{"id":4397,"date":"2020-10-30T22:05:08","date_gmt":"2020-10-30T21:05:08","guid":{"rendered":"https:\/\/webhosting.de\/?p=4397"},"modified":"2020-10-30T22:05:08","modified_gmt":"2020-10-30T21:05:08","slug":"dnssec","status":"publish","type":"post","link":"https:\/\/webhosting.de\/sv\/dnssec\/","title":{"rendered":"dnssec"},"content":{"rendered":"

S\u00e4kerhetstill\u00e4gg f\u00f6r dom\u00e4nnamnssystem<\/h2>\n

dnssec \u00e4r en upps\u00e4ttning standarder inom Internet<\/a>som ger en garanti f\u00f6r s\u00e4kerhetsmekanismer. Dessa \u00e4r ocks\u00e5 beroende av \u00e4ktheten och integriteten hos den Uppgifter<\/a>. En deltagare i dnssec kan verifiera vissa zonuppgifter. Detta kan ocks\u00e5 kontrollera om DNS-zondata \u00e4r identiska med de data som en skapare har f\u00e5tt tillst\u00e5nd av zonen.<\/p>\n

Ingen kryptering av uppgifterna<\/h2>\n

Dnssec utvecklades f\u00f6r att bek\u00e4mpa cache poisoning. Digitala signaturer s\u00e4kras under \u00f6verf\u00f6ringen av resursposter. Autentisering sker aldrig p\u00e5 servrarna eller klienterna. Med dnssec krypteras inga data. Det asymmetriska kryptosystemet. \u00c4garen av en viss information kallas masterserver. D\u00e4r finns ocks\u00e5 den zon som ska s\u00e4kras. Varje enskild post signeras med en privat nyckel eller hemlig nyckel. Autenticitet och integritet kan valideras med en offentlig nyckel. Till\u00e4gget EDNS f\u00f6redras av dnssec. Ytterligare parametrar kan anv\u00e4ndas med detta till\u00e4gg. Storleksbegr\u00e4nsningen p\u00e5 512 bytes tas ocks\u00e5 bort med detta till\u00e4gg. L\u00e4ngre DNS-meddelanden \u00e4r n\u00f6dv\u00e4ndiga om en nyckel eller en signatur ska \u00f6verf\u00f6ras.<\/p>\n

Hur fungerar DNS?<\/h2>\n

I RR, dvs. Resource Record, g\u00f6rs informationen tillg\u00e4nglig p\u00e5 dnssec. De s\u00e4kerst\u00e4ller informationens \u00e4kthet med en digital signatur. Huvudservern i zonen \u00e4r \u00e4gare till denna information. Detta \u00e4r ocks\u00e5 auktoritativt. F\u00f6r varje zon som ska s\u00e4kras finns det en zonindelningsnyckel, dvs. en zonnyckel. Paret best\u00e5r av offentliga och privata nycklar. Den offentliga delen av zonnyckeln ing\u00e5r i zonfilen som en DNSKEY-resurspost. Den privata nyckeln s\u00e4kerst\u00e4ller att varje enskilt RR undertecknas digitalt i zonen. F\u00f6r detta \u00e4ndam\u00e5l fylls en resurspost i, som sedan blir RRSIG-resurspost. Den inneh\u00e5ller signaturen f\u00f6r DNS-posten.
\nF\u00f6r var och en av dessa transaktioner skickas en RRSIG-RR tillsammans med den normala resursposten. Vid en \u00f6verf\u00f6ring i zonen f\u00e5r slavarna den f\u00f6rst. Om uppl\u00f6sningen \u00e4r bra lagras den sedan i en cache. Den sista som f\u00e5r RR \u00e4r den revolver som beg\u00e4rde den. Med den offentliga zonnyckeln kan signaturen valideras.<\/p>\n

