{"id":38121,"date":"2019-10-31T22:21:46","date_gmt":"2019-10-31T19:21:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https\/"},"modified":"2019-10-31T22:21:46","modified_gmt":"2019-10-31T19:21:46","slug":"v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","title":{"rendered":"V Chrome 78 sa za\u010dn\u00fa experimenty s povolen\u00edm DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nasleduje Mozilla<\/a><\/noindex> spolo\u010dnos\u0165 Google ozn\u00e1mila<\/a><\/noindex> o z\u00e1mere uskuto\u010dni\u0165 experiment na overenie implement\u00e1cie «DNS cez HTTPS» (DoH, DNS over HTTPS) vyv\u00edjanej pre prehliada\u010d Chrome. V vydan\u00ed Chrome 78, napl\u00e1novanom na 22. okt\u00f3bra, niektor\u00e9 kateg\u00f3rie pou\u017e\u00edvate\u013eov bud\u00fa ma\u0165 t\u00fato funkciu predvolene preveden\u00e9<\/a><\/noindex> povolen\u00e9. V experimente zapojenia DoH sa z\u00fa\u010dastnia len pou\u017e\u00edvatelia, ktor\u00fdch aktu\u00e1lne syst\u00e9mov\u00e9 nastavenia ur\u010dili konkr\u00e9tnych poskytovate\u013eov DNS, uznan\u00fdch za kompatibiln\u00fdch s DoH. <\/p>\n

Na zoznam schv\u00e1len\u00fdch DNS poskytovate\u013eov boli zahrnut\u00e9 slu\u017eby<\/a><\/noindex> Google (8.8.8.8, 8.8.4.4), Cloudflare (1.1.1.1, 1.0.0.1), OpenDNS (208.67.222.222, 208.67.220.220), Quad9 (9.9.9.9, 149.112.112.112), Cleanbrowsing (185.228.168.168, 185.228.169.168) a DNS.SB (185.222.222.222, 185.184.222.222). Ak m\u00e1 pou\u017e\u00edvate\u013e v nastaveniach DNS uveden\u00fd jeden z vy\u0161\u0161ie uveden\u00fdch DNS serverov, DoH v Chrome bude akt\u00edvny predvolene. Pre t\u00fdch, ktor\u00ed pou\u017e\u00edvaj\u00fa DNS servery poskytovan\u00e9 miestnym poskytovate\u013eom internetov\u00fdch slu\u017eieb, zostane v\u0161etko bez zmien a na requesty DNS sa na\u010falej pou\u017eije syst\u00e9mov\u00fd resolver. <\/p>\n

Podstatn\u00fdm rozdielom oproti implement\u00e1cii DoH vo Firefoxe, kde sa postupn\u00e9 zap\u00ednanie DoH predvolene za\u010dne<\/a><\/noindex> u\u017e na konci septembra, je absencia viazanosti na jedin\u00fa slu\u017ebu DoH. Ak vo Firefoxe je predvolen\u00fd sa pou\u017e\u00edva<\/a><\/noindex> DNS server Cloudflare, tak v Chrome sa len aktualizuje met\u00f3da pr\u00e1ce s DNS na ekvivalentn\u00fa slu\u017ebu, bez zmeny poskytovate\u013ea DNS. Napr\u00edklad, ak m\u00e1 pou\u017e\u00edvate\u013e v syst\u00e9mov\u00fdch nastaveniach nastaven\u00fd DNS 8.8.8.8, v Chrome bude aktivovan\u00fd<\/a><\/noindex> DoH slu\u017eba Google («https:\/\/dns.google.com\/dns-query»), ak je DNS — 1.1.1.1, tak DoH slu\u017eba Cloudflare («https:\/\/cloudflare-dns.com\/dns-query») a podobne.<\/a><\/noindex><\/p>\n

Pokia\u013e pou\u017e\u00edvate\u013e chce, m\u00f4\u017ee zapn\u00fa\u0165 alebo vypn\u00fa\u0165 DoH prostredn\u00edctvom nastavenia «chrome:\/\/flags\/#dns-over-https». Podporuj\u00fa sa tri re\u017eimy prev\u00e1dzky «secure», «automatic» a «off». V re\u017eime «secure» sa hostitelia ur\u010duj\u00fa iba na z\u00e1klade predt\u00fdm vyrovnan\u00fdch bezpe\u010dn\u00fdch hodn\u00f4t (z\u00edskan\u00fdch cez zabezpe\u010den\u00e9 spojenie) a po\u017eiadaviek cez DoH, vr\u00e1tenie na be\u017en\u00fd DNS sa neaplikuje. V re\u017eime «automatic» ak DoH a zabezpe\u010den\u00e1 vyrovn\u00e1vacia pam\u00e4\u0165 nie s\u00fa k dispoz\u00edcii, je povolen\u00e9 z\u00edskavanie \u00fadajov z nezabezpe\u010denej vyrovn\u00e1vacej pam\u00e4te a pr\u00edstup cez tradi\u010dn\u00fd DNS. V re\u017eime «off» sa najprv kontroluje spolo\u010dn\u00e1 vyrovn\u00e1vacia pam\u00e4\u0165 a ak nie s\u00fa \u00fadaje, po\u017eiadavka sa odosiela cez syst\u00e9mov\u00fd DNS. Re\u017eim sa nastavuje cez nastavenie<\/a><\/noindex> kDnsOverHttpsMode, a \u0161abl\u00f3na pre p\u00e1rovanie serverov cez kDnsOverHttpsTemplates.<\/p>\n

Experiment with enabling DoH will be conducted on all platforms supported by Chrome, except for Linux and iOS due to the complexity of parsing the resolver settings and limited access to system DNS settings. If failures occur in sending requests to the DoH server after enabling DoH (for example, due to its blocking, network connectivity issues, or failure), the browser will automatically revert to system DNS settings. <\/p>\n

The goal of conducting the experiment is the final verification of the DoH implementation and studying the impact of applying DoH on performance. It is worth noting that support for DoH was actually bola pridan\u00e1<\/a><\/noindex> added to the Chrome codebase back in February, but to configure and enable DoH it was required<\/a><\/noindex> to launch Chrome with a special flag and a non-obvious set of options.<\/p>\n

Let us remind you that DoH can be useful for preventing leaks of information about requested hostnames through provider DNS servers, combating MITM attacks and DNS traffic spoofing (for example, when connecting to public Wi-Fi), resisting DNS-level blocking (DoH cannot replace VPN in bypassing blocks implemented at the DPI level) or for organizing work in case of inability to directly access DNS servers (for example, when working through a proxy). In a typical situation, DNS queries are sent directly to specific DNS servers configured in the system, while in the case of DoH, the request to resolve the hostname's IP address is encapsulated in HTTPS traffic and sent to an HTTP server, where the resolver processes requests via Web API. The existing DNSSEC standard uses encryption only for authenticating the client and server but does not protect traffic from interception and does not guarantee the confidentiality of requests. <\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS). \u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 78, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 22 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 DoH. \u0412 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u043f\u0440\u0438\u043c\u0443\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u0439\u043a\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38121","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Experiments with enabling DNS-over-HTTPS will begin in Chrome 78 | ProHoster","description":"Following Mozilla, Google has","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome 78 \u043d\u0430\u0447\u043d\u0443\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c DNS-over-HTTPS | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:46+00:00","article:modified_time":"2019-10-31T19:21:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38121","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:23","updated":"2026-01-23 20:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/38121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=38121"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/38121\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=38121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=38121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=38121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}