{"id":38121,"date":"2019-10-31T22:21:46","date_gmt":"2019-10-31T19:21:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https\/"},"modified":"2019-10-31T22:21:46","modified_gmt":"2019-10-31T19:21:46","slug":"v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","title":{"rendered":"V Chromu 78 se bodo za\u010deli eksperimenti z vklju\u010ditvijo DNS-over-HTTPS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sledi Mozilla<\/a><\/noindex> podjetje Google je sporo\u010dil<\/a><\/noindex> o nameravanju da sprovede eksperiment za proveru implementacije «DNS preko HTTPS» (DoH, DNS over HTTPS) koja se razvija za pretra\u017eiva\u010d Chrome. U izdanju Chrome 78, koje je zakazano za 22. oktobar, neke kategorije korisnika \u0107e biti podrazumevano prevedeni<\/a><\/noindex> na uporabo DoH. V poskusu vklju\u010ditve DoH bodo sodelovali le uporabniki, pri katerih trenutne sistemske nastavitve dolo\u010dajo dolo\u010dene DNS-provajalce, priznane za zdru\u017eljive z DoH. <\/p>\n

Na bel seznam DNS-provajalcev so vklju\u010deni servisi<\/a><\/noindex> Google (8.8.8.8, 8.8.4.4), Cloudflare (1.1.1.1, 1.0.0.1), OpenDNS (208.67.222.222, 208.67.220.220), Quad9 (9.9.9.9, 149.112.112.112), Cleanbrowsing (185.228.168.168, 185.228.169.168) in DNS.SB (185.222.222.222, 185.184.222.222). \u010ce bo v uporabnikovih nastavitvah DNS naveden eden od zgoraj omenjenih DNS-stre\u017enikov, bo DoH v Chromu privzeto aktiviran. Tisti, ki uporabljajo DNS-stre\u017enike, ki jih zagotavlja lokalni internetni ponudnik, pa bodo imeli vse nespremenjeno, in za DNS poizvedbe se bo \u0161e naprej uporabljal sistemski rezolutor. <\/p>\n

Pomembna razlika v uvajanju DoH v Firefoxu, kjer se bo postopno vklju\u010devanje DoH privzeto za\u010delo<\/a><\/noindex> \u017ee konec septembra, je odsotnost vezanosti na eno samo storitev DoH. \u010ce je v Firefoxu privzeto koristi se<\/a><\/noindex> DNS-stre\u017enik CloudFlare, se bo v Chromu le nadgradil na\u010din delovanja z DNS na ekvivalentno storitev, brez menjave DNS-provajalca. Na primer, \u010de ima uporabnik v sistemskih nastavitvah naveden DNS 8.8.8.8, bo v Chromu aktiviran<\/a><\/noindex> DoH servis Google-a («https:\/\/dns.google.com\/dns-query»), ako je DNS — 1.1.1.1, onda DoH servis Cloudflare («https:\/\/cloudflare-dns.com\/dns-query») i itd.<\/a><\/noindex><\/p>\n

Ako \u017eeli, korisnik mo\u017ee uklju\u010diti ili isklju\u010diti DoH putem pode\u0161avanja «chrome:\/\/flags\/#dns-over-https». Podr\u017eana su tri re\u017eima rada «secure», «automatic» i «off». U re\u017eimu «secure» hostovi se odre\u0111uju samo na osnovu prethodno ke\u0161iranih sigurnih vrednosti (dobijenih putem sigurnog veze) i zahteva preko DoH, povratak na obi\u010dni DNS se ne primenjuje. U re\u017eimu «automatic», ako DoH i sigurni ke\u0161 nisu dostupni, dozvoljeno je dobijanje podataka iz nesigurnog ke\u0161a i upu\u0107ivanje putem tradicionalnog DNS-a. U re\u017eimu «off» prvo se proverava zajedni\u010dki ke\u0161 i ako nema podataka, zahtev se \u0161alje putem sistemskog DNS-a. Re\u017eim se postavlja preko nastavitve<\/a><\/noindex> kDnsOverHttpsMode, vzorec usklajevanja stre\u017enikov pa preko kDnsOverHttpsTemplates.<\/p>\n

Eksperiment za vklju\u010ditev DoH bo potekal na vseh podprtih platformah v Chromu, razen na sistemih Linux in iOS zaradi zahtevnosti razumevanja nastavitev resolverja in omejenega dostopa do sistemskih nastavitev DNS. V primeru, da po vklju\u010ditvi DoH pride do te\u017eav pri po\u0161iljanju zahtevkov na server DoH (na primer zaradi njegove blokade, motenj v omre\u017eni povezljivosti ali okvare), bo brskalnik samodejno vrnil sistemske nastavitve DNS. <\/p>\n

Cilj eksperimenta je kon\u010dna preveritev implementacije DoH in raziskava vpliva uporabe DoH na zmogljivost. Treba je omeniti, da je bila dejanska podpora DoH je dodana<\/a><\/noindex> dodana v kodo Chrom v februarju, toda za nastavitev in vklju\u010ditev DoH je bilo potrebno<\/a><\/noindex> zagnati Chrome s posebnim zastavico in o\u010ditnim nizom mo\u017enosti.<\/p>\n

Ponovno opomnimo, da je DoH lahko koristen za prepre\u010devanje uhajanja podatkov o zahtevanih imenih gostiteljev preko DNS stre\u017enikov ponudnikov, boj proti MITM napadom in zamenjavi DNS prometa (na primer pri povezovanju z javnim Wi-Fi), prepre\u010devanje blokad na nivoju DNS (DoH ne more nadomestiti VPN za obvoz blokad, izvedenih na nivoju DPI) ali za zagotavljanje delovanja v primeru, da neposreden dostop do DNS stre\u017enikov ni mogo\u010d (na primer pri delu prek posrednika). Medtem ko se v obi\u010dajnih razmerah DNS zahtevki neposredno po\u0161iljajo dolo\u010denim DNS stre\u017enikom v sistemski konfiguraciji, se v primeru DoH zahteva za dolo\u010ditev IP naslova gostitelja enkapsulira v HTTPS promet in po\u0161lje HTTP stre\u017eniku, na katerem resolver obdeluje zahteve preko Web API. Obstoje\u010di standard DNSSEC uporablja \u0161ifriranje le za overitev stranke in stre\u017enika, vendar ne \u0161\u010diti prometa pred prestrezanjem in ne zagotavlja zasebnosti zahtevkov. <\/p>\n

<\/a><\/noindex><\/p>\n

Izvor: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS). \u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 78, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 22 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 DoH. \u0412 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u043f\u0440\u0438\u043c\u0443\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u0439\u043a\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38121","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Eksperimenti z vklju\u010ditvijo DNS-over-HTTPS se bodo za\u010deli v Chromu 78 | ProHoster","description":"Za Mozilla je podjetje Google","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome 78 \u043d\u0430\u0447\u043d\u0443\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c DNS-over-HTTPS | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:46+00:00","article:modified_time":"2019-10-31T19:21:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38121","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:23","updated":"2026-01-23 20:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/38121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=38121"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/38121\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=38121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=38121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=38121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}