Abaphuhlisi beFirefox bakhululile ngentengiso ukubandakanywa kwemowudi I-DNS emiselweyo ngaphezulu kwe-HTTPS (DoH) yabasebenzisi eUnited States. Ukusukela namhlanje, iDoH yenziwe ngokungagqibekanga kulo lonke ufakelo olutsha ngabasebenzisi base-US. Ngelixa kubasebenzisi bangoku base-US bacwangciselwe ukutshintshela kwi-DoH kwiiveki ezimbalwa. Kwi-European Union nakwamanye amazwe, abakacwangcisi ukwenza i-DoH ngokungagqibekanga.
Abasebenzisi banokukhetha phakathi kwababoneleli ababini: i-Cloudflare kunye ne-NextDNS, ezithenjiweyo ezithembakeleyo. Emva kokuba benze i-DoH isebenze, baya kufumana isilumkiso esivumela umsebenzisi ukuba aphume kuncedo lwe-DoH DNS esembindini kwaye abuyele kwisikimu sendabuko ukuthumela izicelo ezingabhalwanga kumncedisi we-DNS.
Endaweni yesibonelelo esasazwayo sokuxazulula i-DNS, I-DoH isebenzisa ikhonkco kwinkonzo ethile ye-DoH, enokuthi ithathelwe ingqalelo njengenqaku elinye lokusilela. Umsebenzi okwangoku unikezelwa ngababoneleli ababini be-DNS: CloudFlare (default) kunye ne-NextDNS.
Ukubethela idatha ye-DNS nge-DoH linyathelo lokuqala nje. YeMozilla, Ukufuna iinkampani ezisingatha le datha ukuba zibe nemithetho emiselweyo, enjengezo zichazwe kwinkqubo ye-TRR, iqinisekisa ukuba ukufikelela kule datha akuphathwa gadalala. Ke ngoko, kunyanzelekile.
"Kubasebenzisi abaninzi, kunzima kakhulu ukwazi ukuba bayaphi izicelo zabo ze-DNS kwaye yintoni umxazululi ayenzayo nabo, utshilo u-Eric Rescorla, weFirefox CTO. "Inkqubo yeRoogle Trusted Recursive Resolver yenza ukuba iMozilla ithethathethane nabathengisi egameni layo kwaye ifune ukuba babenemigaqo-nkqubo yabucala engqongqo ngaphambi kokuphatha idatha ye-DNS." Kuyasivuyisa ukuba i-NextDNS isebenzisana nathi njengoko sisebenzela abantu ukuba baphinde balawule idatha kunye nobumfihlo kwi-intanethi. "
Umshicileli uqinisekile ukuba ngokudibanisa itekhnoloji elungileyo (DoH kule meko) kunye neemfuno ezingqongqo zokusebenza kwabo bayisebenzisayo, fumana amaqabane alungileyo kwaye baseke izivumelwano zomthetho ezibeka phambili imfihlo, ngokungagqibekanga iya kuphucula ubumfihlo bomsebenzisi.
Kubalulekile ukukhumbula oko I-DoH ingaluncedo ekupheliseni ukuvuza kolwazi kumagama okubamba acelwe ngeeseva ze-DNS zababoneleli, Ukulwa nokuhlaselwa kweMITM kwaye ubeke endaweni i-DNS traffic (umzekelo, xa uqhagamshela kwi-Wi-Fi yoluntu) kunye nokuphikisana ne-DNS (DoH) ayikwazi ukubuyisela i-VPN kwindawo yokuphepha iibhloko ezenziweyo kwinqanaba le-DPI) okanye ukuhlela umsebenzi ukuba akunakwenzeka ukufikelela ngqo kwi-DNS iiseva (umzekelo, xa usebenza ngummeli).
Ukuba kwimeko yesiqhelo, imibuzo ye-DNS ithunyelwa ngqo kwiiseva ze-DNS ezichazwe kuqwalaselo lwenkqubo, kwimeko ye-DoH, isicelo sokumisela idilesi ye-IP yomamkeli sifakwe kutrafikhi ye-HTTPS kwaye yathunyelwa kwiseva ye-HTTP apho isisombululo Iinkqubo ezenziwa ngewebhu API. Umgangatho okhoyo we-DNSSEC usebenzisa ukubethela kuphela ukuqinisekiswa kwabaxhasi kunye neseva.
Ukusetyenziswa kwe-DoH kunokubangela iingxaki kwiindawo ezinje ngeenkqubo zolawulo lwabazali, ukufikelela kwizithuba zamagama zangaphakathi kwiinkqubo zomdibaniso, Ukukhethwa kwendlela kwiinkqubo zokuphucula ukuhanjiswa komxholo kunye nokuthotyelwa kwemiyalelo yenkundla yokulwa ukusasazeka komxholo ongekho semthethweni kunye nokuxhatshazwa kwabantwana.
Ukujikeleza iingxaki ezinjalo, inkqubo yokungqinisisa iphunyeziwe kwaye yavavanywa ekhubaza ngokuzenzekelayo iDoH phantsi kweemeko ezithile.
Ukwenza utshintsho okanye ukucinywa komboneleli we-DoH kunokuba kuqwalaselo lonxibelelwano lwenethiwekhi. Umzekelo, unokuchaza enye iseva ye-DoH ukufikelela kwiiseva zikaGoogle, malunga: nokumisela.
Ixabiso le-0 likhubaza ngokupheleleyo, ngelixa i-1 isetyenziselwa ukwenza nantoni na ekhawulezayo, i-2 isebenzisa amaxabiso asisiseko kunye ne-backup ye-DNS, i-3 isebenzisa kuphela i-DoH kunye ne-4 kukusebenzisa imo yesipili apho iDoH kunye ne-DNS zisetyenziswa ngokufanayo .