Mozilla inoronga kugonesa DNS pamusoro peHTTPS muFirefox

Firefox uye zvakavanzika

Vagadziri veFirefox vakazivisa kupedzwa kweDNS pamusoro pekuedzwa kwekutsigirwa kweHTTPS (DoH) pamwe nechinangwa pakupera kwaGunyana kuti ikwanise iyi tekinoroji nekutadza yevashandisi veFirefox muUnited States.

Iko kubatanidzwa kuchaitwa zvishoma nezvishoma sezvo pakutanga pachave nevashandisi vashoma, mushure meizvozvo, mukushayikwa kwematambudziko, inowedzera zvishoma nezvishoma kusvika zana muzana revashandisi muUnited States vaine chinhu ichi. Asi izvi hazvisi zvega kumatunhu sekunge wapedza kufukidza kweUS. kuiswa mune dzimwe nyika kuchafungidzirwawo.

Miedzo yakaitwa mukati megore yakaratidza kuvimbika uye kuita kwakanaka kwebasa uye zvakare vakazivisa mamwe mamiriro ezvinhu umo DoH inogona kuunza matambudziko uye nekugadzirisa mhinduro dzekuzvidzivirira (semuenzaniso, matambudziko nekugadziriswa kwetraffic mune zvemukati zvekuburitsa netiweki, kutonga kwevabereki uye nekambani kutonga mukati).

Iko kukosha kwekunyora encrypted DNS traffic kunoongororwa sechinhu chakakosha zvakanyanya chinhu mukudzivirira vashandisi, saka zvakatemwa kugonesa DoH nekukanganisa, asi muchikamu chekutanga chete chevashandisi veUS.

Mushure mekumisikidza DoH, yambiro ichapihwa mushandisi, iyo inobvumidza iwe kuramba kubata yepakati DoH DNS maseva uye kudzoka kune yechinyakare chirongwa chekutumira zvisina kunyorwa zvikumbiro kumupi weDNS server (pachinzvimbo chakaparadzirwa zvivakwa zveDNS zvinogadzirisa, DoH inoshandisa inosunga kune iyo DoH sevhisi iyo inogona kutariswa se poindi imwechete yekutadza).

Kana DoH ichiitwa, masisitimu evabereki ekudzora uye maratidziro emakambani anogona kukanganiswa, uchishandisa iyo DNS zita dhizaini inowanikwa chete kune yemukati network kududzira intranet kero uye yemakambani makosi.

Kugadzirisa matambudziko nehurongwa hwakafanana, sisitimu yekuongorora yakawedzerwa iyo inodzivisa zvawo DoH. Macheke anoitwa nguva yega yega bhurawuza parinotanga kana kana shanduko mu subnet yaonekwa.

Anodzokera otomatiki pakushandisa standard solver inopihwa zvakare yeiyo inoshanda sisitimu kana zvikakundikana paunenge uchigadzirisa kuburikidza neDoH (semuenzaniso, kana paine kukanganisa kwekuwanika kwenetwork pamwe nemupi weDoH kana kana paine kukundikana mune zvivakwa zvacho).

Zvinorehwa nekutarisa kwakadai hazvina chokwadi, nekuti hapana anopindira varwadzi vanodzora solver kana anogona kukanganisa traffic, ivo vanoteedzera iwo maitiro kudzima kunyorera kweDNS traffic.

Dambudziko rakagadziriswa nekuwedzera iyo chinhu "DoH nguva dzose" kune iyo yekumisikidza (nekumisikidza haina kushanda), painogadziriswa, kudzima otomatiki hakushandiswe, kunova kuwirirana kunonzwisisika.

Kuti uone solver yemubatanidzwa, kuongororwa kwenzvimbo dzekunze kwepamusoro-soro (TLDs) uye kudzoka kwemakero eIntranet neyakagadziriswa sisitimu inoitwa.

Kuti uone kana kudzora kwevabereki kuchigoneswa, kuyedza kunoitwa kugadzirisa zita exampleadultsite.com uye kana mhedzisiro yacho isingaenderane neiyo chaiyo IP, zvemukati zvevakuru zvinoonekwa sekuvharirwa padanho reDNS.

Shanda kuburikidza neyechete DoH sevhisi zvinogona zvakare kutungamira kumatambudziko ekugadzirisa traffic pane zvemukati zvekuburitsa netiweki dzinoenzanisa traffic uchishandisa DNS (iyo CDN's DNS server inogadzira mhinduro zvinoenderana nekodhi yekugadzirisa uye inoparadzira iyo yepedyo inomiririra kuti igamuchire zvirimo).

Kutumira iyo DNS query kubva kune inogadzirisa padyo padyo nemushandisi pane akadai maCDN kunodzosera kero yeMubati padhuze nemushandisi, asi kutumira iyo DNS query kubva kune yepakati resolution inogadzirisa kero yemubati padyo neDNS server pamusoro peHTTPS.

Dzidzira bvunzo dzakaratidza kuti kushandisa DNS pamusoro peHTTP paunenge uchishandisa CDN kwakatungamira kune chero kunonoka zvisati zvatumirwa zvemukati (zvekukurumidza kubatana, kunonoka hakuna kudarika mamirioni gumi, uye kunyangwe kushanda kunononoka kwaionekwa mune anononoka kutaurirana nzira).

mabviro: https://blog.mozilla.org/


Izvo zviri muchinyorwa zvinoomerera pamisimboti yedu ye tsika dzekunyora. Kuti utaure chikanganiso tinya pano.

Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa.

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako