{"id":36652,"date":"2019-10-31T22:12:57","date_gmt":"2019-10-31T19:12:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lyubit-i-ne-lyubit-dns-over-https\/"},"modified":"2019-10-31T22:12:57","modified_gmt":"2019-10-31T19:12:57","slug":"lyubit-i-ne-lyubit-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/lyubit-i-ne-lyubit-dns-over-https","title":{"rendered":"\u00abDashuron dhe nuk dashuron\u00bb: DNS mbi HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pohoqi mendimet mbi karakteristikat e funksionimit t\u00eb DNS over HTTPS, q\u00eb s\u00eb fundmi jan\u00eb kthyer n\u00eb nj\u00eb \"moll\u00eb sherri\" midis ofruesve t\u00eb internetit dhe zhvilluesve t\u00eb shfletuesve.<\/p>\n

\"\u00abDashuron<\/a><\/noindex><\/a><\/noindex>
\n\/ Unsplash \/ Steve Halama<\/a><\/noindex><\/i><\/p>\n

Thelbi i mosmarr\u00ebveshjeve<\/h2>\n

\nS\u00eb fundmi media t\u00eb m\u00ebdha<\/a><\/noindex> dhe platformat tematike<\/a><\/noindex> (p\u00ebrfshir\u00eb Habr), shpesh shkruajn\u00eb p\u00ebr protokollin DNS over HTTPS (DoH). Ai enkripton k\u00ebrkesat ndaj serverit DNS dhe p\u00ebrgjigjet mbi to. Ky qasje lejon fshehjen e emrave t\u00eb hosteve q\u00eb p\u00ebrdoruesi i drejtohet. Nga publikimet mund t\u00eb p\u00ebrfundohet se protokolli i ri (n\u00eb IETF u miratua<\/a><\/noindex> n\u00eb vitin 2018) e ndau komunitetin IT n\u00eb dy grupe.<\/p>\n

Pjesa tjet\u00ebr beson se protokolli i ri do t\u00eb rrit\u00eb sigurin\u00eb e internetit dhe po e implementing n\u00eb aplikacionet dhe sh\u00ebrbimet e tyre. Grupi tjet\u00ebr \u00ebsht\u00eb i bindur se teknologjia thjesht e komplikon pun\u00ebn e administrator\u00ebve t\u00eb sistemeve. M\u00eb tej, do t\u00eb shqyrtojm\u00eb argumentet e t\u00eb dyja pal\u00ebve. <\/p>\n

Si funksionon DoH<\/h2>\n

\nPara se t\u00eb kalojm\u00eb n\u00eb bised\u00ebn mbi arsyet se pse ofruesit e internetit dhe pjes\u00ebtar\u00eb t\u00eb tjer\u00eb t\u00eb tregut jan\u00eb pro ose kund\u00ebr DNS over HTTPS, le t\u00eb shqyrtojm\u00eb shkurt principat e funksionimit t\u00eb tij.<\/p>\n

N\u00eb rastin e DoH, k\u00ebrkesa p\u00ebr caktimin e IP adres\u00ebs inkapsulohet n\u00eb trafikun HTTPS. M\u00eb pas ajo shkon n\u00eb serverin HTTP, ku p\u00ebrpunohen p\u00ebrmes API. K\u00ebtu \u00ebsht\u00eb nj\u00eb shembull k\u00ebrkese nga RFC 8484 (fq.6<\/a><\/noindex>):<\/p>\n

   :metoda = GET\n   :schema = https\n   :autoriteti = dnsserver.example.net\n   :rruga = \\\/dns-query?\\n           dns=AAABAAABAAAAAAAAAWE-NjJjaGFyYWN0ZXJsYWJl\\n           bC1tYWtlcy1iYXNlNjR1cmwtZGlzdGluY3QtZnJvbS1z\\n           dGFuZGFyZC1iYXNlNjQHZXhhbXBsZQNjb20AAAEAAQ\\n   prano = application\\\/dns-message\n<\/code><\/pre>\n
\nN\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, trafiku DNS e fsheh n\u00eb trafikun HTTPS. Klienti dhe serveri komunikojn\u00eb p\u00ebrmes portit standard 443. Si rezultat, k\u00ebrkesat p\u00ebr sistemin e emrave t\u00eb domen\u00ebve mbeten anonime.<\/p>\n
Pse nuk e duan<\/h2>\n
\nKund\u00ebrshtar\u00ebt e DNS mbi HTTPS ekspert\u00ebt<\/a><\/noindex>, q\u00eb protokolli i ri do t\u00eb zvog\u00ebloj\u00eb sigurin\u00eb e lidhjeve. Sipas autoreve, sistemi do t\u00eb zvog\u00ebloj\u00eb shpenzimet p\u00ebr energjin\u00eb me dyfish.<\/a><\/noindex> Paul Vixie, nj\u00eb an\u00ebtar i ekipit t\u00eb zhvilluesve t\u00eb DNS, administrator\u00ebt do t\u00eb ken\u00eb m\u00eb t\u00eb v\u00ebshtir\u00eb t\u00eb bllokojn\u00eb sites potencialisht t\u00eb d\u00ebmshme. P\u00ebrdoruesit e zakonsh\u00ebm do t\u00eb humbin mund\u00ebsin\u00eb p\u00ebr t\u00eb konfiguruar nj\u00eb kontroll prind\u00ebror n\u00eb shfletuesit.<\/p>\n
Mendimi i Paulit ndahet edhe nga ofruesit e internetit n\u00eb Britanin\u00eb e Madhe. Legjislacioni i vendit detyron<\/a><\/noindex> t\u00eb bllokojn\u00eb burimet me p\u00ebrmbajtje t\u00eb ndaluar. Por mb\u00ebshtetja p\u00ebr DoH n\u00eb shfletues komplikon detyr\u00ebn e filtrimit t\u00eb trafikut. Mes kritik\u00ebve t\u00eb protokollit t\u00eb ri jan\u00eb edhe Qendra e Komunikimeve Qeveritare t\u00eb Anglis\u00eb (GCHQ<\/a><\/noindex>) dhe fondi Internet Watch Foundation (IWF<\/a><\/noindex>), i cili mban nj\u00eb regjist\u00ebr t\u00eb burimeve t\u00eb bllokuara.<\/p>\n
N\u00eb blogun ton\u00eb n\u00eb Habr:<\/b><\/p>\n