{"id":38121,"date":"2019-10-31T22:21:46","date_gmt":"2019-10-31T19:21:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https\/"},"modified":"2019-10-31T22:21:46","modified_gmt":"2019-10-31T19:21:46","slug":"v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","title":{"rendered":"\u00cen Chrome 78 vor \u00eencepe experimentele pentru activarea DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Urm\u00e2nd Mozilla<\/a><\/noindex> compania Google a declarat<\/a><\/noindex> despre inten\u021bia de a realiza un experiment pentru a verifica implementarea \u201eDNS peste HTTPS\u201d (DoH, DNS over HTTPS) dezvoltat\u0103 pentru browserul Chrome. \u00cen versiunea Chrome 78, programat\u0103 pentru 22 octombrie, anumite categorii de utilizatori vor avea, implicit, activat\u0103 aceast\u0103 func\u021bionalitate. transfera\u021bi<\/a><\/noindex> pe utilizarea DoH implicit. \u00cen experimentul de activare a DoH vor participa doar utilizatorii ale c\u0103ror set\u0103ri actuale de sistem specific\u0103 anumi\u021bi furnizori DNS recunoscu\u021bi ca fiind compatibili cu DoH. <\/p>\n

Lista alb\u0103 a furnizorilor DNS include serviciile<\/a><\/noindex> Google (8.8.8.8, 8.8.4.4), Cloudflare (1.1.1.1, 1.0.0.1), OpenDNS (208.67.222.222, 208.67.220.220), Quad9 (9.9.9.9, 149.112.112.112), Cleanbrowsing (185.228.168.168, 185.228.169.168) \u0219i DNS.SB (185.222.222.222, 185.184.222.222). Dac\u0103 \u00een set\u0103rile DNS ale utilizatorului va fi specificat unul dintre serverele DNS men\u021bionate mai sus, DoH \u00een Chrome va fi activat implicit. Pentru cei care folosesc servere DNS oferite de furnizorul de internet local, totul va r\u0103m\u00e2ne neschimbat, iar pentru cererile DNS se va utiliza resolverul de sistem. <\/p>\n

O diferen\u021b\u0103 important\u0103 fa\u021b\u0103 de implementarea DoH \u00een Firefox, \u00een care activarea treptat\u0103 a DoH implicit va \u00eencepe<\/a><\/noindex> deja la sf\u00e2r\u0219itul lunii septembrie, este absen\u021ba leg\u0103turii cu un singur serviciu DoH. Dac\u0103 \u00een Firefox serverul DNS implicit se folose\u0219te<\/a><\/noindex> este CloudFlare, \u00een Chrome va avea loc doar o actualizare a metodei de lucru cu DNS c\u0103tre un serviciu echivalent, f\u0103r\u0103 schimbarea furnizorului DNS. De exemplu, dac\u0103 utilizatorul are \u00een set\u0103rile de sistem DNS 8.8.8.8, atunci \u00een Chrome va fi activat<\/a><\/noindex> Serviciul DoH de la Google (\u201ehttps:\/\/dns.google.com\/dns-query\u201d), iar dac\u0103 DNS este 1.1.1.1, atunci serviciul DoH de la Cloudflare (\u201ehttps:\/\/cloudflare-dns.com\/dns-query\u201d) \u0219i a\u0219a mai departe.<\/a><\/noindex><\/p>\n

Utilizatorul va putea activa sau dezactiva DoH prin setarea \u201echrome:\/\/flags\/#dns-over-https\u201d. Sunt suportate trei moduri de operare: \u201esecure\u201d, \u201eautomatic\u201d \u0219i \u201eoff\u201d. \u00cen modul \u201esecure\u201d, gazdele sunt determinate doar pe baza valorilor securizate, cached anterior (ob\u021binute printr-o conexiune securizat\u0103) \u0219i a cererilor prin DoH, revenirea la DNS-ul obi\u0219nuit nu este aplicat\u0103. \u00cen modul \u201eautomatic\u201d, dac\u0103 DoH \u0219i cache-ul securizat nu sunt disponibile, se permite ob\u021binerea datelor din cache-ul nesecurizat \u0219i apelul prin DNS tradi\u021bional. \u00cen modul \u201eoff\u201d, se verific\u0103 mai \u00eent\u00e2i cache-ul comun \u0219i, dac\u0103 nu sunt date disponibile, cererea este trimis\u0103 prin DNS-ul sistemului. Modul este setat prin setarea<\/a><\/noindex> kDnsOverHttpsMode, iar \u0219ablonul de corelare a serverelor prin kDnsOverHttpsTemplates.<\/p>\n

