ื“ื™ ืจื•ืกื™ืฉืข ืคืขื“ืขืจื™ื™ืฉืึทืŸ ื‘ื“ืขื” ืฆื• ืคืึทืจื‘ืึธื˜ ืคึผืจืึธื˜ืึธืงืึธืœืก ื•ื•ืึธืก ืœืึธื–ืŸ ืื™ื™ื ืขืจ ืฆื• ื‘ืึทื”ืึทืœื˜ืŸ ื“ื™ ื ืึธืžืขืŸ ืคื•ืŸ ืึท ื•ื•ืขื‘ื–ื™ื™ื˜ืœ

ืื ื’ืขื”ื•ื™ื‘ืŸ ืฆื™ื‘ื•ืจ ื“ื™ืกืงื•ืกื™ืข ืึท ืคึผืœืึทืŸ ืœืขื’ืึทืœ ืึทืงื˜ ืื•ื™ืฃ ืึทืžืขื ื“ืžืึทื ืฅ ืฆื• ื“ื™ ืคืขื“ืขืจืืœืข ื’ืขื–ืขืฅ "ืื•ื™ืฃ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข, ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืื•ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืคึผืจืึทื˜ืขืงืฉืึทืŸ", ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ื•ืจืš ื“ืขืจ ืžื™ื ื™ืกื˜ืขืจื™ื•ื ืคื•ืŸ ื“ื™ื’ื™ื˜ืึทืœ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’, ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืื•ืŸ ืžืึทืกืข ืงืึธืžื•ื ื™ืงืึทืฆื™ืข. ื“ื™ ื’ืขื–ืขืฅ ืœื™ื™ื’ื˜ ืฆื• ื‘ืึทืงืขื ืขืŸ ืึท ืคืึทืจื‘ืึธื˜ ืื•ื™ืฃ ื“ื™ ื ื•ืฆืŸ ืื•ื™ืฃ ื“ื™ ื˜ืขืจื™ื˜ืึธืจื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืจื•ืกื™ืฉืข ืคืขื“ืขืจื™ื™ืฉืึทืŸ ืคื•ืŸ "ืขื ืงืจื™ืคึผืฉืึทืŸ ืคึผืจืึธื˜ืึธืงืึธืœืก ื•ื•ืึธืก ืžืึทื›ืŸ ืขืก ืžืขื’ืœืขืš ืฆื• ื‘ืึทื”ืึทืœื˜ืŸ ื“ื™ ื ืึธืžืขืŸ (ื™ื“ืขื ื˜ื™ืคื™ืขืจ) ืคื•ืŸ ืึทืŸ ืื™ื ื˜ืขืจื ืขืฅ ื‘ืœืึทื˜ ืึธื“ืขืจ ืคึผืœืึทืฅ ืื•ื™ืฃ ื“ืขืจ ืื™ื ื˜ืขืจื ืขืฅ, ืึทื—ื•ืฅ ืคึฟืึทืจ ืงืึทืกืขืก ื’ืขื’ืจื™ื ื“ืขื˜ ื“ื•ืจืš ื“ื™ ืื™ื ื˜ืขืจื ืขืฅ. ื’ืขืกืขืฆ - ื’ืขื‘ื•ื ื’ ืคื•ืŸ ื“ื™ ืจื•ืกื™ืฉืข ืคืขื“ืขืจื™ื™ืฉืึทืŸ."