Utv\u00e4rderingen<\/h2>\n

Med dnssec \u00e4r DNS-resolverna de slutenheter, t.ex. en dator eller en smartphone, d\u00e4r posterna inte kan valideras. Stub resolvers \u00e4r helt enkelt byggda program som kan l\u00f6sa upp ett namn fullst\u00e4ndigt. \u00c4ven i en rekursiv namnserver. F\u00f6r att l\u00f6sa upp namnet skickar namnservern en beg\u00e4ran till en namnserver i det lokala n\u00e4tverket, eller \u00e4ven i n\u00e4tverket f\u00f6r den ISP<\/a>uttalade Internetleverant\u00f6rer.<\/p>\n

En DO-bit s\u00e4tts, vilket kan informera namnserverns resolver om att posten ska valideras. Stub-resolver m\u00e5ste dock ha st\u00f6d f\u00f6r EDNS-f\u00f6rl\u00e4ngningen av dnssec f\u00f6r detta. P\u00e5 detta s\u00e4tt kan \u00e4ven servern skyddas. Detta inneb\u00e4r att valideringen alltid kan genomf\u00f6ras.<\/p>\n

Detta \u00e4r oberoende av inneh\u00e5llet och f\u00f6rekomsten av DO-biten. Om servern returnerar ett allm\u00e4nt fel har n\u00e5got g\u00e5tt fel. Om det lyckades returnerar servern ett AD bit-svar. AD betyder autentiserade data. F\u00f6r en stub resolver \u00e4r det om\u00f6jligt att avg\u00f6ra om felet orsakades av den misslyckade valideringen eller av n\u00e5gon annan orsak. Orsaken kan vara ett n\u00e4tverksfel eller ett fel p\u00e5 namnservern i det beg\u00e4rda dom\u00e4nnamnet.<\/p>","protected":false},"excerpt":{"rendered":"

