ืงืจืึธื•ื ืคึฟืึทืจ ืึทื ื“ืจื•ื™ื“ ืื™ืฆื˜ ืฉื˜ื™ืฆื˜ DNS-over-HTTPS

ื’ื•ื’ืœ ืžื•ื“ื™ืข ื“ืขื ื•ื•ืขื’ืŸ ื“ื™ ืึธื ื”ื™ื™ื‘ ืคื•ืŸ ืคืึทืกืขื“ ื™ื ืงืœื•ื–ืฉืึทืŸ ื“ื ืก ืื™ื‘ืขืจ ื”ื˜ื˜ืคึผืก ืžืึธื“ืข (ื“ืึธื”, ื“ื ืก ืื™ื‘ืขืจ ื”ื˜ื˜ืคึผืก) ืคึฟืึทืจ ืงืจืึธื•ื 85 ื™ื•ื–ืขืจื– ื ื™ืฆืŸ ื“ื™ ืึทื ื“ืจื•ื™ื“ ืคึผืœืึทื˜ืคืึธืจืžืข. ื“ืขืจ ืžืึธื“ืข ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึทืงื˜ื™ื•ื•ื™ื™ื˜ื™ื“ ื‘ื™ืกืœืขื›ื•ื•ื™ื™ึทื–, ืงืึทื•ื•ืขืจื™ื ื’ ืžืขืจ ืื•ืŸ ืžืขืจ ื ื™ืฆืขืจืก. ืคืจื™ืขืจ ืื™ืŸ ืงืจืึธื•ื ืงืกื ื•ืžืงืก ืขื ื™ื™ื‘ืึทืœื™ื ื’ DNS-over-HTTPS ืคึฟืึทืจ ื“ืขืกืงื˜ืึทืคึผ ื™ื•ื–ืขืจื– ืื™ื– ืกื˜ืึทืจื˜ืขื“.

ื“ื ืก-ืื™ื‘ืขืจ-ื”ื˜ื˜ืคึผืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืื•ื™ื˜ืึธืžืึทื˜ื™ืฉ ืึทืงื˜ื™ื•ื•ื™ื™ื˜ื™ื“ ืคึฟืึทืจ ื™ื•ื–ืขืจื– ื•ื•ืขืžืขื ืก ืกืขื˜ื˜ื™ื ื’ืก ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื ืก ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ื•ื•ืึธืก ืฉื˜ื™ืฆืŸ ื“ืขื ื˜ืขื›ื ืึธืœืึธื’ื™ืข (ืคึฟืึทืจ ื“ื ืก-ืื™ื‘ืขืจ-ื”ื˜ื˜ืคึผืก ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืฉืคึผื™ื™ึทื–ืขืจ ืื™ื– ื’ืขื ื™ืฆื˜ ื•ื•ื™ ืคึฟืึทืจ ื“ื ืก). ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืื•ื™ื‘ ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื”ืื˜ ื“ื ืก 8.8.8.8 ืกืคึผืขืกื™ืคื™ืขื“ ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื ืกืขื˜ื˜ื™ื ื’ืก, Google ืก ื“ื ืก-ืื™ื‘ืขืจ-ื”ื˜ื˜ืคึผืก ื“ื™ื ืกื˜ ("https://dns.google.com/dns-query") ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึทืงื˜ื™ื•ื•ื™ื™ื˜ื™ื“ ืื™ืŸ ืงืจืึธื•ื ืื•ื™ื‘ ื“ื™ ื“ื ืก ืื™ื– 1.1.1.1, ื“ืขืžืึธืœื˜ ื“ื ืก-ืื™ื‘ืขืจ-ื”ื˜ื˜ืคึผืก ื“ื™ื ืกื˜ ืงืœืึธื•ื“ืคืœืึทืจืข ("https://cloudflare-dns.com/dns-query"), ืืื–"ื• ื•.

ืฆื• ืขืœื™ืžื™ื ื™ืจืŸ ืคึผืจืึธื‘ืœืขืžืก ืžื™ื˜ ืจื™ื–ืึทืœื•ื•ื™ื ื’ ืคึฟื™ืจืžืข ื™ื ื˜ืจืึทื ืขื˜ ื ืขื˜ื•ื•ืึธืจืงืก, DNS-over-HTTPS ืื™ื– ื ื™ืฉื˜ ื’ืขื ื™ืฆื˜ ื•ื•ืขืŸ ื“ื™ื˜ืขืจืžืึทื ื™ื ื’ ื‘ืœืขื˜ืขืจืขืจ ื‘ืึทื ื™ืฅ ืื™ืŸ ืกืขื ื˜ืจืึทืœื™ ื’ืขืจืื˜ืŸ ืกื™ืกื˜ืขืžืขืŸ. DNS-over-HTTPS ืื™ื– ืื•ื™ืš ืคืึทืจืงืจื™ืคึผืœื˜ ื•ื•ืขืŸ ืคึผืึทืจืขื ื˜ืึทืœ ืงืึธื ื˜ืจืึธืœ ืกื™ืกื˜ืขืžืขืŸ ื–ืขื ืขืŸ ืื™ื ืกื˜ืึทืœื™ืจืŸ. ืื™ืŸ ืคืึทืœ ืคื•ืŸ ืคื™ื™ืœื™ืขืจื– ืื™ืŸ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹DNS-over-HTTPS, ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืฆื•ืจื™ืงืงืจื™ื’ืŸ ืกืขื˜ื˜ื™ื ื’ืก ืฆื• ืจืขื’ื•ืœืขืจ ื“ื ืก. ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹DNS-over-HTTPS, ืกืคึผืขืฆื™ืขืœ ืึธืคึผืฆื™ืขืก ื–ืขื ืขืŸ ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ ื‘ืœืขื˜ืขืจืขืจ ืกืขื˜ื˜ื™ื ื’ืก ื•ื•ืึธืก ืœืึธื–ืŸ ืื™ืจ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ DNS-over-HTTPS ืึธื“ืขืจ ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ืึท ืึทื ื“ืขืจืฉ ืฉืคึผื™ื™ึทื–ืขืจ.

