Google Chrome
Mushure meMozilla, Google yakazivisa chinangwa chayo chekuyedza kuyedza Chrome browser yekushandisa ne «DNS pamusoro peHTTPS » (DoH, DNS pamusoro peHTTPS). Nokuburitswa kweChannel 78, yakarongerwa Gumiguru 22.
Zvimwe zvikamu zvevashandisi nekutadza zvinokwanisa kutora chikamu mukuyedza Kugonesa DoH, vashandisi chete ndivo vanozotora chikamu mune yazvino system gadziriso, iyo inozivikanwa nevamwe vatapi veDNS vanotsigira DoH.
Iyo DNS mupi whitelist inosanganisira services of Google, Cloudflare, OpenDNS, Quad9, Cleanbrowsing uye DNS.SB. Kana marongero eDNS emushandisi akatsanangura imwe yeeseva ari pamusoro apa eDNS, DoH muChannel ichave inogoneswa nekutadza.
Kune avo vanoshandisa iyo sevha yeDNS yakapihwa neiyo yemuno Internet sevhisi mupi, zvese zvicharamba zvisina kuchinja uye iyo system resolution ichaenderera ichishandiswa kune DNS mibvunzo.
Musiyano wakakosha kubva mukuitwa kweDoH muFirefox, umo kuiswa zvishoma nezvishoma kweiyo default DoH ichatanga pakupera kwaGunyana, ndiko kushaikwa kwekubatanidza kune imwechete seDoH sevhisi.
Kana Firefox ikashandisa iyo CloudFlare DNS server nekukasira, Chrome ichagadzirisa nzira yekushanda neDNS kune yakaenzana sevhisi, pasina kushandura iyo DNS inopa.
Kana zvichidikanwa, mushandisi anogona kugonesa kana kudzima DoH uchishandisa iyo "chrome: // mireza / # dns-pamusoro-https" kurongedza. Chii chimwe nzira nhatu dzekushanda dzinotsigirwa "Yakachengeteka", "otomatiki" uye "bvisa".
- Mune "yakachengeteka" maitiro, mauto anongomisikidzwa chete zvichienderana neakambochengetedzwa akachengetedzeka hunhu (akagamuchirwa pamusoro pechengetedzwa kwakabatana) uye zvikumbiro kuburikidza neDoH, kudzosera kune zvakajairwa DNS haina kuiswa.
- Mune "otomatiki" maitiro, kana DoH uye cache yakachengeteka isipo, zvinokwanisika kugamuchira data kubva kune isina kuchengetedzeka cache uye kuiwana kuburikidza neyechinyakare DNS.
- Mune "off" mode, cache yakawanda inotariswa kutanga uye, kana pasina dhata, chikumbiro chinotumirwa kuburikidza neiyo DNS system. Iyo modhi inoiswa kuburikidza kDnsOverHttpsMode marongero uye iyo server mapping template kuburikidza kDnsOverHttpsTemplates.
Kuedza kugonesa DoH kuchaitwa pane ese mapuratifomu akatsigirwa muChannel, Kunze kweLinux neIOS, nekuda kweiyo isiri-diki iyo yekugadzirisa dhizaini yekumisikidza uye kushomeka kwekuwana iyo DNS system kumisikidzwa.
Muchiitiko chekuti mushure mekugonesa DoH pane kukundikana kutumira zvikumbiro kuDoH server (semuenzaniso nekuda kwenetiweki yekubatanidza kupunzika, kutadza kana kukundikana), bhurawuza rinongo dzoreredza iyo DNS system marongero.
Chinangwa chekuyedza ndechekupedzisa kuitiswa kweDoH uye kuongorora kukonzeresa kwekushandisa kweDoH pane kuita.
Izvo zvinofanirwa kucherechedzwa kuti, muchokwadi, rutsigiro rweDoH rwakawedzerwa kune iyo Chrome codebase muna Kukadzi, asi kugadzirisa uye kugonesa DoH, Chrome yaifanira kuvhura ine yakasarudzika mureza uye isiri-yakajeka seti yesarudzo.
Izvo zvakakosha kuti uzive izvozvo DoH inogona kubatsira mukubvisa zita rezita rezita kuburitsa - kukumbirwa kuburikidza nemaseva eDNS evanopa, kurwisa MITM kurwisa uye kutsiva DNS traffic (semuenzaniso, kana uchibatana neruzhinji rweWi-Fi) uye unopikisa DNS-chikamu ichivharira (DoH) haigone kutsiva VPN munzvimbo yekudzivirira mabhuroko anoitwa padanho reDPI) kana kuronga basa kana zvisingaite kuwana zvakananga kune maSeva eDNS (semuenzaniso, kana uchishanda kuburikidza neye proxy).
Kana zviri mumamiriro ezvinhu akajairika, mibvunzo yeDNS inotumirwa yakananga kumaseva eDNS akatsanangurwa musystem system, saka mune iyo DoH, chikumbiro chekuona iyo inomiririra IP kero yakavharirwa muHTTPS traffic uye inotumirwa kune server HTTP umo iyo kugadzirisa matanho zvikumbiro kuburikidza newebhu webhu.
Iyo iripo DNSSEC standard inoshandisa kunyorera chete kune mutengi uye server sosi.