ืึทืคึผื“ื™ื™ื˜ื™ื ื’ ื“ื™ BIND DNS ืกืขืจื•ื•ืขืจ ืฆื• ืขืœื™ืžื™ื ื™ืจืŸ ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ DNS-over-HTTPS

ืงืขืจืขืงื˜ื™ื•ื• ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืฆื• ื“ื™ ืกื˜ืึทื‘ื™ืœ ืฆื•ื•ื™ื™ื’ืŸ ืคื•ืŸ ื“ื™ BIND DNS ืกืขืจื•ื•ืขืจ 9.16.28 ืื•ืŸ 9.18.3 ื–ืขื ืขืŸ ืืจื•ื™ืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืึท ื ื™ื™ึทืข ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ ื™ืงืกืคึผืขืจืžืขื ืึทืœ ืฆื•ื•ื™ื™ึทื’ 9.19.1. ืื™ืŸ ื•ื•ืขืจืกื™ืขืก 9.18.3 ืื•ืŸ 9.19.1, ืึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2022-1183) ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื“ื ืก-ืื™ื‘ืขืจ-HTTPS ืžืขืงืึทื ื™ื–ืึทื, ื’ืขืฉื˜ื™ืฆื˜ ื–ื™ื ื˜ ืฆื•ื•ื™ื™ึทื’ 9.18, ืื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื– ื“ื™ ื’ืขื”ื™ื™ืกืŸ ืคึผืจืึธืฆืขืก ืฆื• ืงืจืึทืš ืื•ื™ื‘ ื“ื™ TLS ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืฆื• ืึท ื”ื˜ื˜ืคึผ-ื‘ืื–ื™ืจื˜ ื”ืึทื ื“ืœืขืจ ืื™ื– ื˜ืขืจืžืึทื ื™ื™ื˜ื™ื“ ืฆื• ืคืจื™. ื“ื™ ืึทืจื•ื™ืกื’ืขื‘ืŸ ืึทืคืขืงืฅ ื‘ืœื•ื™ื– ืกืขืจื•ื•ืขืจืก ื•ื•ืึธืก ื“ื™ื ืขืŸ ื“ื ืก ืื™ื‘ืขืจ ื”ื˜ื˜ืคึผืก (ื“ืึธื”) ืจื™ืงื•ื•ืขืก. ืกืขืจื•ื•ืขืจืก ื•ื•ืึธืก ืึธื ื ืขืžืขืŸ DNS ืื™ื‘ืขืจ TLS (DoT) ืคึฟืจืื’ืŸ ืื•ืŸ ื˜ืึธืŸ ื ื™ื˜ ื ื•ืฆืŸ ื“ืึธื” ื–ืขื ืขืŸ ื ื™ืฉื˜ ืึทืคืขืงื˜ืึทื“ ื“ื•ืจืš ื“ืขื ืึทืจื•ื™ืกื’ืขื‘ืŸ.

ืžืขืœื“ื•ื ื’ 9.18.3 ืื•ื™ืš ืžื•ืกื™ืฃ ืขื˜ืœืขื›ืข ืคืึทื ื’ืงืฉืึทื ืึทืœ ื™ืžืคึผืจื•ื•ื•ืžืึทื ืฅ. ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ ืจื’ืข ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืงืึทื˜ืึทืœืึธื’ ื–ืึธื ืขืก ("ืงืึทื˜ืึทืœืึธื’ ื–ืึธื ืขืก"), ื“ื™ืคื™ื™ื ื“ ืื™ืŸ ื“ื™ ืคื™ื ืคื˜ ืคึผืœืึทืŸ ืคื•ืŸ ื“ื™ IETF ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’. ื–ืึธื ืข Directory ืึธืคืคืขืจืก ืึท ื ื™ื™ึทืข ืื•ืคึฟืŸ ืคื•ืŸ ืžื™ื™ื ื˜ื™ื™ื ื™ื ื’ ืฆื•ื•ื™ื™ื˜ื™ืง ื“ื ืก ืกืขืจื•ื•ืขืจืก ืื™ืŸ ื•ื•ืึธืก, ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ื“ื™ืคื™ื™ื ื™ื ื’ ื‘ืึทื–ื•ื ื“ืขืจ ืจืขืงืึธืจื“ืก ืคึฟืึทืจ ื™ืขื“ืขืจ ืฆื•ื•ื™ื™ื˜ื™ืง ื–ืึธื ืข ืื•ื™ืฃ ื“ื™ ืฆื•ื•ื™ื™ื˜ื™ืง ืกืขืจื•ื•ืขืจ, ืึท ืกืคึผืขืฆื™ืคื™ืฉ ื’ืึทื ื’ ืคื•ืŸ ืฆื•ื•ื™ื™ื˜ื™ืง ื–ืึธื ืขืก ื–ืขื ืขืŸ ื˜ืจืึทื ืกืคืขืจื“ ืฆื•ื•ื™ืฉืŸ ื“ื™ ืขืจืฉื˜ื™ืง ืื•ืŸ ืฆื•ื•ื™ื™ื˜ื™ืง ืกืขืจื•ื•ืขืจืก. ื™ืขื ืข. ื“ื•ืจืš ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืึท ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืขื ืœืขืš ืฆื• ื“ื™ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืคื•ืŸ ื™ื—ื™ื“ ื–ืึธื ืขืก, ื–ืึธื ืขืก ื‘ืืฉืืคืŸ ืื•ื™ืฃ ื“ื™ ืขืจืฉื˜ื™ืง ืกืขืจื•ื•ืขืจ ืื•ืŸ ืื ื’ืขืฆื™ื™ื›ื ื˜ ื•ื•ื™ ื™ื ืงืœื•ื“ืขื“ ืื™ืŸ ื“ื™ ื•ื•ืขื’ื•ื•ื™ื™ึทื–ืขืจ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ื‘ืืฉืืคืŸ ืื•ื™ืฃ ื“ื™ ืฆื•ื•ื™ื™ื˜ื™ืง ืกืขืจื•ื•ืขืจ ืึธืŸ ื“ื™ ื ื•ื™ื˜ ืฆื• ืจืขื“ืึทื’ื™ืจืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืงืขืก.

ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข ืื•ื™ืš ืžื•ืกื™ืฃ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืขืงืกื˜ืขื ื“ืขื“ "ืกื˜ืึทืœืข ืึทื ืกื•ื•ืขืจ" ืื•ืŸ "ืกื˜ืึทืœืข NXDOMAIN Answer" ื˜ืขื•ืช ืงืึธื•ื“ื–, ืืจื•ื™ืก ื•ื•ืขืŸ ืึท ืึทืœื˜ - ื’ืขื‘ืึทืงืŸ ืขื ื˜ืคืขืจ ืื™ื– ืื•ืžื’ืขืงืขืจื˜ ืคื•ืŸ ื“ื™ ืงืึทืฉ. ื’ืขื”ื™ื™ืกืŸ ืื•ืŸ ื’ืจืึธื‘ืŸ ื”ืึธื‘ืŸ ืึท ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง TLS ืกืขืจื˜ื™ืคื™ืงืึทืฅ, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ื™ื ืกื˜ืจื•ืžืขื ื˜ ืฉื˜ืึทืจืง ืึธื“ืขืจ ืงืึธืึธืคึผืขืจืึทื˜ื™ื•ื•ืข ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ TLS (RFC 9103).

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’