{"id":38615,"date":"2019-10-31T22:24:52","date_gmt":"2019-10-31T19:24:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https\/"},"modified":"2019-10-31T22:24:52","modified_gmt":"2019-10-31T19:24:52","slug":"assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","title":{"rendered":"Asoci\u00e1cie poskytovate\u013eov v USA sa postavili proti centraliz\u00e1cii pri zav\u00e1dzan\u00ed DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Obchodn\u00e9 zdru\u017eenia NCTA<\/a><\/noindex>, CTIA<\/a><\/noindex> a USTelecom<\/a><\/noindex>, ktor\u00e9 zastupuj\u00fa z\u00e1ujmy poskytovate\u013eov internetov\u00fdch slu\u017eieb, sa obr\u00e1tili<\/a><\/noindex> na Kongres USA so \u017eiados\u0165ou o pozornos\u0165 k probl\u00e9mu zavedenia \u201eDNS cez HTTPS\u201c (DoH, DNS over HTTPS) a po\u017eiada\u0165 Google o podrobn\u00e9 inform\u00e1cie o aktu\u00e1lnych a bud\u00facich pl\u00e1noch na zapracovanie DoH do svojich produktov, ako aj o z\u00e1v\u00e4zok nezav\u00e1dza\u0165 predvolene centralizovan\u00e9 spracovanie DNS dopytov v prehliada\u010di Chrome a Android bez predch\u00e1dzaj\u00facej komplexnej diskusie s ostatn\u00fdmi z\u00e1stupcami ekosyst\u00e9mu a zoh\u013eadnenia mo\u017en\u00fdch negat\u00edvnych d\u00f4sledkov.<\/p>\n

Ch\u00e1paj\u00fac celkov\u00fd pr\u00ednos zav\u00e1dzania \u0161ifrovania pre DNS prev\u00e1dzku, zdru\u017eenia pova\u017euj\u00fa za neprijate\u013en\u00e9 s\u00fastredenie kontroly nad prevodom mien do jedn\u00fdch r\u00fak a viazanie tohto mechanizmu predvolene na centralizovan\u00e9 DNS slu\u017eby. Konkr\u00e9tne sa tvrd\u00ed, \u017ee Google smeruje k zav\u00e1dzaniu DoH ako predvolenej praxe v Android a Chrome, \u010do, ak bude viazan\u00e9 na servery Google, povedie k naru\u0161eniu decentralizovanej povahy infra\u0161trukt\u00fary DNS a vzniku jedin\u00e9ho bodu zlyhania.<\/p>\n

Ke\u010f\u017ee Chrome a Android dominuj\u00fa na trhu, v pr\u00edpade zavedenia svojich DoH serverov z\u00edska Google mo\u017enos\u0165 kontrolova\u0165 v\u00e4\u010d\u0161inu tokov DNS dotazov pou\u017e\u00edvate\u013eov. Okrem zn\u00ed\u017eenia spo\u013eahlivosti infra\u0161trukt\u00fary by tak\u00fdto krok tie\u017e poskytol Google neod\u00f4vodnen\u00e9 v\u00fdhody pred konkurenciou, preto\u017ee by z\u00edskal dodato\u010dn\u00e9 inform\u00e1cie o aktivit\u00e1ch pou\u017e\u00edvate\u013eov, ktor\u00e9 m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 na sledovanie aktivity pou\u017e\u00edvate\u013eov a prisp\u00f4sobenie relevantnej reklamy. <\/p>\n

Zavedenie DoH m\u00f4\u017ee tie\u017e naru\u0161i\u0165 fungovanie v oblastiach, ako s\u00fa syst\u00e9my kontroly rodi\u010dov, pr\u00edstup k vn\u00fatorn\u00fdm priestorom mien v korpor\u00e1tnych syst\u00e9moch, v\u00fdber tr\u00e1s v syst\u00e9moch optimaliz\u00e1cie dod\u00e1vania obsahu a v\u00fdkon s\u00fadnych pr\u00edkazov v oblasti boja proti \u0161\u00edreniu neleg\u00e1lneho obsahu a vykoris\u0165ovaniu malolet\u00fdch. Zmeny DNS sa tie\u017e \u010dasto pou\u017e\u00edvaj\u00fa na presmerovanie pou\u017e\u00edvate\u013eov na str\u00e1nku s inform\u00e1ciami o vy\u010derpan\u00ed prostriedkov u predplatite\u013ea alebo na prihl\u00e1senie do bezdr\u00f4tovej siete.<\/p>\n

