{"id":38121,"date":"2019-10-31T22:21:46","date_gmt":"2019-10-31T19:21:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https\/"},"modified":"2019-10-31T22:21:46","modified_gmt":"2019-10-31T19:21:46","slug":"v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","title":{"rendered":"I Chrome 78 kommer experiment med DNS-over-HTTPS att p\u00e5b\u00f6rjas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

F\u00f6ljande Mozilla<\/a><\/noindex> Google rapporterade<\/a><\/noindex> om avsikten att genomf\u00f6ra ett experiment f\u00f6r att testa implementeringen av 'DNS \u00f6ver HTTPS' (DoH, DNS over HTTPS) som utvecklas f\u00f6r webbl\u00e4saren Chrome. I version 78 av Chrome, som \u00e4r planerad till den 22 oktober, kommer vissa anv\u00e4ndarkategorier att vara aktiverade som standard. \u00f6vers\u00e4tts<\/a><\/noindex> att anv\u00e4nda DoH. Endast anv\u00e4ndare vars nuvarande systeminst\u00e4llningar anger vissa DNS-leverant\u00f6rer som anses vara kompatibla med DoH kommer att delta i DoH-experimentet. <\/p>\n

DNS-leverant\u00f6rer i den vita listan inkluderar tj\u00e4nster<\/a><\/noindex> Google (8.8.8.8, 8.8.4.4), Cloudflare (1.1.1.1, 1.0.0.1), OpenDNS (208.67.222.222, 208.67.220.220), Quad9 (9.9.9.9, 149.112.112.112), Cleanbrowsing (185.228.168.168, 185.228.169.168) och DNS.SB (185.222.222.222, 185.184.222.222). Om en av de n\u00e4mnda DNS-servrarna \u00e4r angiven i anv\u00e4ndarens DNS-inst\u00e4llningar, kommer DoH i Chrome att aktiveras som standard. F\u00f6r dem som anv\u00e4nder de DNS-servrar som tillhandah\u00e5lls av sin lokala internetleverant\u00f6r, kommer allt att f\u00f6rbli of\u00f6r\u00e4ndrat, och systemets resolver kommer fortsatt att anv\u00e4ndas f\u00f6r DNS-f\u00f6rfr\u00e5gningar. <\/p>\n

En viktig skillnad fr\u00e5n implementeringen av DoH i Firefox, d\u00e4r den gradvisa aktiveringen av DoH som standard b\u00f6rjar<\/a><\/noindex> redan i slutet av september, \u00e4r avsaknaden av koppling till en enda DoH-tj\u00e4nst. Om Firefox anv\u00e4nder CloudFlare DNS-server som standard, kommer Chrome endast att uppdatera metoden f\u00f6r hur DNS hanteras till en motsvarande tj\u00e4nst, utan att byta DNS-leverant\u00f6r. Till exempel, om anv\u00e4ndarens systeminst\u00e4llningar anger DNS 8.8.8.8, kommer Chrome att funktionen unix_crypt, som tar emot det l\u00f6senord som anv\u00e4ndaren anger utan att utf\u00f6ra escape av specialtecken. I git-repositoriet<\/a><\/noindex> DoH-tj\u00e4nsten Google (\"https:\/\/dns.google.com\/dns-query\"). Om DNS \u00e4r 1.1.1.1, kommer DoH-tj\u00e4nsten Cloudflare (\"https:\/\/cloudflare-dns.com\/dns-query\") och aktiverade<\/a><\/noindex> DoH-tj\u00e4nsten fr\u00e5n Google ('https:\/\/dns.google.com\/dns-query'), om DNS \u00e4r 1.1.1.1, s\u00e5 anv\u00e4nder DoH-tj\u00e4nsten fr\u00e5n Cloudflare ('https:\/\/cloudflare-dns.com\/dns-query') och Om s\u00e5 \u00f6nskas kan anv\u00e4ndaren aktivera eller avaktivera DoH via inst\u00e4llningen \"chrome:\/\/flags\/#dns-over-https\". Tre driftsl\u00e4gen st\u00f6ds: \"secure\", \"automatic\" och \"off\". I l\u00e4get \"secure\" identifieras v\u00e4rdar endast baserat p\u00e5 tidigare cachade s\u00e4kra v\u00e4rden (erh\u00e5llna genom en s\u00e4ker anslutning) och f\u00f6rfr\u00e5gningar via DoH, en \u00e5terg\u00e5ng till vanlig DNS till\u00e4mpas inte. I l\u00e4get \"automatic\" till\u00e5ts h\u00e4mtning av data fr\u00e5n os\u00e4ker cache och kontakt via traditionell DNS ifall DoH och den s\u00e4kra cachen inte \u00e4r tillg\u00e4ngliga. I l\u00e4get \"off\" kontrolleras den gemensamma cachen f\u00f6rst, och om det inte finns n\u00e5gra data, skickas f\u00f6rfr\u00e5gan via systemets DNS. L\u00e4get st\u00e4lls in via<\/a><\/noindex><\/p>\n