Experimentul de activare a DoH va fi desf\u0103\u0219urat pe toate platformele acceptate \u00een Chrome, cu excep\u021bia Linux \u0219i iOS, din cauza complexit\u0103\u021bii configur\u0103rii rezolv\u0103rii \u0219i a restric\u021biilor de acces la set\u0103rile sistemului DNS. \u00cen cazul \u00een care, dup\u0103 activarea DoH, apar probleme cu trimiterea cererilor c\u0103tre serverul DoH (de exemplu, din cauza bloc\u0103rii, pierderii conectivit\u0103\u021bii sau defec\u021biunii), browserul va reveni automat la set\u0103rile DNS ale sistemului. <\/p>\n

Scopul desf\u0103\u0219ur\u0103rii experimentului este de a verifica implementarea final\u0103 a DoH \u0219i de a studia impactul aplic\u0103rii DoH asupra performan\u021bei. Trebuie men\u021bionat c\u0103, de fapt, suportul pentru DoH a fost a fost ad\u0103ugat\u0103<\/a><\/noindex> inclus \u00een baza de cod Chrome \u00eenc\u0103 din februarie, dar pentru configurarea \u0219i activarea DoH era necesar\u0103<\/a><\/noindex> rularea Chrome cu un flag special \u0219i un set de op\u021biuni mai pu\u021bin evidente.<\/p>\n

Reamintim c\u0103 DoH poate fi util pentru a preveni scurgerile de informa\u021bii despre numele gazdelor solicitate prin serverele DNS ale furnizorilor, pentru a combate atacurile MITM \u0219i substituirea traficului DNS (de exemplu, atunci c\u00e2nd te conectezi la Wi-Fi public), pentru a contracara bloc\u0103rile la nivel DNS (DoH nu poate \u00eenlocui un VPN \u00een domeniul ocolirii blocajelor realizate la nivel DPI) sau pentru a organiza func\u021bionarea \u00een cazul \u00een care nu este posibil\u0103 conectarea direct\u0103 la serverele DNS (de exemplu, c\u00e2nd se lucreaz\u0103 prin intermediul unui proxy). Dac\u0103, \u00een condi\u021bii normale, cererile DNS sunt trimise direct la anumite servere DNS specificate \u00een configura\u021bia sistemului, \u00een cazul DoH cererea pentru determinarea adresei IP a gazdei este \u00eencapsulat\u0103 \u00een traficul HTTPS \u0219i trimis\u0103 pe un server HTTP, unde rezolvatorul proceseaz\u0103 cererile prin API-ul Web. Standardul existent DNSSEC folose\u0219te criptarea doar pentru autentificarea clientului \u0219i serverului, dar nu protejeaz\u0103 traficul de interceptare \u0219i nu garanteaz\u0103 confiden\u021bialitatea cererilor. <\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS). \u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 78, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 22 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 DoH. \u0412 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u043f\u0440\u0438\u043c\u0443\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u0439\u043a\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38121","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Experimentele cu activarea DNS-over-HTTPS vor \u00eencepe \u00een Chrome 78 | ProHoster","description":"\u00cen urma Mozilla, compania Google","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome 78 \u043d\u0430\u0447\u043d\u0443\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c DNS-over-HTTPS | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:46+00:00","article:modified_time":"2019-10-31T19:21:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38121","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:23","updated":"2026-01-23 20:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=38121"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38121\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=38121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=38121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=38121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}