ืœืึธืžื™ืจ ืฆื•ืจื™ืงืจื•ืคืŸ ืึทื– DNS-over-HTTPS ืงืขื ืขืŸ ื–ื™ื™ืŸ ื ื•ืฆื™ืง ืคึฟืึทืจ ืคึผืจืขื•ื•ืขื ื˜ื™ื ื’ ืœื™ืงืก ืคื•ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ื’ืขื‘ืขื˜ืŸ ื‘ืึทืœืขื‘ืึธืก ื ืขืžืขืŸ ื“ื•ืจืš ื“ื™ DNS ืกืขืจื•ื•ืขืจืก ืคื•ืŸ ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื–, ืงืึทืžื‘ืึทื˜ื™ื ื’ MITM ืื ืคืืœืŸ ืื•ืŸ ื“ื ืก ืคืึทืจืงืขืจ ืกืคึผืึธืึธืคื™ื ื’ (ืœืžืฉืœ, ื•ื•ืขืŸ ืงืึทื ืขืงื˜ื™ื ื’ ืฆื• ืฆื™ื‘ื•ืจ Wi-Fi), ืงืึทื•ื ื˜ืขืจื™ื ื’. ื‘ืœืึทืงื™ื ื’ ืื•ื™ืฃ ื“ื™ ื“ื ืก ืžื“ืจื’ื” (ื“ื ืก-ืื™ื‘ืขืจ-ื”ื˜ื˜ืคึผืก ืงืขื ืขืŸ ื ื™ืฉื˜ ืคืึทืจื‘ื™ื™ึทื˜ืŸ ืึท ื•ื•ืคึผืŸ ืื™ืŸ ื‘ื™ื™ืคึผืึทืกื™ื ื’ ื‘ืœืึทืงื™ื ื’ ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื•ื™ืฃ ื“ื™ ื“ืคึผื™ ืžื“ืจื’ื”) ืึธื“ืขืจ ืคึฟืึทืจ ืึธืจื’ืึทื ื™ื™ื–ื™ื ื’ ืึทืจื‘ืขื˜ ื•ื•ืขืŸ ืขืก ืื™ื– ืื•ืžืžืขื’ืœืขืš ืฆื• ื’ืœื™ื™ึทืš ืึทืงืกืขืก ื“ื ืก ืกืขืจื•ื•ืขืจืก (ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื•ื•ืขืŸ ืืจื‘ืขื˜ืŸ ื“ื•ืจืš ืึท ืคืจืืงืกื™). ืื•ื™ื‘ ืื™ืŸ ืึท ื ืึธืจืžืึทืœ ืกื™ื˜ื•ืึทืฆื™ืข ื“ื ืก ืจื™ืงื•ื•ืขืก ื–ืขื ืขืŸ ื’ืœื™ื™ืš ื’ืขืฉื™ืงื˜ ืฆื• ื“ื ืก ืกืขืจื•ื•ืขืจืก ื“ื™ืคื™ื™ื ื“ ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ, ืื™ืŸ ื“ืขื ืคืึทืœ ืคื•ืŸ ื“ื ืก-ืื™ื‘ืขืจ-ื”ื˜ื˜ืคึผืก ื“ื™ ื‘ืงืฉื” ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ื‘ืึทืœืขื‘ืึธืก IP ืึทื“ืจืขืก ืื™ื– ืขื ืงืึทืคึผืกืึทืœื™ื™ื˜ื™ื“ ืื™ืŸ ื”ื˜ื˜ืคึผืก ืคืึทืจืงืขืจ ืื•ืŸ ื’ืขืฉื™ืงื˜ ืฆื• ื“ื™ ื”ื˜ื˜ืคึผ ืกืขืจื•ื•ืขืจ, ื•ื•ื• ื“ืขืจ ืจืขืกืึธืœื•ื•ืขืจ ืคึผืจืึทืกืขืกืึทื– ืจื™ืงื•ื•ืขืก ื“ื•ืจืš ื•ื•ืขื‘ ืึทืคึผื™. ื“ื™ ื™ื’ื–ื™ืกื˜ื™ื ื’ DNSSEC ื ืึธืจืžืึทืœ ื ื™ืฆื˜ ืขื ืงืจื™ืคึผืฉืึทืŸ ื‘ืœื•ื™ื– ืฆื• ืึธื˜ืขื ื˜ืึทืงื™ื™ื˜ ื“ืขื ืงืœื™ืขื ื˜ ืื•ืŸ ืกืขืจื•ื•ืขืจ, ืึธื‘ืขืจ ื˜ื•ื˜ ื ื™ืฉื˜ ื‘ืึทืฉื™ืฆืŸ ืคืึทืจืงืขืจ ืคื•ืŸ ื™ื ื˜ืขืจืกืขืคึผืฉืึทืŸ ืื•ืŸ ื˜ื•ื˜ ื ื™ืฉื˜ ื’ืึทืจืึทื ื˜ื™ืจืŸ ื“ื™ ืงืึทื ืคืึทื“ืขื ืฉื™ืึทืœืึทื˜ื™ ืคื•ืŸ ืจื™ืงื•ื•ืขืก.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’