Spolo\u010dnos\u0165 Google vyhl\u00e1sil<\/a><\/noindex>, \u017ee obavy s\u00fa neopodstatnen\u00e9, preto\u017ee sa nechyst\u00e1 predvolene zahrn\u00fa\u0165 DoH do Chrome a Android. Pl\u00e1novan\u00e9<\/a><\/noindex> Vo verzii Chrome 78 sa experiment\u00e1lne predvolen\u00e9 zapnutie DoH roz\u0161\u00edri iba na pou\u017e\u00edvate\u013eov, ktor\u00fdch nastavenia obsahuj\u00fa DNS poskytovate\u013eov, ktor\u00ed pon\u00fakaj\u00fa DoH ako alternat\u00edvu k tradi\u010dn\u00fdm DNS. U t\u00fdch, ktor\u00ed pou\u017e\u00edvaj\u00fa DNS servery poskytovan\u00e9 miestnym poskytovate\u013eom internetu, sa DNS dotazy bud\u00fa na\u010falej odosiela\u0165 cez syst\u00e9mov\u00fd resolver. Teda kroky spolo\u010dnosti Google sa obmedzuj\u00fa iba na v\u00fdmenu za ekvivalentn\u00fa slu\u017ebu aktu\u00e1lneho poskytovate\u013ea na prechod na zabezpe\u010den\u00fa met\u00f3du pr\u00e1ce s DNS. Experiment\u00e1lne zapnutie DoH je tie\u017e napl\u00e1novan\u00e9 v prehliada\u010di Firefox, ale na rozdiel od Google m\u00e1 spolo\u010dnos\u0165 Mozilla v \u00famysle<\/a><\/noindex> pou\u017ei\u0165<\/a><\/noindex> predvolene pou\u017e\u00edva\u0165 DNS server CloudFlare. Tento pr\u00edstup u\u017e vyvolal kritiku<\/a><\/noindex> zo strany projektu OpenBSD.<\/p>\n

Pripom\u00edname, \u017ee DoH m\u00f4\u017ee by\u0165 u\u017eito\u010dn\u00e9 na elimin\u00e1ciu \u00fanikov inform\u00e1ci\u00ed o po\u017eadovan\u00fdch men\u00e1ch hostite\u013eov cez DNS servery poskytovate\u013eov, boj proti MITM \u00fatokom a podvrhnutiu DNS prev\u00e1dzky (napr\u00edklad pri pripojen\u00ed na verejn\u00fa Wi-Fi), \u010delenie blokovaniu na \u00farovni DNS (DoH nem\u00f4\u017ee nahradi\u0165 VPN v oblasti obch\u00e1dzania blok\u00e1d, ktor\u00e9 s\u00fa realizovan\u00e9 na \u00farovni DPI) alebo na zabezpe\u010denie fungovania v pr\u00edpade nemo\u017enosti priameho pr\u00edstupu k DNS serverom (napr\u00edklad pri pr\u00e1ci cez proxy). <\/p>\n

Ak sa v norm\u00e1lnych situ\u00e1ci\u00e1ch DNS po\u017eiadavky priamo odosielaj\u00fa na konkr\u00e9tne DNS servery uveden\u00e9 v konfigur\u00e1cii syst\u00e9mu, v pr\u00edpade DoH sa po\u017eiadavka na ur\u010denie IP adresy hostite\u013ea inkapsuluje do HTTPS prev\u00e1dzky a odosiela sa na HTTP server, kde resolver spracov\u00e1va po\u017eiadavky cez Web API. Existuj\u00faci \u0161tandard DNSSEC vyu\u017e\u00edva \u0161ifrovanie iba na autentifik\u00e1ciu klienta a servera, ale neochra\u0148uje prev\u00e1dzku pred zachyten\u00edm a nezaru\u010duje d\u00f4vernos\u0165 po\u017eiadaviek. V s\u00fa\u010dasnosti pribli\u017ene 30 verejn\u00fdch DNS serverov<\/a><\/noindex> podporuje DoH.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38615","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zdru\u017eenia poskytovate\u013eov USA sa postavili proti centraliz\u00e1cii pri implement\u00e1cii DNS-over-HTTPS | ProHoster","description":"Obchodn\u00e9 zdru\u017eenia NCTA,","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA,","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:52+00:00","article:modified_time":"2019-10-31T19:24:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38615","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:45:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:06:24","updated":"2026-01-23 22:45:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/38615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=38615"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/38615\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=38615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=38615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=38615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}