Google Chrome
Mozilla ka dib, Shirkadda Google ayaa shaacisay ujeedkeeda ah inay sameyso tijaabo ay ku tijaabinayso Hirgelinta biraawsarka Chrome leh «DNS ka badan HTTPS » (DoH, DNS ka badan HTTPS). Markii la sii daayay Chrome 78, loo qorsheeyay Oktoobar 22.
Qeybaha qaar ee adeegsadayaasha markii ugu horreysa waxay awoodi doonaan inay kaqeybqaataan tijaabada Si loo xoojiyo DoH, dadka isticmaala oo keliya ayaa ka qaybqaadan doona qaabeynta nidaamka hadda jira, oo ay aqoonsan yihiin bixiyeyaasha DNS qaarkood ee taageera DoH.
Adeeg bixiyaha DNS-ka waxaa kujira adeegyada Google, Cloudflare, OpenDNS, Quad9, Cleanbrowsing iyo DNS.SB. Haddii dejimaha DNS ee isticmaalaha ay sheegaan mid ka mid ah server-yada DNS ee kor ku xusan, DoH ee Chrome ayaa lagu shaqeysiin doonaa asal ahaan.
Kuwa isticmaalaya server-yada DNS-ka ah ee ay bixiso bixiyaha adeegga internetka ee maxalliga ah, wax waliba isma beddeli doonaan oo xalka nidaamka ayaa sii wadi doona in loo isticmaalo su'aalaha DNS.
Farqi muhiim ah oo ka imanaya hirgelinta DoH Firefox, oo si tartiib tartiib ah loogu soo daro DoH waxay bilaaban doontaa dhamaadka Sebtember, waa la'aanta isku xirnaashada hal adeeg oo ah DoH.
Haddii Firefox adeegsato CloudFlare DNS server-ka asal ahaan, Chrome waxay cusbooneysiin doontaa oo keliya habka ay ula shaqeyso DNS adeeg u dhigma, iyadoon beddelin bixiyaha DNS.
Haddii la doonayo, isticmaalaha ayaa awood u yeelan kara ama joojin kara DoH adoo adeegsanaya "chrome: // flags / # dns-over-https" dejinta. Maxaa intaa dheer saddex nooc oo hawlgal ayaa la taageerayaa "Ammaan", "otomaatig ah" iyo "off".
- Habka "nabdoon", dadka martida loo yahay waxaa lagu go'aamiyaa oo keliya iyadoo lagu saleynayo qiimayaasha nabdoon ee hore la keydiyay (oo laga helay xiriir aamin ah) iyo codsiyada iyada oo loo marayo DoH, dib loogu laabo DNS-ka caadiga ah lama dabaqo.
- Qaabka "otomatiga ah", haddii DoH iyo keydka aaminka ah aan la heli karin, waxaa suurtagal ah in xog laga helo keyd aan ammaan lahayn oo laga helo marin dhaqameed DNS ah.
- In "off" mode, khasnadda guud ayaa marka hore la hubiyaa iyo, haddii aysan jirin wax xog ah, codsiga waxaa loo diraa iyada oo loo marayo nidaamka nidaamka DNS. Habka waxaa loo dejiyey iyada oo loo marayo dejinta kDnsOverHttpsMode iyo shaxanka khariidaynta adeegga iyada oo loo marayo kDnsOverHttpsTemplates.
Tijaabada lagu xoojinayo DoH waxaa lagu fulin doonaa dhamaan barnaamijyada la taageero ee Chrome, marka laga reebo Linux iyo iOS, iyadoo ay ugu wacan tahay dabeecadda yar-yar ee falanqaynta qaabeynta xallinta iyo helitaanka xaddidan qaabeynta nidaamka DNS.
Haddii ay dhacdo in ka dib marka loo oggolaado DoH ay jiraan guuldarrooyin in loo diro codsiyo loogu talagalay serverka DoH (tusaale ahaan, sababtoo ah xannibaadda, fashilka ama isku xirnaanta isku xirnaanta shabakadda), barowsarku wuxuu si otomaatig ah u soo celin doonaa nidaamka nidaamka DNS.
Ujeedada tijaabada ayaa ah in la dhameystiro hirgelinta DoH lana baaro saameynta dalabka DoH uu ku leeyahay waxqabadka.
Waa in la ogaadaa in, dhab ahaantii, taageerada DoH lagu daray koodhka Chrome bishii Febraayo, laakiin si loo habeeyo loona xoojiyo DoH, Chrome waxay ahayd inay ku bilawdo calan gaar ah iyo xulashooyin aan muuqan.
Waa muhiim inaad ogaato taas DoH waxay kaa caawin kartaa baabi'inta macluumaadka sirta ee magaca martida codsatay iyada oo loo marayo server-yada DNS ee bixiyeyaasha, la dagaallama weerarada MITM oo beddel taraafikada DNS (tusaale ahaan, marka lagu xirayo Wi-Fi dadweynaha) iyo ka soo horjeedka xayiraadda heerka DNS (DoH) ma beddeli karto VPN aagga ka gudubka qufulada la hirgeliyay ee heerka DPI) ama abaabulidda shaqo haddii aysan suurtagal ahayn in si toos ah loo helo Server DNS (tusaale ahaan, markaad ka shaqeyneyso wakiil).
Haddii xaaladaha caadiga ah, weydiimaha DNS si toos ah loogu diro server-yada DNS ee lagu qeexay qaabeynta nidaamka, markaa marka laga hadlayo DoH, codsiga lagu go'aaminayo cinwaanka IP-ga martigeliyaha ayaa lagu soo koobay taraafikada HTTPS waxaana loo dirayaa server HTTP kaas oo xallinta ayaa ka baaraandegta codsiyada iyadoo loo marayo shabakadda API.
Heerka DNSSEC ee hadda jira wuxuu adeegsadaa sir-gelinta keliya macmiilka iyo xaqiijinta adeegga.