Tweet
Tweet

Slide 1

Slide 1 text

զʑ͸͍͔ʹͯ҆͠શͳ
 ໊લղܾΛखʹೖΕΔ͔ itochan Kyoto.* #4

Slide 2

Slide 2 text

ͩΕ •౦ژͷେֶੜ •͸ͯͳΠϯλʔϯ 2016 ߦͬͯ·ͤΜ JUPDIBO !JDIBO

Slide 3

Slide 3 text

എܠ • ੈؒͰ͸HTTPSԽͷѹ͕ߴ·͍ͬͯΔ • ໊͔͠͠લղܾ͸ฏจ • DNSͷ௨৴ܦ࿏Λ҉߸Խ͍ͨ͠ʂʂʂ • ҆શҙࣝͷߴ·Γ

Slide 4

Slide 4 text

ͦ͜Ͱɺ

Slide 5

Slide 5 text

DNS over HTTPS (DoH) • HTTPSܦ༝Ͱ໊લղܾ͕Ͱ͖Δ • IETF Draftʹͳ͍ͬͯͯඪ४Խ։࢝ • ࣮͸DNS over TLSͱ͍͏ͷ΋͋Δ • RFCͰඪ४Խ͞Ε͍ͯΔ (RFC 7858)

Slide 6

Slide 6 text

✔ ྑ͍ͱ͜Ζ • ໊લղܾ΋ؚΊ௨৴Λ׬શʹ҉߸Խ͢Δ͜ͱ͕Մೳʂ • େֶͷճઢͰ΋҆৺͍ͯ͠ΖΜͳαΠτΛӾཡͰ͖Δ

Slide 7

Slide 7 text

✘ ѱ͍ͱ͜Ζ • ໊લղܾʹएׯΦʔόʔϔου͕͋ΔʢͱݴΘΕ͍ͯΔʣ • TLS1.3Ͱղܾ͢Δ͔ʁ • ѱ͞Λ͍ͯ͠ΔͱࢥΘΕΔ

Slide 8

Slide 8 text

DNS over HTTPS ࢖͏ʹ͸ • ࢖͑ͦ͏ͳͱ͜Ζ͸2ͭ • Google Public DNS: 8.8.8.8, 8.8.4.4 • Cloudflare DNS: 1.1.1.1, 1.0.0.1

Slide 9

Slide 9 text

DNS over HTTPS ࢖͏ʹ͸ • ࣍ͷFirefoxͰ͸CloudflareʹΑΔ
 DoHͷ໰͍߹ΘͤΛαϙʔτ͢ΔΒ͍͠ • Android PͰ͸OSͰαϙʔτ͢ΔΒ͍͠ • ϩʔΧϧʹΫϥΠΞϯτΛཱͯlocalhost:53 ʹ໰͍߹Θͤ

Slide 10

Slide 10 text

DNS over HTTPS ࢖͏ʹ͸ • ࣍ͷFirefoxͰ͸CloudflareʹΑΔ
 DoHͷ໰͍߹ΘͤΛαϙʔτ͢ΔΒ͍͠ • Android PͰ͸OSͰαϙʔτ͢ΔΒ͍͠ • ϩʔΧϧʹΫϥΠΞϯτΛཱͯlocalhost:53 ʹ໰͍߹Θͤ ˣ͜Ε࠷ߴ

Slide 11

Slide 11 text

DNS over HTTPS ΫϥΠΞϯτ • Ͳ͔ͬͪೖΕΔ • stubby • cloudflared ←؆୯

Slide 12

Slide 12 text

΍͍͖ͬͯ·͠ΐ͏

Slide 13

Slide 13 text

͜Μͳײ͡

Slide 14

Slide 14 text

IUUQTUSBOTQBSFODZSFQPSUHPPHMFDPNIUUQTPWFSWJFX