Vagadziri veFirefox vakazivisa kupedzwa kweDNS pamusoro pekuedzwa kwekutsigirwa kweHTTPS (DoH) pamwe nechinangwa pakupera kwaGunyana kuti ikwanise iyi tekinoroji nekutadza yevashandisi veFirefox muUnited States.
Iko kubatanidzwa kuchaitwa zvishoma nezvishoma sezvo pakutanga pachave nevashandisi vashoma, mushure meizvozvo, mukushayikwa kwematambudziko, inowedzera zvishoma nezvishoma kusvika zana muzana revashandisi muUnited States vaine chinhu ichi. Asi izvi hazvisi zvega kumatunhu sekunge wapedza kufukidza kweUS. kuiswa mune dzimwe nyika kuchafungidzirwawo.
Miedzo yakaitwa mukati megore yakaratidza kuvimbika uye kuita kwakanaka kwebasa uye zvakare vakazivisa mamwe mamiriro ezvinhu umo DoH inogona kuunza matambudziko uye nekugadzirisa mhinduro dzekuzvidzivirira (semuenzaniso, matambudziko nekugadziriswa kwetraffic mune zvemukati zvekuburitsa netiweki, kutonga kwevabereki uye nekambani kutonga mukati).
Iko kukosha kwekunyora encrypted DNS traffic kunoongororwa sechinhu chakakosha zvakanyanya chinhu mukudzivirira vashandisi, saka zvakatemwa kugonesa DoH nekukanganisa, asi muchikamu chekutanga chete chevashandisi veUS.
Mushure mekumisikidza DoH, yambiro ichapihwa mushandisi, iyo inobvumidza iwe kuramba kubata yepakati DoH DNS maseva uye kudzoka kune yechinyakare chirongwa chekutumira zvisina kunyorwa zvikumbiro kumupi weDNS server (pachinzvimbo chakaparadzirwa zvivakwa zveDNS zvinogadzirisa, DoH inoshandisa inosunga kune iyo DoH sevhisi iyo inogona kutariswa se poindi imwechete yekutadza).
Kana DoH ichiitwa, masisitimu evabereki ekudzora uye maratidziro emakambani anogona kukanganiswa, uchishandisa iyo DNS zita dhizaini inowanikwa chete kune yemukati network kududzira intranet kero uye yemakambani makosi.
Kugadzirisa matambudziko nehurongwa hwakafanana, sisitimu yekuongorora yakawedzerwa iyo inodzivisa zvawo DoH. Macheke anoitwa nguva yega yega bhurawuza parinotanga kana kana shanduko mu subnet yaonekwa.
Anodzokera otomatiki pakushandisa standard solver inopihwa zvakare yeiyo inoshanda sisitimu kana zvikakundikana paunenge uchigadzirisa kuburikidza neDoH (semuenzaniso, kana paine kukanganisa kwekuwanika kwenetwork pamwe nemupi weDoH kana kana paine kukundikana mune zvivakwa zvacho).
Zvinorehwa nekutarisa kwakadai hazvina chokwadi, nekuti hapana anopindira varwadzi vanodzora solver kana anogona kukanganisa traffic, ivo vanoteedzera iwo maitiro kudzima kunyorera kweDNS traffic.
Dambudziko rakagadziriswa nekuwedzera iyo chinhu "DoH nguva dzose" kune iyo yekumisikidza (nekumisikidza haina kushanda), painogadziriswa, kudzima otomatiki hakushandiswe, kunova kuwirirana kunonzwisisika.
Kuti uone solver yemubatanidzwa, kuongororwa kwenzvimbo dzekunze kwepamusoro-soro (TLDs) uye kudzoka kwemakero eIntranet neyakagadziriswa sisitimu inoitwa.
Kuti uone kana kudzora kwevabereki kuchigoneswa, kuyedza kunoitwa kugadzirisa zita exampleadultsite.com uye kana mhedzisiro yacho isingaenderane neiyo chaiyo IP, zvemukati zvevakuru zvinoonekwa sekuvharirwa padanho reDNS.
Shanda kuburikidza neyechete DoH sevhisi zvinogona zvakare kutungamira kumatambudziko ekugadzirisa traffic pane zvemukati zvekuburitsa netiweki dzinoenzanisa traffic uchishandisa DNS (iyo CDN's DNS server inogadzira mhinduro zvinoenderana nekodhi yekugadzirisa uye inoparadzira iyo yepedyo inomiririra kuti igamuchire zvirimo).
Kutumira iyo DNS query kubva kune inogadzirisa padyo padyo nemushandisi pane akadai maCDN kunodzosera kero yeMubati padhuze nemushandisi, asi kutumira iyo DNS query kubva kune yepakati resolution inogadzirisa kero yemubati padyo neDNS server pamusoro peHTTPS.
Dzidzira bvunzo dzakaratidza kuti kushandisa DNS pamusoro peHTTP paunenge uchishandisa CDN kwakatungamira kune chero kunonoka zvisati zvatumirwa zvemukati (zvekukurumidza kubatana, kunonoka hakuna kudarika mamirioni gumi, uye kunyangwe kushanda kunononoka kwaionekwa mune anononoka kutaurirana nzira).
mabviro: https://blog.mozilla.org/
Iva wekutanga kutaura