{"id":38615,"date":"2019-10-31T22:24:52","date_gmt":"2019-10-31T19:24:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https\/"},"modified":"2019-10-31T22:24:52","modified_gmt":"2019-10-31T19:24:52","slug":"assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","title":{"rendered":"Amerikanska leverant\u00f6rsf\u00f6reningar mots\u00e4tter sig centralisering vid implementeringen av DNS-over-HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Handelsorganisationer NCTA<\/a><\/noindex>, CTIA<\/a><\/noindex> och USTelecom<\/a><\/noindex>, som f\u00f6retr\u00e4der internetleverant\u00f6rers intressen, har v\u00e4djat<\/a><\/noindex> \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 DNS-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 Chrome \u0438 Android \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044f\u043c\u0438 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0443\u0447\u0451\u0442\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043d\u0435\u0433\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439.<\/p>\n

Genom att f\u00f6rst\u00e5 den \u00f6vergripande nyttan med att anv\u00e4nda kryptering f\u00f6r DNS-trafik, anser organisationerna att det \u00e4r oacceptabelt att koncentrera kontrollen \u00f6ver namnkonvertering i en enda hand och koppla denna mekanism som standard till centraliserade DNS-tj\u00e4nster. Specifikt h\u00e4vdas det att Google r\u00f6r sig mot att inf\u00f6ra DoH som standard i Android och Chrome, vilket, om det kopplas till Googles servrar, skulle leda till en kr\u00e4nkning av den decentraliserade karakt\u00e4ren hos DNS-infrastrukturen och skapa en enda punkt f\u00f6r misslyckande.<\/p>\n

Eftersom Chrome och Android dominerar marknaden, skulle en p\u00e5tvingad anv\u00e4ndning av sina DoH-servrar ge Google m\u00f6jlighet att kontrollera en stor del av anv\u00e4ndarnas DNS-f\u00f6rfr\u00e5gningsfl\u00f6den. F\u00f6rutom att s\u00e4nka tillf\u00f6rlitligheten i infrastrukturen, skulle ett s\u00e5dant steg ocks\u00e5 ge Google obefogade f\u00f6rdelar gentemot konkurrenter, eftersom f\u00f6retaget skulle f\u00e5 ytterligare information om anv\u00e4ndarnas aktiviteter som kan anv\u00e4ndas f\u00f6r att sp\u00e5ra anv\u00e4ndarbeteende och riktad reklam. <\/p>\n

Anv\u00e4ndningen av DoH kan ocks\u00e5 st\u00f6r verksamheten inom omr\u00e5den som f\u00f6r\u00e4ldrakontrollsystem, \u00e5tkomst till interna namnrymder i f\u00f6retagsystem, ruttval i system f\u00f6r inneh\u00e5llsleveransoptimering och genomf\u00f6rande av domstolsorder i samband med bek\u00e4mpning av spridning av olagligt inneh\u00e5ll och utnyttjande av minder\u00e5riga. DNS-f\u00f6rfalskning anv\u00e4nds ocks\u00e5 ofta f\u00f6r att omdirigera anv\u00e4ndare till en sida med information om att abonnentens medel har tagit slut eller f\u00f6r att logga in p\u00e5 ett tr\u00e5dl\u00f6st n\u00e4tverk.<\/p>\n

