{"id":113276,"date":"2024-01-31T13:41:06","date_gmt":"2024-01-31T11:41:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec"},"modified":"2024-01-31T13:41:06","modified_gmt":"2024-01-31T11:41:10","slug":"sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","title":{"rendered":"Fals \u00een zona de domeniu RU din cauza unei erori la schimbarea cheilor DNSSEC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pe 30 ianuarie, la ora 18:20 (MSK), utilizatorii s-au confruntat cu o defec\u021biune masiv\u0103 a determin\u0103rii gazdelor \u00een domeniul .RU, cauzat\u0103 de o eroare la schimbarea cheilor utilizate pentru a verifica autenticitatea zonei .RU prin DNSSEC. Ca rezultat al incidentului, pe serverele DNS care aplic\u0103 DNSSEC pentru verificarea autentic\u0103 a datelor, toate domeniile din zona \u201e.ru\u201d au devenit indemonstrabile. Problema a afectat doar utilizatorii care foloseau rezolvatori DNS de la furnizori sau servicii DNS publice, cum ar fi 8.8.8.8, care verific\u0103 autenticitatea cererilor prin DNSSEC. Utilizatorii rezolvatorilor DNS, pe care DNSSEC este dezactivat, nu au fost afecta\u021bi. <\/p>\n

Incidentul aminte\u0219te de incidentul de anul trecut cu registrarul InternetNZ, responsabil pentru zona domenial\u0103 \u201e.NZ\u201d, care a dus la o defec\u021biune \u00een rezolvarea nume de domeniu<\/a> \u00een zona \u201e.nz\u201d din cauza unei erori la rotirea cheilor KSK (Key Signing Key), utilizate pentru semnarea digital\u0103 a \u00eenregistr\u0103rilor DNSKEY, care con\u021bin chei pentru semnarea zonei domeniale (ZSK, Zone Signing Key). \u00cen cazul InternetNZ, eroarea a fost legat\u0103 de schimbarea formatului cheilor \u00een timpul tranzi\u021biei c\u0103tre un nou sistem informa\u021bional al registrarului. Cauzele incidentului din zona RU nu au fost \u00eenc\u0103 detaliate \u2014 Centrul de coordonare a domeniilor RU a confirmat doar \u00een linii mari c\u0103 problema este legat\u0103 de reconfigurarea DNSSEC. <\/p>\n

Judec\u00e2nd dup\u0103 manifest\u0103rile externe, defec\u021biunea a avut loc ca urmare a unei \u00eencerc\u0103ri de \u00eenlocuire a cheii utilizate pentru a verifica zona RU. Aceast\u0103 cheie reprezint\u0103 baza de \u00eencredere pentru celelalte chei folosite \u00een domeniile de nivel secundar \u0219i, la r\u00e2ndul s\u0103u, utilizeaz\u0103 cheia domeniului \u201e.\u201d ca fiind superioar\u0103 pentru a-\u0219i confirma \u00eencrederea. Pe 26 ianuarie, \u00een set\u0103rile DNSEC ale zonei RU, pe l\u00e2ng\u0103 cheia principal\u0103 cu identificatorul 44301, a ap\u0103rut o cheie suplimentar\u0103 52263.

\"Fals\"Fals<\/center> <\/p>\n

Ieri, aproximativ la 18:20, o nou\u0103 cheie a fost activat\u0103 pentru a valida \u00eenregistr\u0103rile din zona RU, dar dup\u0103 trecerea la noua cheie, din cauza unei erori, verificarea autenticit\u0103\u021bii a \u00eencetat s\u0103 mai func\u021bioneze.

\"Fals<\/center> <\/p>\n

Semn\u0103tura cu cheia veche a fost returnat\u0103 \u00een jurul orei 21:00 (MSK), iar primul r\u0103spuns corect a fost \u00eenregistrat de serviciul dnsviz.net la 22:07 (MSK). Set\u0103rile eronate au fost prezente timp de aproximativ dou\u0103 ore \u0219i jum\u0103tate, dar din cauza persisten\u021bei \u00eenregistr\u0103rilor gre\u0219ite \u00een cache-urile serverelor DNS, este nevoie de timp suplimentar pentru restabilirea complet\u0103, cu excep\u021bia cazului \u00een care cache-ul pe serverele DNS recursive este cur\u0103\u021bat for\u021bat. Anumi\u021bi furnizori au rezolvat problema \u00eentr-un mod mai rapid \u0219i radical, dezactiv\u00e2nd temporar verificarea prin DNSSEC \u00een configura\u021biile rezolvatorilor lor.

\"Fals\"Fals<\/center>
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

30 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 18:20 (MSK) \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0437\u043e\u043d\u044b RU \u0447\u0435\u0440\u0435\u0437 DNSSEC. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043d\u0430 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 DNSSEC \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c\u0441\u044f \u0432\u0441\u0435 \u0434\u043e\u043c\u0435\u043d\u044b \u0432 \u0437\u043e\u043d\u0435 «.ru». \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 DNS-\u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438\u043b\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113277,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Defec\u021biune \u00een zona domenial\u0103 RU din cauza unei erori la \u00eenlocuirea cheilor DNSSEC | ProHoster","description":"Pe 30 ianuarie, la ora 18:20 (MSK), utilizatorii s-au confruntat cu o defec\u021biune masiv\u0103 a identific\u0103rii gazdelor \u00een zona domenial\u0103 RU, cauzat\u0103 de o eroare \u00een schimbarea cheilor utilizate pentru a asigura autenticitatea zonei RU prin DNSSEC.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0431\u043e\u0439 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438 \u0437\u0430\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 DNSSEC | ProHoster","og:description":"30 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 18:20 (MSK) \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0441 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u043e\u0432 \u0432 \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0437\u043e\u043d\u0435 RU, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u0441\u043c\u0435\u043d\u0435 \u043a\u043b\u044e\u0447\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u0438 \u0437\u043e\u043d\u044b RU \u0447\u0435\u0440\u0435\u0437 DNSSEC.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/sboj-v-domennoj-zone-ru-iz-za-oshibki-pri-zamene-klyuchej-dnssec","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-31T11:41:10+00:00","article:modified_time":"2024-01-31T11:41:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"113276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:56:04","updated":"2026-02-08 20:56:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=113276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113276\/revisions"}],"predecessor-version":[{"id":158095,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113276\/revisions\/158095"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/113277"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=113276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=113276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=113276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}