{"id":71411,"date":"2020-02-26T03:10:13","date_gmt":"2020-02-26T00:10:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha"},"modified":"2020-03-03T16:10:46","modified_gmt":"2020-03-03T13:10:46","slug":"dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha","title":{"rendered":"DNS-over-HTTPS \u00ebsht\u00eb aktivizuar si parazgjedhje n\u00eb Firefox p\u00ebr p\u00ebrdoruesit n\u00eb SHBA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zhvilluesit e Firefox njoftuan<\/a><\/noindex> p\u00ebr aktivizimin si parazgjedhje t\u00eb m\u00ebnyr\u00ebs DNS mbi HTTPS (DoH, DNS over HTTPS) p\u00ebr p\u00ebrdoruesit n\u00eb SHBA. Kriptimi i trafikut DNS konsiderohet nj\u00eb faktor thelb\u00ebsor i mbrojtjes s\u00eb p\u00ebrdoruesve. Duke filluar nga sot, n\u00eb t\u00eb gjitha instalimet e reja nga p\u00ebrdoruesit n\u00eb SHBA, DoH \u00ebsht\u00eb aktivizuar si parazgjedhje. P\u00ebrdoruesit ekzistues n\u00eb SHBA pritet t\u00eb kalojn\u00eb n\u00eb DoH brenda disa jav\u00ebsh. N\u00eb Bashkimin Evropian dhe vendet e tjera, aktivizimi i DoH si parazgjedhje nuk \u00ebsht\u00eb planifikuar ende. nuk planifikojn\u00eb<\/a><\/noindex>.<\/p>\n

Pas aktivizimit t\u00eb DoH, p\u00ebrdoruesi merr nj\u00eb paralajm\u00ebrim q\u00eb lejon, n\u00ebse d\u00ebshiron, t\u00eb heq\u00eb dor\u00eb nga qasja n\u00eb serverat e centralizuar DoH t\u00eb DNS dhe t\u00eb kthehet n\u00eb skem\u00ebn tradicionale t\u00eb d\u00ebrgimit t\u00eb k\u00ebrkesave t\u00eb pa-enkriptuara n\u00eb serverin DNS t\u00eb ofruesit. N\u00eb vend t\u00eb infrastruktur\u00ebs s\u00eb shp\u00ebrndar\u00eb t\u00eb rezolvuesve DNS, DoH p\u00ebrdor lidhjen me nj\u00eb sh\u00ebrbim t\u00eb ve\u00e7ant\u00eb DoH, i cili mund t\u00eb shihet si nj\u00eb pik\u00eb e vetme d\u00ebshtimi. Aktualisht ofrohet funksionimi p\u00ebrmes dy ofruesve t\u00eb DNS - CloudFlare (si parazgjedhje) dhe NextDNS<\/a><\/noindex>. <\/p>\n

\"DNS-over-HTTPS<\/a><\/noindex><\/center><\/p>\n

Ndrysho ofruesin ose \u00e7aktivizo DoH mund t\u00eb<\/a><\/noindex> n\u00eb cil\u00ebsimet e lidhjes rrjet\u00eb. P\u00ebr shembull, mund t\u00eb specifikoni nj\u00eb server alternativ DoH \"https:\/\/dns.google\/dns-query\" p\u00ebr qasje n\u00eb serverat e Google, \"https:\/\/dns.quad9.net\/dns-query\" - Quad9 dhe \"https:\/\/doh.opendns.com\/dns-query\" - OpenDNS. N\u00eb about:config gjithashtu \u00ebsht\u00eb parapar\u00eb konfigurimi i network.trr.mode, p\u00ebrmes t\u00eb cilit mund t\u00eb ndryshoni modalitetin e funksionimit t\u00eb DoH: vlera 0 e \u00e7on DoH-n\u00eb plot\u00ebsisht jasht\u00eb funksionit; 1 - p\u00ebrdoret DNS ose DoH, n\u00eb var\u00ebsi t\u00eb atij q\u00eb \u00ebsht\u00eb m\u00eb i shpejt\u00eb; 2 - p\u00ebrdoret DoH si parazgjedhje, nd\u00ebrsa DNS si opsion rezerv\u00eb; 3 - p\u00ebrdoret vet\u00ebm DoH; 4 - modaliteti i pasqyrimit ku DoH dhe DNS angazhohen paralelisht. <\/p>\n