Domain Name System Security Extensions Die dnssec ist eine Reihe von Standarten im Internet, die eine Gew\u00e4hrleistung von Sicherheitsmechanismen geben. Diese unterliegen auch der Authentizit\u00e4t und der Integrit\u00e4t der Daten. Ein Teilnehmer des dnssec kann bestimmte Zonendaten verifizieren. Dieser kann auch pr\u00fcfen ob die DNS-Zonendaten identisch sind mit denen die ein Ersteller von der Zone […]<\/p>\n","protected":false},"author":1,"featured_media":1197,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_crdt_document":"","inline_featured_image":false,"footnotes":""},"categories":[732],"tags":[],"class_list":["post-4397","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lexikon"],"acf":[],"_wp_attached_file":null,"_wp_attachment_metadata":null,"litespeed-optimize-size":null,"litespeed-optimize-set":null,"_elementor_source_image_hash":null,"_wp_attachment_image_alt":null,"stockpack_author_name":null,"stockpack_author_url":null,"stockpack_provider":null,"stockpack_image_url":null,"stockpack_license":null,"stockpack_license_url":null,"stockpack_modification":null,"color":null,"original_id":null,"original_url":null,"original_link":null,"unsplash_location":null,"unsplash_sponsor":null,"unsplash_exif":null,"unsplash_attachment_metadata":null,"_elementor_is_screenshot":null,"surfer_file_name":null,"surfer_file_original_url":null,"envato_tk_source_kit":null,"envato_tk_source_index":null,"envato_tk_manifest":null,"envato_tk_folder_name":null,"envato_tk_builder":null,"envato_elements_download_event":null,"_menu_item_type":null,"_menu_item_menu_item_parent":null,"_menu_item_object_id":null,"_menu_item_object":null,"_menu_item_target":null,"_menu_item_classes":null,"_menu_item_xfn":null,"_menu_item_url":null,"_trp_menu_languages":null,"rank_math_primary_category":null,"rank_math_title":null,"inline_featured_image":null,"_yoast_wpseo_primary_category":null,"rank_math_schema_blogposting":null,"rank_math_schema_videoobject":null,"_oembed_049c719bc4a9f89deaead66a7da9fddc":null,"_oembed_time_049c719bc4a9f89deaead66a7da9fddc":null,"_yoast_wpseo_focuskw":"dnssec","_yoast_wpseo_linkdex":null,"_oembed_27e3473bf8bec795fbeb3a9d38489348":null,"_oembed_c3b0f6959478faf92a1f343d8f96b19e":null,"_trp_translated_slug_en_us":null,"_wp_desired_post_slug":null,"_yoast_wpseo_title":null,"tldname":null,"tldpreis":null,"tldrubrik":null,"tldpolicylink":null,"tldsize":null,"tldregistrierungsdauer":null,"tldtransfer":null,"tldwhoisprivacy":null,"tldregistrarchange":null,"tldregistrantchange":null,"tldwhoisupdate":null,"tldnameserverupdate":null,"tlddeletesofort":null,"tlddeleteexpire":null,"tldumlaute":null,"tldrestore":null,"tldsubcategory":null,"tldbildname":null,"tldbildurl":null,"tldclean":null,"tldcategory":null,"tldpolicy":null,"tldbesonderheiten":null,"tld_bedeutung":null,"_oembed_d167040d816d8f94c072940c8009f5f8":null,"_oembed_b0a0fa59ef14f8870da2c63f2027d064":null,"_oembed_4792fa4dfb2a8f09ab950a73b7f313ba":null,"_oembed_33ceb1fe54a8ab775d9410abf699878d":null,"_oembed_fd7014d14d919b45ec004937c0db9335":null,"_oembed_21a029d076783ec3e8042698c351bd7e":null,"_oembed_be5ea8a0c7b18e658f08cc571a909452":null,"_oembed_a9ca7a298b19f9b48ec5914e010294d2":null,"_oembed_f8db6b27d08a2bb1f920e7647808899a":null,"_oembed_168ebde5096e77d8a89326519af9e022":null,"_oembed_cdb76f1b345b42743edfe25481b6f98f":null,"_oembed_87b0613611ae54e86e8864265404b0a1":null,"_oembed_27aa0e5cf3f1bb4bc416a4641a5ac273":null,"_oembed_time_27aa0e5cf3f1bb4bc416a4641a5ac273":null,"_tldname":null,"_tldclean":null,"_tldpreis":null,"_tldcategory":null,"_tldsubcategory":null,"_tldpolicy":null,"_tldpolicylink":null,"_tldsize":null,"_tldregistrierungsdauer":null,"_tldtransfer":null,"_tldwhoisprivacy":null,"_tldregistrarchange":null,"_tldregistrantchange":null,"_tldwhoisupdate":null,"_tldnameserverupdate":null,"_tlddeletesofort":null,"_tlddeleteexpire":null,"_tldumlaute":null,"_tldrestore":null,"_tldbildname":null,"_tldbildurl":null,"_tld_bedeutung":null,"_tldbesonderheiten":null,"_oembed_ad96e4112edb9f8ffa35731d4098bc6b":null,"_oembed_8357e2b8a2575c74ed5978f262a10126":null,"_oembed_3d5fea5103dd0d22ec5d6a33eff7f863":null,"_eael_widget_elements":null,"_oembed_0d8a206f09633e3d62b95a15a4dd0487":null,"_oembed_time_0d8a206f09633e3d62b95a15a4dd0487":null,"_aioseo_description":null,"_eb_attr":null,"_eb_data_table":null,"_oembed_819a879e7da16dd629cfd15a97334c8a":null,"_oembed_time_819a879e7da16