DNS over TLS: Perbedaan antara revisi

'''DNS over TLS''' ('''DoT''') merupakan sebuah protokol untuk melakukan resolusi [[Sistem Penamaan Domain]] menggunakan protokol [[Transport Layer Security]]]. Tujuannya adalah untuk melindungi privasi dan keamanan pengguna dengan mencegah serangan [[man-in-the-middle]].

{{As of|2019}}, [[Cloudflare]], [[Quad9]], [[Google]], Quadrant Information Security dan CleanBrowsing menyediakan resolver DNS publik dengan DNS over TLS.<ref>{{Cite news|url=https://arstechnica.com/information-technology/2018/04/how-to-keep-your-isps-nose-out-of-your-browser-history-with-encrypted-dns/|title=How to keep your ISP’s nose out of your browser history with encrypted DNS|work=Ars Technica|access-date=2018-04-08|language=en-us}}</ref><ref>{{Cite web|url=https://developers.cloudflare.com/1.1.1.1/dns-over-tls/|title=DNS over TLS - Cloudflare Resolver|website=developers.cloudflare.com|language=en|access-date=2018-04-08|archive-date=2018-04-02|archive-url=https://web.archive.org/web/20180402001559/https://developers.cloudflare.com/1.1.1.1/dns-over-tls/|dead-url=yes}}</ref><ref>{{Cite web|url=https://security.googleblog.com/2019/01/google-public-dns-now-supports-dns-over.html|title=Google Public DNS now supports DNS-over-TLS|website=Google Online Security Blog|language=en|access-date=2019-01-10}}</ref><ref>{{Cite web|url=https://labs.ripe.net/Members/stephane_bortzmeyer/quad9-a-public-dns-resolver-with-security|title=Quad9, a Public DNS Resolver - with Security|website=RIPE Labs|access-date=2018-04-08}}.</ref>

Pada April 2018, [[Google]] mengumumkan bahwa [[Android Pie]] akan mendukung DNS over TLS.<ref>{{Cite web|url=https://security.googleblog.com/2018/04/dns-over-tls-support-in-android-p.html|title=DNS over TLS support in Android P Developer Preview|website=Google Online Security Blog|language=en|access-date=2019-04-19}}</ref> DNSDist, dari [[PowerDNS]] juga mengumumkan dukungan terhadap DNS over TLS di versi 1.3.0.<ref name="DNSDist DNS over TLS">{{cite web|url=https://dnsdist.org/guides/dns-over-tls.html|title=DNS-over-TLS|website=dnsdist.org|accessdate=25 April 2018}}</ref> Pengguna [[BIND]] juga bisa memakai DNS over TLS dengan mewalikannya dengan [[stunnel]].<ref>{{cite web|title=Bind - DNS over TLS|url=https://kb.isc.org/article/AA-01386/0/DNS-over-TLS.html}}</ref> [[Unbound (DNS server)|Unbound]] mendukung DNS over TLS sejak 22 Januari 2018.<ref>{{Cite web|url=https://nlnetlabs.nl/svn/unbound/tags/release-1.7.3/doc/Changelog|title=Unbound version 1.7.3 Changelog|last=|first=|date=|website=|archive-url=https://web.archive.org/web/20180807064027/https://nlnetlabs.nl/svn/unbound/tags/release-1.7.3/doc/Changelog|archive-date=2018-08-07|dead-url=yes|access-date=}}</ref><ref>{{Cite news|url=https://www.ctrl.blog/entry/unbound-tls-forwarding|title=Actually secure DNS over TLS in Unbound|last=Aleksandersen|first=Daniel|work=Ctrl blog|access-date=2018-08-07|language=en}}</ref>

== Penggunaan ==

Pengguna [[Linux]] dapat menggunakan getdns-utils<ref>{{Cite |url=https://packages.ubuntu.com/search?keywords=getdns-utils|title=Package: getdns-utils|access-date=2019-04-04|language=en}}</ref> untuk menggunakan DoT secara langsung dengan getdns_query atau dengan perantara stubby daemon.

[[Pengguna]] [[Microsoft Windows|Windows]] dapat menggunakan stubby dengan exe atau [[NuGet#Chocolatey|Chocolatey]].