Key Takeaways
- Oblivious DoH yog tus qauv tshiab los encrypt thiab tiv thaiv DNS queries.
- Koj ISP yuav muag koj cov ntaub ntawv tshawb xyuas.
- Oblivious DoH yuav yog lub npe rapper zoo.
Internet security tuam txhab Cloudflare thiab Apple tau koom tes los tawm tswv yim tshiab DNS tus qauv uas txwv tsis pub koj tus neeg muab kev pabcuam hauv is taws nem (ISP) los ntawm kev soj ntsuam ntawm lub vev xaib twg koj mus ntsib thiab muag cov ntaub ntawv.
Txhua zaus koj nyem lossis ntaus qhov txuas, koj lub computer yuav tsum hloov nws mus rau qhov chaw nyob tiag tiag ntawm lub khoos phis tawj hosting hauv internet. Rau qhov ntawd, nws siv qee yam hu ua DNS, hom ntawv nyob hauv internet. Qhov teeb meem yog koj lub khoos phis tawj ib txwm siv koj ISP lub DNS server, txhais tau tias koj ISP tuaj yeem (thiab tej zaum yuav ua tau) taug qab cov chaw koj mus ntsib, thiab muag koj cov ntaub ntawv. Cloudflare thiab Apple tus qauv DNS tshiab, hu ua "Oblivious DoH," ua rau tag nrho cov txheej txheem no ntiag tug.
"Muaj ntau qhov teeb meem kev nyab xeeb thiab kev ceev ntiag tug hauv kev tsim Internet li cas. Ntau xyoo dhau los, feem ntau ntawm kev tsom mus rau kev txav lub vev xaib los ntawm feem ntau unencrypted mus rau encrypted los ntawm lub neej ntawd nrog HTTPS," Nick Sullivan, Cloudflare tus thawj coj ntawm kev tshawb fawb, hais rau Lifewire ntawm email. "Tam sim no tias ntau dua 80% [ntawm] browsing tau ua tiav nrog HTTPS, kev lag luam kev mloog tau hloov mus rau kev kho lwm yam teeb meem ntiag tug, zoo li cov uas muaj nyob rau DNS."
A Quick DNS Primer
Thaum twg koj tus browser txuas rau lub vev xaib, nws tau txuas nrog lub khoos phis tawj hosting qhov chaw. Lub computer ntawd, zoo li koj li, muaj tus lej IP chaw nyob. Lub vev xaib koj tab tom nyeem tam sim no, piv txwv li, tam sim no muaj qhov chaw nyob IP ntawm 151.101.66.137.
Pom tseeb, nws yooj yim dua rau tib neeg kom nco qab cov txuas ntau dua li cov lej, yog li DNS server siv los txhais. Keeb kwm, kev sib txuas rau DNS servers tsis tau encrypted, thiab yog li pom rau txhua tus neeg uas saib hauv kev sib pauv.
Oblivious DoH, lossis ODoH, ua rau qhov kev sib txuas no ntiag tug, thiab ua haujlwm los ntawm kev nkag mus rau koj lub DNS thiab xa nws ntawm tus neeg rau zaub mov npe.
Nyob zoo ib tsoom niam txiv kwv tij neej tsas sawv daws
Lub tswv yim yog tias koj lub tsev router, lossis koj cov khoom siv hauv internet, yuav txuas mus rau ODoH-enabled DNS kev pabcuam, es tsis txhob siv lub neej ntawd, tsis muaj kev tiv thaiv DNS server, uas yuav luag yog ib qho muab los ntawm koj ISP.. Tam sim no, qhov ntawd tsis tuaj yeem ua tau tshwj tsis yog tias koj tsis tshua muaj siab, thiab tuaj yeem nrhiav ODoH-enabled DNS kev pabcuam txuas rau.
Unsurprisingly, Cloudflare tus kheej DNS kev pabcuam twb muaj peev xwm ntawm qhov no.
Tam sim no tias ntau dua 80% [ntawm] browsing tau ua tiav nrog HTTPS, kev lag luam kev saib xyuas tau hloov mus kho lwm yam teeb meem ntiag tug.
Lub sijhawm no, koj tseem tuaj yeem zam koj qhov kev pabcuam ISP los ntawm kev xaiv lwm txoj hauv kev. Koj tsuas yog ntxiv qhov chaw nyob (1.1.1.1 nyob rau hauv rooj plaub ntawm Cloudflare) rau ntu muab hauv koj lub tsev router cov nplooj ntawv teeb tsa, thiab txhua lub cuab yeej hauv koj lub tsev yuav siv nws. Qhov no tuaj yeem muab kev sib txuas sib txuas, ntiag tug, tab sis ODoH mus ib qho zoo dua.
"Los ntawm kev siv ODoH, cov neeg siv tuaj yeem nkag mus rau qhov kev nyab xeeb, ua tau zoo, thiab kev pabcuam DNS ntiag tug," hais Sullivan. "Cov neeg siv ntawm ODoH yuav muaj tsawg dua kev txhawj xeeb txog kev ceev ntiag tug txog lawv cov ntaub ntawv DNS thiab tshawb xyuas keeb kwm. Ntau tus neeg muab kev pabcuam DNS yog kev ceev ntiag tug thiab tsis tau txais nyiaj los ntawm cov neeg siv cov ntaub ntawv, tab sis ODoH ua rau hom kev sau cov ntaub ntawv uas tuaj yeem ua rau DNS cov chaw muab kev pabcuam tsis tuaj yeem."
ODoH yuav tsis kho kev ceev ntiag tug hauv internet, tab sis nws ntsaws ib lub qhov ntxiv, thiab qhov loj heev. Nws yog kev, thiab nyuaj rau xa mus rau tam sim no, tab sis kev koom tes ntawm Apple txhais tau hais tias qee lub sijhawm sai sai, qhov no tej zaum yuav tsim rau Macs, iPhones, thiab iPads.
