什么是DNS泄漏?我为什么要关心?

什么是DNS泄漏?我为什么要关心?
使用匿名或隐私服务时,来自您计算机的所有流量都必须通过匿名网络进行路由,这一点非常重要。如果任何流量泄露到网络的安全连接之外,任何监控流量的对手都可以记录您的活动。
DNS或域名系统用于将诸如www.privacyinternational.org之类的域名翻译成数字IP地址,例如123.123.123.123,它们是在Internet上路由数据包所必需的。每当您的计算机需要联系Internet上的服务器时,例如当您在浏览器中输入URL时,您的计算机就会联系DNS服务器并请求IP地址。大多数Internet服务提供商为其客户分配一个DNS服务器,他们控制并使用该服务器来记录和记录您的Internet活动。
在某些情况下,即使连接到匿名网络,操作系统仍将继续使用其默认DNS服务器,而不是匿名网络分配给您的计算机的匿名DNS服务器。 DNS泄密是一种主要的隐私威胁,因为匿名网络可能在私有数据泄漏时提供错误的安全感。
如果您担心DNS泄漏,您还应该了解透明的DNS代理技术,以确保您选择的解决方案将停止

原文

What is a DNS leak and why should I care?

When using an anonymity or privacy service, it is extremely important that all traffic originating from your computer is routed through the anonymity network. If any traffic leaks outside of the secure connection to the network, any adversary monitoring your traffic will be able to log your activity.

DNS or the domain name system is used to translate domain names such as www.privacyinternational.org into numerical IP addresses e.g. 123.123.123.123 which are required to route packets of data on the Internet. Whenever your computer needs to contact a server on the Internet, such as when you enter a URL into your browser, your computer contacts a DNS server and requests the IP address. Most Internet service providers assign their customers a DNS server which they control and use for logging and recording your Internet activities.

Under certain conditions, even when connected to the anonymity network, the operating system will continue to use its default DNS servers instead of the anonymous DNS servers assigned to your computer by the anonymity network. DNS leaks are a major privacy threat since the anonymity network may be providing a false sense of security while private data is leaking.

If you are concerned about DNS leaks, you should also understand transparent DNS proxy technology to ensure that the solution you choose will stop

最后:通过 https://www.dnsleaktest.com/ 查看
这个测试的结果是什么意思?
每次在浏览器中输入网站地址时,上述服务器都会收到将域名(例如www.eff.org)解析为IP地址的请求。
上述服务器的所有者可以将您的个人IP地址与您连接的所有站点的名称相关联,并无限期地存储这些数据。 这并不意味着他们无限期地记录或存储它,但它们可能并且您需要信任他们的政策所说的。
如果您连接到VPN服务并且VPN服务未提供上面列出的任何服务器,那么您有DNS泄漏并且选择使用您的私有数据信任上述服务器的所有者。

猜你喜欢

转载自blog.csdn.net/qq_42393859/article/details/89352697