ืคึฟืึทืจ ื”ื™ืœืขืœ ืคื•ืŸ ื“ืขื ืคืึทืจื‘ืึธื˜ ืื•ื™ืฃ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืขื ืงืจื™ืคึผืฉืึทืŸ ืคึผืจืึธื˜ืึธืงืึธืœืก ื•ื•ืึธืก ืžืึทื›ืŸ ืขืก ืžืขื’ืœืขืš ืฆื• ื‘ืึทื”ืึทืœื˜ืŸ ื“ืขื ืคึผืœืึทืฅ ื ืึธืžืขืŸ, ืขืก ืื™ื– ืคืืจื’ืขืœื™ื™ื’ื˜ ืฆื• ื•ืคื”ืขื ื’ืขืŸ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืื™ื ื˜ืขืจื ืขื˜ ืžื™ื˜ืœ ื ื™ื˜ ืฉืคึผืขื˜ืขืจ ื•ื•ื™ 1 (ืื™ื™ืŸ) ื’ืขืฉืขืคื˜ ื˜ืึธื’ ืคื•ืŸ ื“ื™ ื“ืึทื˜ืข ืคื•ืŸ โ€‹โ€‹ื•ืคื“ืขืงื•ื ื’ ืคื•ืŸ ื“ืขื ื”ื™ืœืขืœ ื“ื•ืจืš. ื“ื™ ืึธื˜ืขืจื™ื™ื–ื“ ืคืขื“ืขืจืืœืข ื™ื’ื–ืขืงื™ืึทื˜ื™ื•ื• ื’ื•ืฃ. ื“ืขืจ ื”ื•ื™ืคึผื˜ ืฆื™ืœ ืคื•ืŸ ื‘ืœืึทืงื™ื ื’ ืื™ื– ื“ื™ TLS ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ื™ืขื“ืขืจ (ืึทืžืึธืœ ื‘ืืงืื ื˜ ื•ื•ื™ ESNI), ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ืงืึทื ื“ื–ืฉืึทื ื’ืงืฉืึทืŸ ืžื™ื˜ TLS 1.3 ืื•ืŸ ืฉื•ื™ืŸ ืืคื’ืขืฉื˜ืขืœื˜ ืื™ืŸ ื›ื™ื ืข. ื–ื™ื ื˜ ื“ื™ ื•ื•ืขืจื“ื™ื ื’ ืื™ืŸ ื“ื™ ืจืขื›ืขื ื•ื ื’ ืื™ื– ื•ื•ื™ื™ื’ ืื•ืŸ ืขืก ืื™ื– ืงื™ื™ืŸ ืกืคึผืขืฆื™ืคื™ืฉืงื™ื™ื˜, ืึทื—ื•ืฅ ืคึฟืึทืจ ECH / ESNI, ืคืึธืจืžืึทืœื™, ื›ึผืžืขื˜ ืงื™ื™ืŸ ืคึผืจืึธื˜ืึธืงืึธืœืก ื•ื•ืึธืก ืฆื•ืฉื˜ืขืœืŸ ืคื•ืœ ืขื ืงืจื™ืคึผืฉืึทืŸ ืคื•ืŸ ื“ื™ ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืงืึทื ืึทืœ, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืคึผืจืึธื˜ืึธืงืึธืœืก ื“ื ืก ืื™ื‘ืขืจ ื”ื˜ื˜ืคึผืก (ื“ืึธื”) ืื•ืŸ DNS ืื™ื‘ืขืจ TLS (ื“ืึธื˜).

