{"id":38615,"date":"2019-10-31T22:24:52","date_gmt":"2019-10-31T19:24:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https\/"},"modified":"2019-10-31T22:24:52","modified_gmt":"2019-10-31T19:24:52","slug":"assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","title":{"rendered":"Asocia\u021biile furnizorilor din SUA s-au opus centraliz\u0103rii \u00een implementarea DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Asocia\u021bii comerciale NCTA<\/a><\/noindex>, CTIA<\/a><\/noindex> \u0219i USTelecom<\/a><\/noindex>, care ap\u0103r\u0103 interesele furnizorilor de internet, s-au adresat<\/a><\/noindex> la Congresul SUA cu o solicitare de a atrage aten\u021bia asupra problemei implement\u0103rii \u201eDNS peste HTTPS\u201d (DoH, DNS over HTTPS) \u0219i de a solicita de la Google informa\u021bii detaliate despre planurile actuale \u0219i viitoare de \u00eencorporare a DoH \u00een produsele sale, precum \u0219i angajamentul de a nu activa \u00een mod implicit procesarea centralizat\u0103 a cererilor DNS \u00een Chrome \u0219i Android f\u0103r\u0103 o discu\u021bie prealabil\u0103 cu ceilal\u021bi reprezentan\u021bi ai ecosistemului \u0219i luarea \u00een considerare a posibilelor efecte negative.<\/p>\n

\u00cen\u021beleg\u00e2nd beneficiile generale ale utiliz\u0103rii cript\u0103rii pentru traficul DNS, asocia\u021biile consider\u0103 inacceptabil\u0103 concentrare controlului asupra conversiei numelui \u00een m\u00e2ini unice \u0219i legarea acestui mecanism \u00een mod implicit de serviciile DNS centralizate. \u00cen particular, se afirm\u0103 c\u0103 Google se \u00eendreapt\u0103 spre implementarea DoH \u00een mod implicit \u00een Android \u0219i Chrome, ceea ce, \u00een cazul leg\u0103rii la serverele Google, ar duce la \u00eenc\u0103lcarea caracterului descentralizat al infrastructurii DNS \u0219i la apari\u021bia unei singure punct de e\u0219ec.<\/p>\n

Av\u00e2nd \u00een vedere c\u0103 Chrome \u0219i Android domin\u0103 pia\u021ba, \u00een cazul impunerii serverelor DoH de c\u0103tre Google, compania va ob\u021bine controlul asupra unei p\u0103r\u021bi semnificative din fluxurile de cereri DNS ale utilizatorilor. Pe l\u00e2ng\u0103 sc\u0103derea fiabilit\u0103\u021bii infrastructurii, o astfel de m\u0103sur\u0103 va oferi Google avantaje nejustificate fa\u021b\u0103 de concuren\u021b\u0103, deoarece compania va ob\u021bine informa\u021bii suplimentare despre ac\u021biunile utilizatorilor, care pot fi folosite pentru urm\u0103rirea activit\u0103\u021bii utilizatorilor \u0219i pentru livrarea de publicitate relevant\u0103. <\/p>\n

Implementarea DoH ar putea, de asemenea, s\u0103 perturbe func\u021bionarea \u00een domenii precum sistemele de control parental, accesul la spa\u021biile interne de nume \u00een sistemele corporative, alegerea rutelor \u00een sistemele de optimizare a livr\u0103rii de con\u021binut \u0219i \u00eendeplinirea mandatelor judiciare \u00een domeniul combaterii r\u0103sp\u00e2ndirii de con\u021binut ilegal \u0219i exploatarea minorilor. Falsificarea DNS este, de asemenea, adesea utilizat\u0103 pentru a redirec\u021biona utilizatorii c\u0103tre o pagin\u0103 cu informa\u021bii privind epuizarea fondurilor abona\u021bilor sau pentru a se conecta la o re\u021bea wireless.<\/p>\n

Compania Google a afirmat<\/a><\/noindex>, astfel \u00eenc\u00e2t temerile sunt f\u0103r\u0103 temei, deoarece aceasta nu are de g\u00e2nd s\u0103 includ\u0103 \u00een mod implicit DoH \u00een Chrome \u0219i Android. Se preconizeaz\u0103<\/a><\/noindex> \u00cen Chrome 78, activarea experimental\u0103 a DoH va acoperi doar utilizatorii ale c\u0103ror set\u0103ri indic\u0103 furnizori DNS care ofer\u0103 posibilitatea utiliz\u0103rii DoH ca alternativ\u0103 la DNS tradi\u021bional. Cei care folosesc servere DNS furnizate de furnizorul local de internet vor continua s\u0103 trimit\u0103 solicit\u0103ri DNS prin rezolvatorul sistemului. A\u0219adar, ac\u021biunile Google se limiteaz\u0103 la \u00eenlocuirea acestui serviciu cu un serviciu echivalent de la furnizorul actual pentru a trece la o metod\u0103 de lucru cu DNS mai sigur\u0103. Activarea experimental\u0103 a DoH este de asemenea planificat\u0103 \u00een Firefox, dar spre deosebire de Google, compania Mozilla inten\u021bioneaz\u0103<\/a><\/noindex> folosi<\/a><\/noindex> DNS-ul CloudFlare \u00een mod implicit. Aceast\u0103 abordare a st\u00e2rnit deja critici<\/a><\/noindex> din partea proiectului OpenBSD.<\/p>\n

S\u0103 ne amintim c\u0103 DoH ar putea fi util pentru a preveni scurgerile de informa\u021bii despre numele gazdelor solicitate prin serverele DNS ale furnizorilor, pentru a combate atacurile MITM \u0219i manipularea traficului DNS (de exemplu, atunci c\u00e2nd te conectezi la Wi-Fi public), pentru a face fa\u021b\u0103 blocajelor la nivelul DNS (DoH nu poate \u00eenlocui VPN-ul \u00een ceea ce prive\u0219te ocolirea blocajelor implementate la nivel DPI) sau pentru a organiza func\u021bionarea \u00een cazul imposibilit\u0103\u021bii de a accesa direct serverele DNS (de exemplu, atunci c\u00e2nd se lucreaz\u0103 printr-un proxy). <\/p>\n

Dac\u0103 \u00een condi\u021bii normale solicit\u0103rile DNS sunt trimise direct la serverele DNS specificate \u00een configura\u021bia sistemului, \u00een cazul DoH, solicitarea de determinare a adresei IP a gazdei este \u00eencapsulat\u0103 \u00een trafic HTTPS \u0219i trimis\u0103 la un server HTTP, unde rezolvatorul proceseaz\u0103 solicit\u0103rile prin API Web. Standardul existent DNSSEC folose\u0219te criptarea doar pentru autentificarea clientului \u0219i a serverului, dar nu protejeaz\u0103 traficul de interceptare \u0219i nu garanteaz\u0103 confiden\u021bialitatea solicit\u0103rilor. \u00cen prezent, aproximativ 30 de servere DNS publice<\/a><\/noindex> suport\u0103 DoH.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38615","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Asocia\u021biile providerilor din SUA s-au opus centraliz\u0103rii \u00een implementarea DNS-over-HTTPS | ProHoster","description":"Asocia\u021biile comerciale NCTA,","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA,","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:52+00:00","article:modified_time":"2019-10-31T19:24:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38615","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:45:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:06:24","updated":"2026-01-23 22:45:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=38615"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/38615\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=38615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=38615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=38615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}