{"id":71411,"date":"2020-02-26T03:10:13","date_gmt":"2020-02-26T00:10:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha"},"modified":"2020-03-03T16:10:46","modified_gmt":"2020-03-03T13:10:46","slug":"dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha","title":{"rendered":"DNS-over-HTTPS \u00ebsht\u00eb e aktivizuar si parazgjedhje n\u00eb Firefox p\u00ebr p\u00ebrdoruesit nga SHBA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zhvilluesit e Firefox konfirmuan<\/a><\/noindex> p\u00ebr aktivizimin e parazgjedhur t\u00eb protokollit DNS mbi HTTPS (DoH, DNS over HTTPS) p\u00ebr p\u00ebrdoruesit n\u00eb SHBA. Enkriptimi i trafikut DNS konsiderohet nj\u00eb faktor thelb\u00ebsor p\u00ebr mbrojtjen e p\u00ebrdoruesve. Duke filluar nga sot, n\u00eb t\u00eb gjitha instalimet e reja t\u00eb b\u00ebr\u00eb nga p\u00ebrdoruesit n\u00eb SHBA, DoH \u00ebsht\u00eb aktivizuar si parazgjedhje. P\u00ebrdoruesit aktual\u00eb n\u00eb SHBA do t\u00eb kalohen n\u00eb DoH brenda disa jav\u00ebve. N\u00eb Bashkimin Evropian dhe n\u00eb vendet e tjera, aktivizimi i DoH si parazgjedhje nuk \u00ebsht\u00eb planifikuar akoma. nuk planifikojn\u00eb<\/a><\/noindex>.<\/p>\n

Pas aktivizimit t\u00eb DoH, p\u00ebrdoruesit i paraqitet nj\u00eb paralajm\u00ebrim, i cili lejon n\u00ebse d\u00ebshiron t\u00eb heq\u00eb dor\u00eb nga p\u00ebrdorimi i server\u00ebve t\u00eb p\u00ebrqendruar DoH DNS dhe t\u00eb kthehet n\u00eb skem\u00ebn tradicionale t\u00eb d\u00ebrgimit t\u00eb k\u00ebrkesave t\u00eb paenkriptuara n\u00eb serverin DNS t\u00eb ofruesit. N\u00eb vend t\u00eb infrastruktur\u00ebs s\u00eb shp\u00ebrndar\u00eb t\u00eb rezolver\u00ebve DNS, DoH p\u00ebrdor lidhjen me nj\u00eb sh\u00ebrbim t\u00eb caktuar DoH, i cili mund t\u00eb konsiderohet si nj\u00eb pik\u00eb e vetme d\u00ebshtimi. N\u00eb k\u00ebt\u00eb moment, punon p\u00ebrmes dy ofruesve DNS \u2013 CloudFlare (n\u00eb parazgjedhje) dhe NextDNS<\/a><\/noindex>. <\/p>\n

\"DNS-over-HTTPS<\/a><\/noindex><\/center><\/p>\n

Ndrysho ofruesin ose \u00e7aktivizo DoH mund t\u00eb<\/a><\/noindex> n\u00eb cil\u00ebsimet e lidhjes rrjet. P\u00ebr shembull, mund t\u00eb tregoni nj\u00eb server alternativ DoH \"https:\/\/dns.google\/dns-query\" p\u00ebr t\u00eb b\u00ebr\u00eb k\u00ebrkesa n\u00eb server\u00ebt e Google, \"https:\/\/dns.quad9.net\/dns-query\" \u2013 Quad9 dhe \"https:\/\/doh.opendns.com\/dns-query\" \u2013 OpenDNS. N\u00eb about:config gjithashtu \u00ebsht\u00eb parashikuar nj\u00eb cil\u00ebsim network.trr.mode, p\u00ebrmes t\u00eb cilit mund t\u00eb ndryshoni m\u00ebnyr\u00ebn e funksionimit t\u00eb DoH: vlera 0 \u00e7on plot\u00ebsisht n\u00eb ndalimin e DoH; 1 \u2013 p\u00ebrdor DNS ose DoH, n\u00eb var\u00ebsi t\u00eb asaj q\u00eb \u00ebsht\u00eb m\u00eb e shpejt\u00eb; 2 \u2013 p\u00ebrdor DoH n\u00eb parazgjedhje, nd\u00ebrsa DNS si opsion rezerv\u00eb; 3 \u2013 p\u00ebrdor vet\u00ebm DoH; 4 \u2013 modaliteti i pasqyrimit ku DoH dhe DNS aktivizohen paralelisht. <\/p>\n

