{"id":36712,"date":"2019-10-31T22:13:19","date_gmt":"2019-10-31T19:13:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https\/"},"modified":"2019-10-31T22:13:19","modified_gmt":"2019-10-31T19:13:19","slug":"v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","title":{"rendered":"Um experimento relacionado ao DNS-over-HTTPS ser\u00e1 realizado no Firefox.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Desenvolvedores da Mozilla informaram<\/a><\/noindex> sobre a realiza\u00e7\u00e3o de um novo estudo em prepara\u00e7\u00e3o para a implementa\u00e7\u00e3o da fun\u00e7\u00e3o de consulta DNS sobre HTTPS (DoH, DNS sobre HTTPS). Durante o experimento, ser\u00e1 coletada estat\u00edstica sobre o uso de sistemas de controle parental e resolvedores corporativos entre usu\u00e1rios das vers\u00f5es do Firefox nos EUA. \u00c9 poss\u00edvel optar por n\u00e3o participar do experimento atrav\u00e9s da p\u00e1gina 'about:studies' (o estudo est\u00e1 listado como 'Detection Logic for DNS-over-HTTPS').<\/p>\n

Para o estudo, ser\u00e3o coletados dados an\u00f4nimos, incluindo apenas contadores, sem a identifica\u00e7\u00e3o de endere\u00e7os e dom\u00ednios espec\u00edficos. Para identificar sistemas de controle parental, ser\u00e1 enviado um pedido para determinar o nome exampleadultsite.com e, se ele n\u00e3o coincidir com o IP real, pode-se considerar que a filtragem de conte\u00fado adulto est\u00e1 ativa a n\u00edvel de DNS. Tamb\u00e9m ser\u00e3o avaliados endere\u00e7os IP<\/a> os retornos para Google e YouTube, para verificar sua substitui\u00e7\u00e3o por restrict.youtube.com, forcesafesearch.google.com e restrictmoderate.youtube.com. <\/p>\n

Para identificar a utiliza\u00e7\u00e3o de resolvedores corporativos internos, os hosts detectados ao abrir sites ser\u00e3o verificados quanto ao uso de dom\u00ednios de n\u00edvel superior (TLD) incomuns e ao retorno de endere\u00e7os da intranet para eles. A motiva\u00e7\u00e3o para a realiza\u00e7\u00e3o do experimento foram preocupa\u00e7\u00f5es de que a ativa\u00e7\u00e3o autom\u00e1tica do DNS-over-HTTPS poderia interromper o funcionamento dos sistemas de controle parental que operam atrav\u00e9s do DNS, al\u00e9m de criar problemas para usu\u00e1rios de redes corporativas que utilizam servidores DNS que fornecem informa\u00e7\u00f5es sobre dom\u00ednios internos, invis\u00edveis na rede externa.<\/p>\n

Lembramos que o DoH pode ser \u00fatil para evitar vazamentos de informa\u00e7\u00f5es sobre os nomes de hosts solicitados atrav\u00e9s dos servidores DNS dos provedores, combater ataques MITM e a substitui\u00e7\u00e3o do tr\u00e1fego DNS, enfrentar bloqueios em n\u00edvel DNS ou para organizar o funcionamento em caso de impossibilidade de acesso direto aos servidores DNS (por exemplo, ao trabalhar atrav\u00e9s de um proxy). Se, em uma situa\u00e7\u00e3o normal, as consultas DNS s\u00e3o enviadas diretamente para servidores DNS definidos na configura\u00e7\u00e3o do sistema, no caso do DoH, a consulta para determinar o endere\u00e7o IP do host \u00e9 encapsulada no tr\u00e1fego HTTPS e enviada a um servidor HTTP, onde o resolvedor processa as solicita\u00e7\u00f5es atrav\u00e9s de API Web. O padr\u00e3o existente DNSSEC utiliza criptografia apenas para autenticar o cliente e o servidor, mas n\u00e3o protege o tr\u00e1fego contra intercepta\u00e7\u00e3o e n\u00e3o garante a privacidade das solicita\u00e7\u00f5es. <\/p>\n

Para ativar o DoH, deve-se alterar o valor da vari\u00e1vel network.trr.mode em about:config, que \u00e9 suportada a partir do Firefox 60. O valor 0 desativa completamente o DoH; 1 \u2014 utiliza DNS ou DoH, dependendo de qual for mais r\u00e1pido; 2 \u2014 utiliza DoH por padr\u00e3o, e DNS como alternativa; 3 \u2014 utiliza apenas DoH; 4 \u2014 modo de espelhamento onde DoH e DNS s\u00e3o utilizados em paralelo. O servidor DNS padr\u00e3o \u00e9 o CloudFlare, mas pode ser alterado atrav\u00e9s do par\u00e2metro network.trr.uri, por exemplo, \u00e9 poss\u00edvel definir \"https:\/\/dns.google.com\/experimental\" ou \"https:\/\/9.9.9.9\/dns-query\".<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS (DoH, DNS over HTTPS). \u0412 \u0445\u043e\u0434\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 Firefox \u0438\u0437 \u0421\u0428\u0410 \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0431\u0440\u0430\u043d\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u043e\u0432. \u041e\u0442\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043c\u043e\u0436\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 «about:studies» (\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36712","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Um experimento relacionado ao DNS-over-HTTPS ser\u00e1 conduzido no Firefox | ProHoster","description":"Os desenvolvedores da Mozilla informaram sobre a realiza\u00e7\u00e3o.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Firefox \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 DNS-over-HTTPS | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Mozilla \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/v-firefox-budet-provedyon-eksperiment-svyazannyj-s-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:19+00:00","article:modified_time":"2019-10-31T19:13:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36712","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:28:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:40:22","updated":"2026-02-08 20:28:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=36712"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36712\/revisions"}],"predecessor-version":[{"id":157824,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36712\/revisions\/157824"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=36712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=36712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=36712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}