Ishyirwa ahagaragara rya DNS y’igenewe
—
Ihuriro na DNS
Ikizamini cya Encrypted ClientHello
Tandukanya igenamiterere rya ECH ryashyizwe ahagaragara n’igihamya cy’uko ihuriro rya mushakisha rikora ubu ryayikoresheje koko.
ech byemeza gusa ko gihari; imiterere n’imikoreshereze nyayo bisuzumwa ukwayo.Ikizamini ntikiratangira
Kuboneka kwa DNS n’imikoreshereze nyayo byerekanwa ukwayo.
Ihuriro ry’iyi paji
Raporo yuzuye ya JSON
Aucun rapport.
Gereranya mbere na nyuma
Kora ikizamini kimwe ku gikoresho kimwe kandi ubike igisubizo cy’ibanze. Fungura VPN yawe cyangwa uhindure igenamiterere rimwe bireba, wongere ukore ikizamini mu mimerere imwe kandi ubike igisubizo gikurikira.
Bika igisubizo cya mbere n’icya nyuma kugira ngo ubigereranye.
Icyo iki kizamini kikubwira
Encrypted ClientHello, cyangwa ECH, ihisha amakuru y’imbere yo gutangira TLS, harimo izina rya seriveri igenewe, iyo yemewe. Domaine ishyira ahagaragara igenamiterere rya ECH ni kimwe gusa mu bisabwa. Iki gikoresho gitandukanya iyo myiteguro n’ikimenyetso cyeruye cy’ihuriro rya mushakisha ukoresha ubu.
Uko wakora ikizamini
- Suzuma seriveri y’iyi paji, cyangwa winjize irindi zina rya seriveri kugira ngo ushakishe igenamiterere rya DNS.
- Kora igenzura kandi usome ishyirwa ahagaragara rya DNS n’igihamya cy’ihuriro nk’ibisubizo bibiri bitandukanye.
- Emeza seriveri n’igice cy’ihuriro ikimenyetso gisobanura mbere yo kugifata nk’igihamya cyo kwemerwa.
Uko gupima bikora
Seriveri isuzuma inyandiko za DNS HTTPS kandi ikasesengura igenamiterere ryazo rya ECH. Itandukanya ukuba rihari, kuba imiterere yaryo yemewe n’amagenamiterere igikoresho cyayo cyo gusesengura gisobanukiwe.
Igihamya cy’ihuriro rikora ubu kiva ku bimenyetso byeruye by’aho TLS irangirira, ikimenyetso cyemewe cyo ku mpera y’umuyoboro cyangwa inzira ifitanye isano n’inkomoko aho biboneka. Ibibazo bya DNS bivugana n’utanga DNS-over-HTTPS wagenwe kandi bishobora gukoresha ububiko bw’agateganyo.
Gusobanukirwa ibisubizo byawe
- ECH yemerewe kuri iri huriro
- Ikimenyetso cyeruye kigaragarira mushakisha cyemeza ko yemerewe ku nkomoko iriho ubu. Ibi ni igihamya gikomeye kurusha igenamiterere rya DNS cyangwa ubushobozi bwa mushakisha.
- Igenamiterere ryashyizwe ahagaragara nta gihamya yo kwemerwa
- Domaine itangaza igenamiterere rya ECH, ariko kubishyira ahagaragara gusa ntibyemeza ko ikoreshwa ku ihuriro ryawe. Igenamiterere rishobora kandi kutemerwa n’igikoresho cyo kurisesengura.
- Amakuru adahishe, inzira y’ubundi cyangwa ntibizwi
- Ikimenyetso cyizewe cy’ihuriro gishobora kugaragaza ko itemewe. Ibimenyetso bibura cyangwa bidafite urwego rusobanutse bituma igisubizo cya mushakisha kitamenyekana; GREASE ni ikimenyetso cy’urwiganwa cyo kugenzura guhuza, si ECH yagenze neza.
Gereranya mbere na nyuma
- Bika inkomoko, uko igenamiterere rya DNS rihagaze n’ikimenyetso cy’ihuriro kigaragarira mushakisha.
- Hindura igenamiterere rimwe rya mushakisha cyangwa DNS bireba kandi ushyireho ihuriro rishya ku nkomoko imwe.
- Gereranya ukwemerwa kweruye ukutandukanye n’ishyirwa ahagaragara rya DNS. Gushakisha irindi zina rya seriveri ntibishobora gukoresha igihamya cy’ihuriro ry’iyi paji.
Imbogamizi z’ikizamini
- TLS 1.3, mushakisha iherutse cyangwa ikintu kimwe cya ECH ubwabyo ntibyemeza ko ECH ikoreshwa.
- ECH ntihisha IP igenewe, amakuru yose ajyanye n’itumanaho cyangwa amakuru utanga nyuma yo guhuza.
Icyo wahindura, niba bikenewe
- Igenamiterere rirahari ariko ECH ntiyemewe
- Genzura niba mushakisha iyemera n’inzira ya DNS yagenewe, hanyuma wongere ugerageze ihuriro rishya ukomeza kubika ibisobanuro by’inzira y’ubundi.
- Ikimenyetso cy’ihuriro ntikiboneka
- Komeza uvuge ko igisubizo kitazwi; guhindura VPN ntibishobora gukora ikimenyetso kibura cyo kwemerwa ku ruhande rwa seriveri.
Ibibazo bikunze kubazwa
Inyandiko ya DNS ya ECH irahagije?
Oya. Mushakisha igomba kubona igenamiterere rikwiye kandi seriveri ikemera ECH ku ihuriro nyaryo.
ECH ihisha ibikorwa byose byo gushakisha?
Oya. Irinda igice cyihariye cyo gutangira TLS, si buri kintu gishobora kugaragara ku ihuriro.