Kujtojm\u00eb se DoH mund t\u00eb jet\u00eb e dobishme p\u00ebr t\u00eb shmangur rrjedhjet e informacionit rreth emrave t\u00eb hosteve t\u00eb k\u00ebrkuara p\u00ebrmes serverave DNS t\u00eb ofruesve, p\u00ebr t\u00eb luftuar sulmet MITM dhe manipulimin e trafikut DNS (p\u00ebr shembull, kur lidheni me Wi-Fi publik), p\u00ebr t\u00eb parandaluar bllokimet n\u00eb nivelin DNS (DoH nuk mund t\u00eb z\u00ebvend\u00ebsoj\u00eb VPN n\u00eb fush\u00ebn e anashkalimit t\u00eb bllokimeve t\u00eb zbatuara n\u00eb nivelin DPI) ose p\u00ebr t\u00eb organizuar pun\u00ebn n\u00eb rast t\u00eb pamund\u00ebsis\u00eb p\u00ebr t\u00eb lidhur drejtp\u00ebrdrejt me serverat DNS (p\u00ebr shembull, kur punoni p\u00ebrmes nj\u00eb proksi). N\u00eb situata normale, k\u00ebrkesat DNS d\u00ebrgohen drejtp\u00ebrdrejt n\u00eb serverat DNS t\u00eb caktuar n\u00eb konfigurimin e sistemit, nd\u00ebrsa n\u00eb rastin e DoH, k\u00ebrkesa p\u00ebr p\u00ebrcaktimin e adres\u00ebs IP t\u00eb hostit inkapsulohet n\u00eb trafikun HTTPS dhe d\u00ebrgohet n\u00eb nj\u00eb server HTTP, ku rezolvuesi i p\u00ebrpunon k\u00ebrkesat p\u00ebrmes Web API. Standardi ekzistues DNSSEC p\u00ebrdor enkriptimin vet\u00ebm p\u00ebr autentikimin e klientit dhe serverit, por nuk mbron trafikun nga kapja dhe nuk garanton konfidencialitetin e k\u00ebrkesave. <\/p>\n

P\u00ebr p\u00ebrzgjedhjen e ofruesve t\u00eb DoH t\u00eb propozuar n\u00eb Firefox jan\u00eb formulime k\u00ebrkesat<\/a><\/noindex> p\u00ebr rezolvuesit e besuesh\u00ebm t\u00eb DNS, sipas t\u00eb cilave operatori i DNS mund t\u00eb p\u00ebrdor\u00eb t\u00eb dh\u00ebnat e marra p\u00ebr rezolvimin vet\u00ebm p\u00ebr t\u00eb siguruar funksionimin e sh\u00ebrbimit, nuk duhet t\u00eb ruaj\u00eb regjistrat m\u00eb gjat\u00eb se 24 or\u00eb, nuk mund t\u00eb transmetoj\u00eb t\u00eb dh\u00ebna tret\u00ebsve dhe \u00ebsht\u00eb i detyruar t\u00eb zbuloj\u00eb informacionin mbi metodat e p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave. Sh\u00ebrbimi gjithashtu duhet t\u00eb jap\u00eb angazhime p\u00ebr t\u00eb mos censuruar, mos filtruar, mos nd\u00ebrhyr\u00eb dhe mos bllokuar trafikun DNS, p\u00ebrve\u00e7 situatave t\u00eb parashikuara nga legjislacioni. <\/p>\n

P\u00ebrdorimi i DoH duhet t\u00eb b\u00ebhet me kujdes. P\u00ebr shembull, n\u00eb RF, adresat IP 104.16.248.249 dhe 104.16.249.249, t\u00eb lidhura me serverin DoH mozilla.cloudflare-dns.com, jan\u00eb regjistruar<\/a><\/noindex> n\u00eb listat<\/a><\/noindex> bllokime<\/a><\/noindex> e Roskomnadzor<\/a><\/noindex> me k\u00ebrkes\u00eb t\u00eb gjykat\u00ebs s\u00eb qytetit Stavropol m\u00eb 10.06.2013.<\/p>\n

P\u00ebrdorimi i DoH gjithashtu mund t\u00eb sjell\u00eb probleme n\u00eb fusha t\u00eb tilla si sistemet e kontrollit t\u00eb prind\u00ebrve, aksesin n\u00eb hap\u00ebsira em\u00ebrore t\u00eb brendshme n\u00eb sistemet korporative, zgjedhjen e rrug\u00ebve n\u00eb sistemet e optimizimit t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes dhe zbatimin e urdh\u00ebrave t\u00eb gjykat\u00ebs n\u00eb fush\u00ebn e parandalimit t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes t\u00eb paligjshme dhe shfryt\u00ebzimit t\u00eb t\u00eb miturve. P\u00ebr t\u00eb anashkaluar k\u00ebto probleme \u00ebsht\u00eb zbatuar dhe testuar nj\u00eb sistem kontrolli q\u00eb \u00e7aktivizon automatikisht DoH n\u00eb kushte t\u00eb caktuara. <\/p>\n