Kujtom\u00eb se DoH mund t\u00eb jet\u00eb i dobish\u00ebm p\u00ebr t\u00eb shmangur rrjedhjet e informacionit mbi emrat e hosteve t\u00eb k\u00ebrkuar p\u00ebrmes server\u00ebve DNS t\u00eb ofruesve, p\u00ebr t\u00eb luftuar sulmet MITM dhe nd\u00ebrrimin e trafikut DNS (p.sh., kur lidhemi me Wi-Fi publik), p\u00ebr t\u00eb p\u00ebrballuar bllokimet n\u00eb nivel DNS (DoH nuk mund t\u00eb z\u00ebvend\u00ebsoj\u00eb VPN-n\u00eb n\u00eb fush\u00ebn e anashkalimit t\u00eb bllokimeve t\u00eb realizuara n\u00eb nivel DPI) ose p\u00ebr t\u00eb organizuar pun\u00ebn n\u00eb rastin e pamund\u00ebsis\u00eb p\u00ebr t'u lidhur drejtp\u00ebrdrejt me server\u00ebt DNS (p.sh., kur punoni p\u00ebrmes proxy). N\u00eb situat\u00ebn e zakonshme, k\u00ebrkesat DNS d\u00ebrgohen drejtp\u00ebrdrejt n\u00eb server\u00ebt DNS t\u00eb caktuar n\u00eb konfigurimin e sistemit, nd\u00ebrsa n\u00eb rastin e DoH, k\u00ebrkesa p\u00ebr t\u00eb p\u00ebrcaktuar adres\u00ebn IP t\u00eb hostit inkapsulohet n\u00eb trafikun HTTPS dhe d\u00ebrgohet n\u00eb nj\u00eb server HTTP, ku rezolvuesi p\u00ebrpunon k\u00ebrkesat p\u00ebrmes Web API. Standardi ekzistues DNSSEC p\u00ebrdor enkriptimin vet\u00ebm p\u00ebr autentifikimin e klientit dhe serverit, por nuk mbron trafikun nga p\u00ebrgjoj\u00ebsit dhe nuk garanton privat\u00ebsin\u00eb e k\u00ebrkesave. <\/p>\n

P\u00ebr selektimin e ofruesve t\u00eb DoH t\u00eb propozuar n\u00eb Firefox jan\u00eb formuluar k\u00ebrkesat<\/a><\/noindex> p\u00ebr rezolvuesit DNS t\u00eb besuesh\u00ebm, sipas t\u00eb cilave operatori DNS mund t\u00eb p\u00ebrdor\u00eb t\u00eb dh\u00ebnat e marra p\u00ebr rezolvimin vet\u00ebm p\u00ebr t\u00eb siguruar funksionimin e sh\u00ebrbimit, nuk duhet t\u00eb ruaj\u00eb logjet m\u00eb gjat\u00eb se 24 or\u00eb, nuk mund t\u00eb transferoj\u00eb t\u00eb dh\u00ebna tek pal\u00ebt e treta dhe \u00ebsht\u00eb i detyruar t\u00eb zbuloj\u00eb informacionin mbi metodat e p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave. Sh\u00ebrbimi gjithashtu duhet t\u00eb jap\u00eb angazhime p\u00ebr t\u00eb mos censuruar, filtruar, nd\u00ebrhyr\u00eb dhe bllokuar trafikun DNS, p\u00ebrve\u00e7 situatave t\u00eb parashikuara nga ligji. <\/p>\n

Duhet t\u00eb p\u00ebrdoret DoH me kujdes. P\u00ebr shembull, n\u00eb Rusi, adresat IP 104.16.248.249 dhe 104.16.249.249, t\u00eb lidhura me serverin DoH mozilla.cloudflare-dns.com, jan\u00eb p\u00ebrfshir\u00eb<\/a><\/noindex> n\u00eb listat<\/a><\/noindex> e bllokimeve<\/a><\/noindex> t\u00eb Roskomnadzor<\/a><\/noindex> me k\u00ebrkes\u00eb t\u00eb gjykat\u00ebs s\u00eb qytetit Stavropol m\u00eb 10.06.2013.<\/p>\n

P\u00ebrdorimi i DoH gjithashtu mund t\u00eb \u00e7oj\u00eb n\u00eb probleme n\u00eb fusha si sistemet e kontrollit t\u00eb prind\u00ebrve, aksesin n\u00eb hap\u00ebsirat brenda emrave n\u00eb sistemet korporative, zgjedhjen e rrug\u00ebve n\u00eb sistemet e optimizimit t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes dhe p\u00ebrmbushjen e urdhrave gjyq\u00ebsor\u00eb n\u00eb luft\u00ebn kund\u00ebr shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes s\u00eb paligjshme dhe shfryt\u00ebzimit t\u00eb t\u00eb miturve. P\u00ebr t\u00eb kaluar k\u00ebto probleme, \u00ebsht\u00eb zbatuar dhe testuar nj\u00eb sistem kontrolli, i cili \u00e7aktivizon automatikisht DoH n\u00eb kushte t\u00eb caktuara. <\/p>\n