ืœืึธืžื™ืจ ืฆื•ืจื™ืงืจื•ืคืŸ ืึทื– ืื™ืŸ ืกื“ืจ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื“ื™ ืึทืจื‘ืขื˜ ืคื•ืŸ ืขื˜ืœืขื›ืข ื”ื˜ื˜ืคึผืก ื–ื™ื™ื˜ืœืขืš ืื•ื™ืฃ ืื™ื™ืŸ IP ืึทื“ืจืขืก, ื“ื™ SNI ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ืื™ื– ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืื™ืŸ ืื™ื™ืŸ ืžืึธืœ, ื•ื•ืึธืก ื˜ืจืึทื ืกืžื™ื˜ื˜ ื“ื™ ื‘ืึทืœืขื‘ืึธืก ื ืึธืžืขืŸ ืื™ืŸ ืงืœืึธืจ ื˜ืขืงืกื˜ ืื™ืŸ ื“ื™ ClientHello ืึธื ื–ืึธื’ ื˜ืจืึทื ืกืžื™ื˜ื˜ืขื“ ืื™ื™ื“ืขืจ ื™ื ืกื˜ืึธืœื™ื ื’ ืึท ื™ื ืงืจื™ืคึผื˜ื™ื“ ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืงืึทื ืึทืœ. ื“ืขืจ ืฉื˜ืจื™ืš ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืื•ื™ืฃ ื“ืขืจ ื–ื™ื™ึทื˜ ืคื•ืŸ ื“ืขืจ ืื™ื ื˜ืขืจื ืขืฅ ืฉืคึผื™ื™ึทื–ืขืจ ืฆื• ืกืึทืœืขืงื˜ื™ื•ื•ืœื™ ืคื™ืœื˜ืขืจ HTTPS ืคืึทืจืงืขืจ ืื•ืŸ ืคื•ื ืึทื ื“ืขืจืงืœื™ื™ึทื‘ืŸ ื•ื•ืึธืก ื–ื™ื™ื˜ืœืขืš ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ืึธืคึผืขื ืก, ื•ื•ืึธืก ืงืขืŸ ื ื™ืฉื˜ ื“ืขืจื’ืจื™ื™ื›ืŸ ื’ืึทื ืฅ ืงืึทื ืคืึทื“ืขื ืฉื™ืึทืœืึทื˜ื™ ื•ื•ืขืŸ ื ื™ืฆืŸ HTTPS.

ECH / ESNI ื’ืึธืจ ื™ืœื™ืžืึทื ื™ื™ืฅ ื“ื™ ืœื™ืงืึทื“ื–ืฉ ืคื•ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ื’ืขื‘ืขื˜ืŸ ืคึผืœืึทืฅ ื•ื•ืขืŸ ืึทื ืึทืœื™ื™ื–ื™ื ื’ HTTPS ืงืึทื ืขืงืฉืึทื ื–. ืื™ืŸ ืงืึธืžื‘ื™ื ืึทืฆื™ืข ืžื™ื˜ ืึทืงืกืขืก ื“ื•ืจืš ืึท ืื™ื ื”ืึทืœื˜ ืขืงืกืคึผืจืขืก ื ืขืฅ, ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ECH / ESNI ืื•ื™ืš ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ื‘ืึทื”ืึทืœื˜ืŸ ื“ื™ IP ืึทื“ืจืขืก ืคื•ืŸ ื“ื™ ื’ืขื‘ืขื˜ืŸ ืžื™ื˜ืœ ืคื•ืŸ ื“ืขืจ ืฉืคึผื™ื™ึทื–ืขืจ - ืคืึทืจืงืขืจ ื“ื•ืจื›ืงื•ืง ืกื™ืกื˜ืขืžืขืŸ ื–ืขืŸ ื‘ืœื•ื™ื– ืจื™ืงื•ื•ืขืก ืฆื• ื“ื™ CDN ืื•ืŸ ืงืขื ืขืŸ ื ื™ืฉื˜ ืึธื ื•ื•ืขื ื“ืŸ ื‘ืœืึทืงื™ื ื’ ืึธืŸ ืกืคึผืึธืึธืคื™ื ื’ ื“ื™ TLS ืกืขืกื™ืข, ืื™ืŸ ื•ื•ืขืœื›ืข ืคืึทืœ ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ืก ื‘ืœืขื˜ืขืจืขืจ ืึท ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืึธื ื–ืึธื’ ื•ื•ืขื’ืŸ ื“ื™ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื–ืŸ. ืื•ื™ื‘ ืึทืŸ ECH/ESNI ืคืึทืจื‘ืึธื˜ ืื™ื– ื‘ืึทืงืขื ืขื , ื“ืขืจ ื‘ืœื•ื™ื– ื•ื•ืขื’ ืฆื• ืงืึทืžื‘ืึทื˜ ื“ืขื ืžืขื’ืœืขื›ืงื™ื™ื˜ ืื™ื– ืฆื• ื’ืึธืจ ื‘ืึทื’ืจืขื ืขืฆืŸ ืึทืงืกืขืก ืฆื• ืื™ื ื”ืึทืœื˜ ื“ืขืœื™ื•ื•ืขืจื™ ื ืขื˜ื•ื•ืึธืจืงืก (CDNs) ื•ื•ืึธืก ืฉื˜ื™ืฆืŸ ECH/ESNI, ืึทื ื“ืขืจืฉ ื“ืขืจ ืคืึทืจื‘ืึธื˜ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื™ื ื™ืคืขืงื˜ื™ื•ื• ืื•ืŸ ืงืขื ืขืŸ ืœื™ื™ื›ื˜ ื–ื™ื™ืŸ ืกืขืจืงืึทืžื•ื•ืขื ื˜ื™ื“ ื“ื•ืจืš CDNs.