P\u00ebr t\u00eb identifikuar rezolvuesit korporativ\u00eb, kryhen kontrolle t\u00eb domain-eve t\u00eb zakonshme t\u00eb nivelit t\u00eb par\u00eb (TLD) dhe kthimi i adresave intranet nga rezolvuesi sistemor. P\u00ebr t\u00eb identifikuar aktivizimin e kontrollit parental b\u00ebhet p\u00ebrpjekja p\u00ebr rezolvimin e emrit exampleadultsite.com dhe n\u00ebse rezultati nuk korrespondon me adres\u00ebn IP reale, at\u00ebher\u00eb konsiderohet se ka aktivizuar bllokimin e p\u00ebrmbajtjes p\u00ebr t\u00eb rritur n\u00eb nivelin DNS. Si shenja kontrollohen gjithashtu adresat IP t\u00eb Google dhe YouTube p\u00ebr ndonj\u00eb z\u00ebvend\u00ebsim me restrict.youtube.com, forcesafesearch.google.com dhe restrictmoderate.youtube.com. K\u00ebto kontrolle ofrojn\u00eb mund\u00ebsi p\u00ebr sulmuesit, t\u00eb cil\u00ebt kontrollojn\u00eb pun\u00ebn e rezolvuesit ose jan\u00eb n\u00eb gjendje t\u00eb nd\u00ebrhyjn\u00eb n\u00eb trafik, p\u00ebr t\u00eb simuluar nj\u00eb sjellje t\u00eb till\u00eb p\u00ebr t\u00eb \u00e7aktivizuar enkriptimin e trafikut DNS.<\/p>\n

P\u00ebrdorimi i nj\u00eb sh\u00ebrbimi t\u00eb vet\u00ebm DoH gjithashtu potencialisht mund t\u00eb shkaktoj\u00eb probleme me optimizimin e trafikut n\u00eb rrjetet e shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes, t\u00eb cilat realizojn\u00eb balancimin e trafikut duke p\u00ebrdorur DNS (serveri DNS i rrjetit CDN formon p\u00ebrgjigjen duke marr\u00eb parasysh adres\u00ebn e rezolverit dhe jep hostin m\u00eb t\u00eb af\u00ebrt p\u00ebr marrjen e p\u00ebrmbajtjes). D\u00ebrgimi i k\u00ebrkes\u00ebs DNS nga rezolveri m\u00eb i af\u00ebrt p\u00ebr p\u00ebrdoruesin n\u00eb k\u00ebto CDN \u00e7on n\u00eb kthimin e adres\u00ebs s\u00eb hostit m\u00eb t\u00eb af\u00ebrt me p\u00ebrdoruesin, por kur d\u00ebrgohet nj\u00eb k\u00ebrkes\u00eb DNS nga nj\u00eb rezolver centralizues, do t\u00eb jepet adresa e hostit m\u00eb t\u00eb af\u00ebrt me serverin DNS-over-HTTPS. Testimet n\u00eb praktik\u00eb treguan se p\u00ebrdorimi i DNS-over-HTTP n\u00eb kombinim me CDN praktikisht nuk e ndalonte fillimin e transmetimit t\u00eb p\u00ebrmbajtjes (p\u00ebr lidhjet e shpejta, vonesat nuk e kalonin 10 milisekonda, dhe n\u00eb kanalet e ngadalta t\u00eb komunikimit v\u00ebrehej madje nj\u00eb p\u00ebrshpejtim i funksionimit). P\u00ebr t\u00eb d\u00ebrguar rezolverit t\u00eb CDN informacionin mbi vendndodhjen e klientit, u shqyrtua gjithashtu p\u00ebrdorimi i zgjerimit EDNS Client Subnet.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Firefox \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0440\u0435\u0436\u0438\u043c\u0430 DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS (DoH, DNS over HTTPS) \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0421\u0428\u0410. \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 DNS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0439 \u0444\u0430\u043a\u0442\u043e\u0440 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f \u0432\u043e \u0432\u0441\u0435\u0445 \u043d\u043e\u0432\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 \u0421\u0428\u0410, DoH \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0421\u0428\u0410 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043d\u0430 DoH \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":71412,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71411","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47DNS-over-HTTPS e aktivizuar si parazgjedhje n\u00eb Firefox p\u00ebr p\u00ebrdoruesit n\u00eb SHBA | ProHoster","description":"Zhvilluesit e Firefox shpall\u00ebn se do ta ndjekin si parazgjedhje.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DNS-over-HTTPS \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 Firefox \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0421\u0428\u0410 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Firefox \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-26T00:10:13+00:00","article:modified_time":"2020-03-03T13:10:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71411","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:02:24","updated":"2022-10-03 11:24:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=71411"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71411\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/71412"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=71411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=71411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=71411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}