P\u00ebr t\u00eb p\u00ebrcaktuar rezolvuesit korporativ\u00eb, kryhen kontrollime p\u00ebr domain t\u00eb pazakont\u00eb t\u00eb nivelit t\u00eb par\u00eb (TLD) dhe kthehet nga rezolvuesi sistematik adresat intranet. P\u00ebr t\u00eb p\u00ebrcaktuar aktivizimin e kontrollit t\u00eb prind\u00ebrve, b\u00ebhet nj\u00eb tentativ\u00eb p\u00ebr t\u00eb rezolvuar emrin exampleadultsite.com dhe n\u00ebse rezultati nuk p\u00ebrputhet me IP-n\u00eb faktike, konsiderohet se bllokimi i p\u00ebrmbajtjes p\u00ebr t\u00eb rritur \u00ebsht\u00eb aktiv n\u00eb nivelin DNS. Si tregues kontrollohen gjithashtu IP-t\u00eb e Google dhe YouTube p\u00ebr t\u00eb par\u00eb n\u00ebse ato jan\u00eb z\u00ebvend\u00ebsuar me restrict.youtube.com, forcesafesearch.google.com dhe restrictmoderate.youtube.com. K\u00ebto kontrollime i japin mund\u00ebsi sulmuesve q\u00eb kontrollojn\u00eb pun\u00ebn e rezolvuesit apo q\u00eb mund t\u00eb nd\u00ebrhyjn\u00eb n\u00eb trafik, t\u00eb simulojn\u00eb nj\u00eb sjellje t\u00eb till\u00eb p\u00ebr t\u00eb \u00e7aktivizuar enkriptimin e trafikut DNS.<\/p>\n

Puna e pun\u00ebs me nj\u00eb sh\u00ebrbim t\u00eb vet\u00ebm DoH gjithashtu potencialisht mund t\u00eb \u00e7oj\u00eb n\u00eb probleme me optimizimin e trafikut n\u00eb rrjetet e shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes, t\u00eb cilat kryejn\u00eb balancimin e trafikut duke p\u00ebrdorur DNS (serveri DNS i rrjetit CDN formon p\u00ebrgjigjen duke marr\u00eb parasysh adres\u00ebn e rezolverit dhe jep hostin m\u00eb t\u00eb af\u00ebrt p\u00ebr marrjen e p\u00ebrmbajtjes). D\u00ebrgimi i k\u00ebrkes\u00ebs DNS nga rezolveri m\u00eb i af\u00ebrt me p\u00ebrdoruesin n\u00eb k\u00ebto CDN ka si rezultat kthimin e adres\u00ebs s\u00eb hostit m\u00eb t\u00eb af\u00ebrt me p\u00ebrdoruesin, por me d\u00ebrgimin e k\u00ebrkes\u00ebs DNS nga nj\u00eb rezolver i centralizuar do t\u00eb jepet adresa e hostit m\u00eb t\u00eb af\u00ebrt me serverin DNS-over-HTTPS. Testimet n\u00eb praktik\u00eb kan\u00eb treguar se p\u00ebrdorimi i DNS-over-HTTP me p\u00ebrdorim t\u00eb CDN nuk ka sjell\u00eb vonesa para fillimit t\u00eb transmetimit t\u00eb p\u00ebrmbajtjes (p\u00ebr lidhjet e shpejta, vonesat nuk e kaluan 10 milisekonda, dhe n\u00eb kanale t\u00eb ngadalta jan\u00eb v\u00ebrejtur edhe p\u00ebrmir\u00ebsime t\u00eb performanc\u00ebs). P\u00ebr d\u00ebrgimin e informacionit p\u00ebr vendndodhjen e klientit te rezolveri CDN, u shqyrtua gjithashtu p\u00ebrdorimi i zgjerimit EDNS Client Subnet.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Firefox \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0440\u0435\u0436\u0438\u043c\u0430 DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS (DoH, DNS over HTTPS) \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0421\u0428\u0410. \u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 DNS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0439 \u0444\u0430\u043a\u0442\u043e\u0440 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f \u0432\u043e \u0432\u0441\u0435\u0445 \u043d\u043e\u0432\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 \u0421\u0428\u0410, DoH \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0421\u0428\u0410 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043d\u0430 DoH \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":71412,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-71411","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 DNS-over-HTTPS \u00ebsht\u00eb aktivizuar si parazgjedhje n\u00eb Firefox p\u00ebr p\u00ebrdoruesit nga SHBA | ProHoster","description":"Zhvilluesit e Firefox njoftuan se DoH \u00ebsht\u00eb p\u00ebrfshir\u00eb si parazgjedhje.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47DNS-over-HTTPS \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 Firefox \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0421\u0428\u0410 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Firefox \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/dns-over-https-vklyuchyon-po-umolchaniyu-v-firefox-dlya-polzovatelej-iz-ssha","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-26T00:10:13+00:00","article:modified_time":"2020-03-03T13:10:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"71411","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:02:24","updated":"2022-10-03 11:24:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71411","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=71411"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/71411\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/71412"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=71411"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=71411"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=71411"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}