ื•ื•ืขืŸ ื ื™ืฆืŸ ECH / ESNI, ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ื ืึธืžืขืŸ, ื•ื•ื™ ืื™ืŸ SNI, ืื™ื– ื˜ืจืึทื ืกืžื™ื˜ื˜ืขื“ ืื™ืŸ ื“ื™ ClientHello ืึธื ื–ืึธื’, ืึธื‘ืขืจ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ื“ืึทื˜ืŸ ื˜ืจืึทื ืกืžื™ื˜ื˜ืขื“ ืื™ืŸ ื“ืขื ืึธื ื–ืึธื’ ืื™ื– ื™ื ืงืจื™ืคึผื˜ื™ื“. ืขื ืงืจื™ืคึผืฉืึทืŸ ื ื™ืฆื˜ ืึท ืกื•ื“ ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื“ ืคื•ืŸ ื“ื™ ืกืขืจื•ื•ืขืจ ืื•ืŸ ืงืœื™ืขื ื˜ ืฉืœื™ืกืœืขืŸ. ืฆื• ื“ืขืงืจื™ืคึผื˜ ืึท ื™ื ื˜ืขืจืกืขืคึผื˜ืึทื“ ืึธื“ืขืจ ื‘ืืงื•ืžืขืŸ ECH / ESNI ืคืขืœื“ ื•ื•ืขืจื˜, ืื™ืจ ืžื•ื–ืŸ ื•ื•ื™ืกืŸ ื“ืขื ืงืœื™ืขื ื˜ ืก ืึธื“ืขืจ ืกืขืจื•ื•ืขืจ ืก ืคึผืจื™ื•ื•ืึทื˜ ืฉืœื™ืกืœ (ืคึผืœื•ืก ื“ื™ ืกืขืจื•ื•ืขืจ ืก ืึธื“ืขืจ ืงืœื™ืขื ื˜ ืก ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœืขืŸ). ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœืขืŸ ืื™ื– ื˜ืจืึทื ืกืžื™ื˜ื˜ืขื“ ืคึฟืึทืจ ื“ื™ ืกืขืจื•ื•ืขืจ ืฉืœื™ืกืœ ืื™ืŸ ื“ื ืก, ืื•ืŸ ืคึฟืึทืจ ื“ื™ ืงืœื™ืขื ื˜ ืฉืœื™ืกืœ ืื™ืŸ ื“ื™ ClientHello ืึธื ื–ืึธื’. ื“ืขืงืจื™ืคึผื˜ื™ืึธืŸ ืื™ื– ืื•ื™ืš ืžืขื’ืœืขืš ืžื™ื˜ ืึท ืฉืขืจื“ ืกื•ื“ ื•ื•ืึธืก ืื™ื– ืžืกื›ื™ื ื‘ืขืฉืึทืก ื“ื™ ืกืขื˜ืึทืคึผ ืคื•ืŸ ื“ื™ TLS ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’, ื‘ืึทื•ื•ื•ืกื˜ ื‘ืœื•ื™ื– ืฆื• ื“ืขืจ ืงืœื™ืขื ื˜ ืื•ืŸ ืกืขืจื•ื•ืขืจ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’