{"id":94799,"date":"2020-09-22T01:41:57","date_gmt":"2020-09-21T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta"},"modified":"2020-09-22T01:41:57","modified_gmt":"2020-09-21T23:41:57","slug":"v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","title":{"rendered":"\u00cen RF se inten\u021bioneaz\u0103 interzicerea protocoalelor care permit ascunderea numelui site-ului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A \u00eenceput discu\u021bie public\u0103<\/a><\/noindex> proiectul de act normativ pentru modificarea Legii Federale \u201eCu privire la informa\u021bie, tehnologiile informa\u021biei \u0219i protec\u021bia informa\u021biei\u201d, elaborat de Ministerul Dezvolt\u0103rii Digitale, Comunica\u021biilor \u0219i Mass-Mediei. \u00cen lege se propune introducerea unei interdic\u021bii privind utilizarea pe teritoriul Federa\u021biei Ruse a \u201eprotocolilor de criptare ce permit ascunderea numelui (identificatorului) paginii web sau site-ului \u00een re\u021beaua Internet, cu excep\u021bia cazurilor stabilite prin legisla\u021bia Federa\u021biei Ruse\u201d. <\/p>\n

Pentru \u00eenc\u0103lcarea interdic\u021biei privind utilizarea protocoalelor de criptare care permit ascunderea numelui site-ului, se propune suspendarea func\u021bion\u0103rii resursei de Internet \u00een termen de cel mult 1 (o) zi lucr\u0103toare de la descoperirea acestei \u00eenc\u0103lc\u0103ri de c\u0103tre autoritatea federal\u0103 competent\u0103. Scopul principal al bloc\u0103rii este extensia TLS ECH<\/a><\/noindex> (cunoscut\u0103 anterior ca ESNI), care poate fi utilizat\u0103 \u00eempreun\u0103 cu TLS 1.3 \u0219i deja blocat\u0103<\/a><\/noindex> \u00een China. Deoarece formul\u0103rile din proiectul de lege sunt vagi \u0219i lipsesc detalii, \u00een afar\u0103 de ECH\/ESNI, formal, pot fi blocate practic orice protocoale care asigur\u0103 criptarea complet\u0103 a canalului de comunicare, precum \u0219i protocoale DNS peste HTTPS<\/a><\/noindex> (DoH) \u0219i DNS peste TLS<\/a><\/noindex> (DoT).<\/p>\n

S\u0103 reamintim c\u0103, pentru a organiza func\u021bionarea mai multor site-uri HTTPS pe aceea\u0219i adres\u0103 IP, a fost dezvoltat anterior extensia SNI, care transmite numele gazdei \u00een mod deschis \u00een mesajul ClientHello, trimis \u00eenainte de stabilirea canalului de comunicare criptat. Aceast\u0103 caracteristic\u0103 permite furnizorului de internet s\u0103 filtreze selectiv traficul HTTPS \u0219i s\u0103 analizeze ce site-uri deschide utilizatorul, ceea ce nu permite ob\u021binerea confiden\u021bialit\u0103\u021bii complete \u00een utilizarea HTTPS. <\/p>\n

ECH\/ESNI elimin\u0103 complet scurgerea de informa\u021bii despre site-ul solicitat \u00een analiza conexiunilor HTTPS. \u00cen combina\u021bie cu accesul prin re\u021beaua de livrare a con\u021binutului, utilizarea ECH\/ESNI ofer\u0103, de asemenea, posibilitatea de a ascunde de furnizor \u0219i adresa IP a resursei solicitate \u2014 sistemele de inspec\u021bie a traficului v\u0103d doar acces\u0103rile la CDN \u0219i nu pot aplica blocarea f\u0103r\u0103 \u00eenlocuirea sesiunii TLS, \u00een cazul c\u0103reia utilizatorul browserului va vedea un mesaj corespunz\u0103tor despre \u00eenlocuirea certificatului. \u00cen cazul \u00een care se va introduce o interdic\u021bie ECH\/ESNI pentru a contracara aceast\u0103 posibilitate, doar o restric\u021bie total\u0103 a accesului la re\u021belele de livrare a con\u021binutului (CDN) care suport\u0103 ECH\/ESNI poate ajuta, altfel blocarea va fi ineficient\u0103 \u0219i va putea fi u\u0219or ocolit\u0103 prin intermediul CDN.<\/p>\n

Atunci c\u00e2nd se folose\u0219te ECH\/ESNI, numele gazdei, la fel ca \u00een SNI, este transmis \u00een mesajul ClientHello, dar con\u021binutul datelor transmise \u00een acest mesaj este criptat. Pentru criptare se utilizeaz\u0103 un secret calculat pe baza cheilor serverului \u0219i clientului. Pentru a decripta valoarea c\u00e2mpului ECH\/ESNI interceptat sau primit, este necesar s\u0103 se cunoasc\u0103 cheia privat\u0103 a clientului sau serverului (plus cheile publice ale serverului sau clientului). Informa\u021biile despre cheile publice sunt transmise pentru cheia serverului prin DNS, iar pentru cheia clientului \u00een mesajul ClientHello. Decriptarea este posibil\u0103 \u0219i prin utilizarea secretului comun convenit \u00een timpul stabilirii conexiunii TLS, cunoscut doar de client \u0219i server. <\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u0440\u0430\u0432\u043e\u0432\u043e\u0433\u043e \u0430\u043a\u0442\u0430 \u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043a\u043e\u043d «\u041e\u0431 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u0445 \u0438 \u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438», \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f, \u0441\u0432\u044f\u0437\u0438 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439. \u0412 \u0437\u0430\u043a\u043e\u043d \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0432\u0432\u0435\u0441\u0442\u0438 \u0437\u0430\u043f\u0440\u0435\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 «\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043c\u044f (\u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440) ‎\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0438\u043b\u0438 \u0441\u0430\u0439\u0442\u0430 \u0432 \u0441\u0435\u0442\u0438 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-94799","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen RF se inten\u021bioneaz\u0103 interzicerea protocoalelor care permit ascunderea numelui site-ului | ProHoster","description":"A \u00eenceput discu\u021bia public\u0103 asupra proiectului de act legislativ pentru modificarea Legii Federale \"Despre informa\u021bie.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0420\u0424 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0437\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043c\u044f \u0441\u0430\u0439\u0442\u0430 | ProHoster","og:description":"\u041d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u0440\u0430\u0432\u043e\u0432\u043e\u0433\u043e \u0430\u043a\u0442\u0430 \u043e \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043a\u043e\u043d "\u041e\u0431 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-rf-namereny-zapretit-protokoly-pozvolyayushhie-skryt-imya-sajta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-21T23:41:57+00:00","article:modified_time":"2020-09-21T23:41:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94799","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:17:29","updated":"2022-10-03 07:45:53","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94799","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=94799"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94799\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=94799"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=94799"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=94799"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}