magawo DNS pamtundu wa HTTPS (DoH, DNS pa HTTPS) kwa ogwiritsa ntchito Chrome 85 pogwiritsa ntchito nsanja ya Android. Njirayi idzatsegulidwa pang'onopang'ono, ndikuphimba ogwiritsa ntchito ambiri. Kale mu Chrome 83 Kuthandizira DNS-over-HTTPS kwa ogwiritsa ntchito apakompyuta kwayamba.

DNS-over-HTTPS idzatsegulidwa kwa ogwiritsa ntchito omwe makonda awo amatchula opereka DNS omwe amathandizira ukadaulo uwu (pa DNS-over-HTTPS wopereka yemweyo amagwiritsidwa ntchito ngati DNS). Mwachitsanzo, ngati wosuta ali ndi DNS 8.8.8.8 yotchulidwa pazikhazikiko zamakina, ndiye kuti ntchito ya Google ya DNS-over-HTTPS (“https://dns.google.com/dns-query”) idzatsegulidwa mu Chrome ngati DNS ndi 1.1.1.1 , ndiye DNS-over-HTTPS service Cloudflare ("https://cloudflare-dns.com/dns-query"), etc.

Kuthetsa mavuto pakuthetsa ma netiweki amakampani, DNS-over-HTTPS sigwiritsidwa ntchito pozindikira kugwiritsa ntchito asakatuli pamakina omwe amayendetsedwa ndipakati. DNS-over-HTTPS imayimitsidwanso pamene machitidwe owongolera makolo ayikidwa. Zikalephera kugwira ntchito kwa DNS-over-HTTPS, ndizotheka kubweza makonda ku DNS wamba. Kuti muwongolere magwiridwe antchito a DNS-over-HTTPS, zosankha zapadera zawonjezedwa pazokonda zasakatuli zomwe zimakulolani kuti muyimitse DNS-over-HTTPS kapena kusankha wopereka wina.

Tikumbukire kuti DNS-over-HTTPS itha kukhala yothandiza poletsa kutayikira kwa chidziwitso cha mayina omwe afunsidwa kudzera pa seva za DNS za opereka, kuthana ndi kuukira kwa MITM ndi kuwononga magalimoto a DNS (mwachitsanzo, polumikiza pagulu la Wi-Fi), kuwerengera. kutsekereza pamlingo wa DNS (DNS-over-HTTPS sikungalowe m'malo mwa VPN podutsa kutsekereza komwe kumayendetsedwa pamlingo wa DPI) kapena kukonza ntchito pomwe sikungatheke kupeza ma seva a DNS mwachindunji (mwachitsanzo, pogwira ntchito kudzera pa proxy). Ngati muzochitika zachilendo, zopempha za DNS zimatumizidwa mwachindunji ku ma seva a DNS omwe amafotokozedwa mu kasinthidwe kachitidwe, ndiye kuti pa DNS-over-HTTPS pempho loti mudziwe adilesi ya IP yomwe imasungidwa imasungidwa mumayendedwe a HTTPS ndikutumizidwa ku seva ya HTTP, komwe. othetsa amakonza zopempha kudzera pa Web API. Muyezo womwe ulipo wa DNSSEC umagwiritsa ntchito kubisa kokha kuti utsimikizire kasitomala ndi seva, koma siziteteza magalimoto kuti zisasokonezedwe ndipo sizikutsimikizira chinsinsi cha zopempha.

Source: opennet.ru