Google mabapi le ho qala ho kenyeletsoa ka mekhahlelo (DoH, DNS over HTTPS) bakeng sa basebelisi ba Chrome 85 ba sebelisang sethala sa Android. Mokhoa o tla kengoa butle butle, o koahele basebelisi ba bangata le ho feta. Nakong e fetileng ka Ho nolofalletsa DNS-over-HTTPS bakeng sa basebelisi ba komporo e se e qalile.
DNS-over-HTTPS e tla kengoa tšebetsong ka bo eona bakeng sa basebelisi bao litlhophiso tsa bona li hlakisang bafani ba DNS ba tšehetsang theknoloji ena (bakeng sa DNS-over-HTTPS ho sebelisoa mofani ea tšoanang le oa DNS). Mohlala, haeba mosebelisi a na le DNS 8.8.8.8 e boletsoeng ho litlhophiso tsa sistimi, ts'ebeletso ea Google ea DNS-over-HTTPS (“https://dns.google.com/dns-query”) e tla kengoa tšebetsong ho Chrome haeba DNS. ke 1.1.1.1 , ebe tšebeletso ea DNS-over-HTTPS Cloudflare ("https://cloudflare-dns.com/dns-query"), joalo-joalo.
Ho felisa mathata a ho rarolla marang-rang a khoebo a intranet, DNS-over-HTTPS ha e sebelisoe ha ho khethoa ts'ebeliso ea sebatli lits'ebetsong tse laoloang bohareng. DNS-over-HTTPS e boetse ea tingoa ha litsamaiso tsa taolo ea batsoali li kentsoe. Haeba ho na le liphoso ts'ebetsong ea DNS-over-HTTPS, hoa khoneha ho khutlisetsa litlhophiso ho DNS e tloaelehileng. Ho laola ts'ebetso ea DNS-over-HTTPS, ho kentsoe likhetho tse khethehileng ho litlhophiso tsa sebatli tse u lumellang ho tima DNS-over-HTTPS kapa ho khetha mofani o fapaneng.
A re hopoleng hore DNS-over-HTTPS e ka thusa ho thibela ho lutla ha tlhahisoleseling mabapi le mabitso a moamoheli a kopiloeng ka li-server tsa DNS tsa bafani, ho loants'a litlhaselo tsa MITM le DNS traffic spoofing (mohlala, ha o hokahana le Wi-Fi ea sechaba), countering. ho thibela ka tekanyo ea DNS (DNS-over-HTTPS e ke ke ea nka sebaka sa VPN ka ho thibela ho thibela ho kenngoa ts'ebetsong boemong ba DPI) kapa bakeng sa ho hlophisa mosebetsi ha ho sa khonehe ho fihlella ka ho toba li-server tsa DNS (mohlala, ha u sebetsa ka proxy). Haeba maemong a tloaelehileng likopo tsa DNS li romelloa ka kotloloho ho li-server tsa DNS tse hlalositsoeng ho tlhophiso ea sistimi, joale molemong oa DNS-over-HTTPS kopo ea ho tseba hore na aterese ea IP ea moamoheli e kentsoe sephethephethe sa HTTPS ebe e romelloa ho seva sa HTTP, moo. mohlahlobi o etsa likopo ka Web API. Tekanyetso e teng ea DNSSEC e sebelisa encryption feela ho netefatsa moreki le seva, empa ha e sireletse sephethephethe ho tsoa ho thibelo ebile ha e fane ka tiiso ea lekunutu la likopo.
Source: opennet.ru