dd629cfd15a97334c8a":null,"_acf_changed":null,"_wpcode_auto_insert":null,"_edit_last":null,"_edit_lock":null,"_oembed_e7b913c6c84084ed9702cb4feb012ddd":null,"_oembed_bfde9e10f59a17b85fc8917fa7edf782":null,"_oembed_time_bfde9e10f59a17b85fc8917fa7edf782":null,"_oembed_03514b67990db061d7c4672de26dc514":null,"_oembed_time_03514b67990db061d7c4672de26dc514":null,"rank_math_news_sitemap_robots":"index","rank_math_robots":["index"],"_eael_post_view_count":"3873","_trp_automatically_translated_slug_ru_ru":null,"_trp_automatically_translated_slug_et":"dnssec","_trp_automatically_translated_slug_lv":"dnssec","_trp_automatically_translated_slug_fr_fr":null,"_trp_automatically_translated_slug_en_us":null,"_wp_old_slug":null,"_trp_automatically_translated_slug_da_dk":null,"_trp_automatically_translated_slug_pl_pl":null,"_trp_automatically_translated_slug_es_es":null,"_trp_automatically_translated_slug_hu_hu":null,"_trp_automatically_translated_slug_fi":"dnssec","_trp_automatically_translated_slug_ja":"%e3%83%87%e3%82%a3%e3%83%bc%e3%82%a8%e3%83%8c%e3%82%b7%e3%83%bc%e3%82%bb%e3%83%83%e3%82%af","_trp_automatically_translated_slug_lt_lt":null,"_elementor_edit_mode":null,"_elementor_template_type":null,"_elementor_version":null,"_elementor_pro_version":null,"_wp_page_template":"default","_elementor_page_settings":null,"_elementor_data":null,"_elementor_css":null,"_elementor_conditions":null,"_happyaddons_elements_cache":null,"_oembed_75446120c39305f0da0ccd147f6de9cb":null,"_oembed_time_75446120c39305f0da0ccd147f6de9cb":null,"_oembed_3efb2c3e76a18143e7207993a2a6939a":null,"_oembed_time_3efb2c3e76a18143e7207993a2a6939a":null,"_oembed_59808117857ddf57e478a31d79f76e4d":null,"_oembed_time_59808117857ddf57e478a31d79f76e4d":null,"_oembed_965c5b49aa8d22ce37dfb3bde0268600":null,"_oembed_time_965c5b49aa8d22ce37dfb3bde0268600":null,"_oembed_81002f7ee3604f645db4ebcfd1912acf":null,"_oembed_time_81002f7ee3604f645db4ebcfd1912acf":null,"_elementor_screenshot":null,"_oembed_7ea3429961cf98fa85da9747683af827":null,"_oembed_time_7ea3429961cf98fa85da9747683af827":null,"_elementor_controls_usage":null,"_elementor_page_assets":[],"_elementor_screenshot_failed":null,"theplus_transient_widgets":["tp-video-player"],"_eael_custom_js":null,"_wp_old_date":null,"_trp_automatically_translated_slug_it_it":null,"_trp_automatically_translated_slug_pt_pt":null,"_trp_automatically_translated_slug_zh_cn":null,"_trp_automatically_translated_slug_nl_nl":null,"_trp_automatically_translated_slug_pt_br":null,"_trp_automatically_translated_slug_sv_se":null,"rank_math_analytic_object_id":"845","rank_math_internal_links_processed":null,"_trp_automatically_translated_slug_ro_ro":null,"_trp_automatically_translated_slug_sk_sk":null,"_trp_automatically_translated_slug_bg_bg":null,"_trp_automatically_translated_slug_sl_si":null,"litespeed_vpi_list":["webhostinglogo.png"],"litespeed_vpi_list_mobile":["webhostinglogo.png"],"rank_math_seo_score":null,"rank_math_contentai_score":null,"ilj_limitincominglinks":null,"ilj_maxincominglinks":null,"ilj_limitoutgoinglinks":null,"ilj_maxoutgoinglinks":null,"ilj_limitlinksperparagraph":null,"ilj_linksperparagraph":null,"ilj_blacklistdefinition":null,"ilj_linkdefinition":["dnssec"],"_eb_reusable_block_ids":null,"rank_math_focus_keyword":"dnssec","rank_math_og_content_image":null,"_yoast_wpseo_metadesc":"","_yoast_wpseo_content_score":null,"_yoast_wpseo_focuskeywords":null,"_yoast_wpseo_keywordsynonyms":null,"_yoast_wpseo_estimated-reading-time-minutes":null,"rank_math_description":null,"surfer_last_post_update":null,"surfer_last_post_update_direction":null,"surfer_keywords":null,"surfer_location":null,"surfer_draft_id":null,"surfer_permalink_hash":null,"surfer_scrape_ready":null,"_thumbnail_id":"1197","footnotes":null,"_links":{"self":[{"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/posts\/4397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/comments?post=4397"}],"version-history":[{"count":0,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/posts\/4397\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/media\/1197"}],"wp:attachment":[{"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/media?parent=4397"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/categories?post=4397"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webhosting.de\/sv\/wp-json\/wp\/v2\/tags?post=4397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}