Google att<\/a><\/noindex>, vilket g\u00f6r att farh\u00e5gorna \u00e4r grundl\u00f6sa, eftersom den inte har f\u00f6r avsikt att som standard aktivera DoH i Chrome och Android. Planerat<\/a><\/noindex> I Chrome 78 kommer experimentell standardaktivering av DoH endast att omfatta anv\u00e4ndare vars inst\u00e4llningar anger DNS-leverant\u00f6rer som erbjuder DoH som alternativ till traditionell DNS. F\u00f6r de som anv\u00e4nder DNS-servrar som tillhandah\u00e5lls av sina lokala internetleverant\u00f6rer kommer DNS-f\u00f6rfr\u00e5gningar att forts\u00e4tta att skickas via den systematiska resolvern. Det inneb\u00e4r att Googles \u00e5tg\u00e4rder endast handlar om att byta till en motsvarande tj\u00e4nst fr\u00e5n den aktuella leverant\u00f6ren f\u00f6r att \u00f6verg\u00e5 till en s\u00e4ker metod f\u00f6r hantering av DNS. Experimentell aktivering av DoH \u00e4r ocks\u00e5 planerad i Firefox, men till skillnad fr\u00e5n Google har Mozilla avser<\/a><\/noindex> anv\u00e4nda<\/a><\/noindex> standard DNS-server CloudFlare. Denna metod har redan orsakat , eftersom termen replica \u00e4r mer till\u00e4mplig p\u00e5 databasystem och f\u00f6rvr\u00e4nger betydelsen i sammanhanget av ljudsystemet. Som ett resultat valdes termen<\/a><\/noindex> fr\u00e5n OpenBSD-projektet.<\/p>\n

Vi p\u00e5minner om att DoH kan vara anv\u00e4ndbart f\u00f6r att f\u00f6rhindra l\u00e4ckage av information om beg\u00e4rda v\u00e4rdnamn genom DNS-servrar som tillhandah\u00e5lls av leverant\u00f6rer, bek\u00e4mpa MITM-attacker och manipulation av DNS-trafik (till exempel vid anslutning till offentliga Wi-Fi-n\u00e4tverk), motverka blockeringar p\u00e5 DNS-niv\u00e5 (DoH kan inte ers\u00e4tta VPN f\u00f6r att kringg\u00e5 blockeringar implementerade p\u00e5 DPI-niv\u00e5) eller f\u00f6r att organisera verksamheten n\u00e4r direktkontakt med DNS-servrar \u00e4r om\u00f6jlig (till exempel vid arbete via en proxy). <\/p>\n

Om DNS-f\u00f6rfr\u00e5gningar direkt i normala situationer skickas till specifika DNS-servrar som anges i systemets konfiguration, s\u00e5 inkapslas i fallet med DoH f\u00f6rfr\u00e5gan om IP-adressen f\u00f6r v\u00e4rden i HTTPS-trafiken och skickas till en HTTP-server d\u00e4r resolvern behandlar f\u00f6rfr\u00e5gningarna via Web API. Den nuvarande standarden DNSSEC anv\u00e4nder kryptering endast f\u00f6r autentisering av klienten och servern, men skyddar inte trafiken fr\u00e5n avlyssning och garanterar inte konfidentialitet av f\u00f6rfr\u00e5gningar. F\u00f6r n\u00e4rvarande finns ungef\u00e4r 30 offentliga DNS-servrar<\/a><\/noindex> som st\u00f6der DoH.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA, CTIA \u0438 USTelecom, \u043e\u0442\u0441\u0442\u0430\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c \u0432 \u041a\u043e\u043d\u0433\u0440\u0435\u0441\u0441 \u0421\u0428\u0410 \u0441 \u043f\u0440\u043e\u0441\u044c\u0431\u043e\u0439 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c «DNS \u043f\u043e\u0432\u0435\u0440\u0445 HTTPS» (DoH, DNS over HTTPS) \u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0443 Google \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0445 \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e DoH \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38615","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Amerikanska leverant\u00f6rsf\u00f6reningar har motsatt sig centralisering vid inf\u00f6randet av DNS-over-HTTPS | ProHoster","description":"Handelsf\u00f6reningarna NCTA,","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0421\u0428\u0410 \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 DNS-over-HTTPS | ProHoster","og:description":"\u0422\u043e\u0440\u0433\u043e\u0432\u044b\u0435 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 NCTA,","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/assotsiatsii-provajderov-ssha-vystupili-protiv-tsentralizatsii-pri-vnedrenii-dns-over-https","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:24:52+00:00","article:modified_time":"2019-10-31T19:24:52+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38615","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 22:45:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:06:24","updated":"2026-01-23 22:45:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=38615"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/38615\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=38615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=38615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=38615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}