Om anv\u00e4ndaren s\u00e5 \u00f6nskar kan DoH aktiveras eller inaktiveras genom inst\u00e4llningen 'chrome:\/\/flags\/#dns-over-https'. Tre driftsl\u00e4gen st\u00f6ds: 'secure', 'automatic' och 'off'. I 'secure'-l\u00e4get best\u00e4ms v\u00e4rden endast baserat p\u00e5 tidigare cachade s\u00e4kra v\u00e4rden (erh\u00e5llna via en s\u00e4ker anslutning) och fr\u00e5gor via DoH, och \u00e5terst\u00e4llning till vanlig DNS till\u00e4mpas inte. I 'automatic'-l\u00e4get till\u00e5ts h\u00e4mtning av data fr\u00e5n os\u00e4kert cache och anrop via traditionell DNS om DoH och den s\u00e4kra cachen inte \u00e4r tillg\u00e4ngliga. I 'off'-l\u00e4get kontrolleras f\u00f6rst den stora cachen och om det inte finns n\u00e5gra data skickas fr\u00e5gan via systemets DNS. Driftsl\u00e4get anges via kDnsOverHttpsMode, och m\u00f6nstermatchningen av servrar via kDnsOverHttpsTemplates.<\/a><\/noindex> kDnsOverHttpsMode, och mappningsmallen f\u00f6r servrar via kDnsOverHttpsTemplates.<\/p>\n

Experimentet med att aktivera DoH kommer att genomf\u00f6ras p\u00e5 alla plattformar som st\u00f6ds av Chrome, f\u00f6rutom Linux och iOS p\u00e5 grund av komplexiteten i att tolka resolverinst\u00e4llningar och begr\u00e4nsad \u00e5tkomst till systeminst\u00e4llningar f\u00f6r DNS. Om det efter aktivering av DoH uppst\u00e5r problem med att skicka fr\u00e5gor till DoH-servern (till exempel p\u00e5 grund av dess blockering, brott mot n\u00e4tverksanslutning eller driftstopp) kommer webbl\u00e4saren automatiskt att \u00e5terv\u00e4nda till systeminst\u00e4llningarna f\u00f6r DNS. <\/p>\n

Syftet med experimentet \u00e4r att slutgiltigt kontrollera implementeringen av DoH och att studera p\u00e5verkan av DoH p\u00e5 prestanda. Det b\u00f6r noteras att st\u00f6det f\u00f6r DoH faktiskt inf\u00f6rdes har lagts till<\/a><\/noindex> i Chrome-kodbasen redan i februari, men f\u00f6r att konfigurera och aktivera DoH kr\u00e4vs<\/a><\/noindex> att starta Chrome med en s\u00e4rskild flagga och en icke uppenbar upps\u00e4ttning alternativ.<\/p>\n

Vi p\u00e5minner om att DoH kan vara anv\u00e4ndbart f\u00f6r att f\u00f6rhindra l\u00e4ckor av information om de beg\u00e4rda v\u00e4rdn\u00e4ten genom DNS-servrar fr\u00e5n leverant\u00f6rer, motverka MITM-attacker och manipulering av DNS-trafik (till exempel n\u00e4r man ansluter till offentlig Wi-Fi), motverka blockeringar p\u00e5 DNS-niv\u00e5 (DoH kan inte ers\u00e4tta VPN n\u00e4r det g\u00e4ller att kringg\u00e5 blockeringar som genomf\u00f6rs p\u00e5 DPI-niv\u00e5) eller f\u00f6r att m\u00f6jligg\u00f6ra drift n\u00e4r direktanslutning till DNS-servrar \u00e4r om\u00f6jlig (till exempel vid arbete genom en proxy). I en vanlig situation skickas DNS-f\u00f6rfr\u00e5gningar direkt till de DNS-servrar som anges i systemkonfigurationen, men vid DoH inkapslas f\u00f6rfr\u00e5gan om att best\u00e4mma v\u00e4rd-IP-adressen i HTTPS-trafik och skickas till en HTTP-server d\u00e4r resolvern hanterar f\u00f6rfr\u00e5gningarna via Web API. Den befintliga standarden DNSSEC anv\u00e4nder kryptering endast f\u00f6r autentisering av klient och server, men skyddar inte trafiken fr\u00e5n avlyssning och garanterar inte konfidentialiteten f\u00f6r f\u00f6rfr\u00e5gningarna. <\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS). \u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome 78, \u043d\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u043d\u0430 22 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 DoH. \u0412 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0435 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u043f\u0440\u0438\u043c\u0443\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0432 \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u043e\u0439\u043a\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38121","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Experiment med aktivering av DNS-over-HTTPS inleds i Chrome 78 | ProHoster","description":"Efter Mozilla b\u00f6rjar Google","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome 78 \u043d\u0430\u0447\u043d\u0443\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c DNS-over-HTTPS | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 Mozilla \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-chrome-78-nachnutsya-eksperimenty-s-vklyucheniem-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:46+00:00","article:modified_time":"2019-10-31T19:21:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38121","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:32:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:14:23","updated":"2026-01-23 20:32:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38121","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=38121"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38121\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=38121"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=38121"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=38121"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}