{"id":476910,"date":"2023-08-09T09:05:02","date_gmt":"2023-08-09T09:05:02","guid":{"rendered":""},"modified":"2023-09-05T11:13:39","modified_gmt":"2023-09-05T11:13:39","slug":"dns-over-https-doh","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/dns-over-https-doh\/","title":{"rendered":"DNS over HTTPS (DoH)"},"content":{"rendered":"<p>DNS over HTTPS (DoH) \u306f\u3001HTTPS (Hypertext Transfer Protocol Secure) \u3092\u4f7f\u7528\u3057\u3066 DNS (Domain Name System) \u30ea\u30af\u30a8\u30b9\u30c8\u3092\u6697\u53f7\u5316\u3059\u308b\u3053\u3068\u3067\u3001\u305d\u306e\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3092\u5f37\u5316\u3059\u308b\u30d7\u30ed\u30c8\u30b3\u30eb\u3067\u3059\u3002\u3053\u306e\u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306f\u30c9\u30e1\u30a4\u30f3\u540d\u3092 IP \u30a2\u30c9\u30ec\u30b9\u306b\u5b89\u5168\u306b\u89e3\u6c7a\u3067\u304d\u308b\u305f\u3081\u3001\u7b2c\u4e09\u8005\u304c DNS \u30af\u30a8\u30ea\u3084\u5fdc\u7b54\u3092\u7c21\u5358\u306b\u508d\u53d7\u3057\u305f\u308a\u6539\u3056\u3093\u3057\u305f\u308a\u3059\u308b\u3053\u3068\u304c\u306a\u304f\u306a\u308a\u307e\u3059\u3002 DNS over HTTPS \u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u304a\u3051\u308b\u91cd\u8981\u306a\u9032\u6b69\u3067\u3042\u308a\u3001DNS \u30cf\u30a4\u30b8\u30e3\u30c3\u30af\u3084\u76d7\u8074\u306a\u3069\u306e\u3055\u307e\u3056\u307e\u306a\u8105\u5a01\u304b\u3089\u30e6\u30fc\u30b6\u30fc\u3092\u4fdd\u8b77\u3067\u304d\u308b\u305f\u3081\u3001\u4eba\u6c17\u304c\u9ad8\u307e\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<h2>DNS over HTTPS (DoH) \u306e\u8d77\u6e90\u306e\u6b74\u53f2\u3068\u305d\u306e\u6700\u521d\u306e\u8a00\u53ca<\/h2>\n<p>DNS \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u6697\u53f7\u5316\u3059\u308b\u3068\u3044\u3046\u6982\u5ff5\u306f\u4ee5\u524d\u304b\u3089\u5b58\u5728\u3057\u3066\u3044\u307e\u3057\u305f\u304c\u3001DNS over HTTPS \u306f\u30012017 \u5e74 10 \u6708\u306b Mozilla \u306e Patrick McManus \u306b\u3088\u3063\u3066\u521d\u3081\u3066\u63d0\u6848\u3055\u308c\u3066\u5927\u304d\u306a\u6ce8\u76ee\u3092\u96c6\u3081\u307e\u3057\u305f\u3002 DoH \u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u6700\u521d\u306e\u8349\u6848\u306f\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30a8\u30f3\u30b8\u30cb\u30a2\u30ea\u30f3\u30b0 \u30bf\u30b9\u30af \u30d5\u30a9\u30fc\u30b9\u3067\u516c\u958b\u3055\u308c\u307e\u3057\u305f ( IETF)\u3001\u30d1\u30c8\u30ea\u30c3\u30af\u30fb\u30de\u30af\u30de\u30ca\u30b9\u304a\u3088\u3073\u305d\u306e\u4ed6\u306e\u5bc4\u7a3f\u8005\u306b\u3088\u308b\u3002\u305d\u308c\u4ee5\u6765\u3001\u3053\u306e\u30d7\u30ed\u30c8\u30b3\u30eb\u306f\u4f55\u5ea6\u304b\u306e\u53cd\u5fa9\u3068\u6539\u826f\u3092\u7d4c\u3066\u3001\u5e83\u304f\u53d7\u3051\u5165\u308c\u3089\u308c\u3001\u63a1\u7528\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<h2>DNS over HTTPS (DoH) \u306b\u95a2\u3059\u308b\u8a73\u7d30\u60c5\u5831<\/h2>\n<p>DNS over HTTPS \u306f\u3001HTTPS \u306e\u6697\u53f7\u5316\u6a5f\u80fd\u3092\u5229\u7528\u3057\u3066\u30c9\u30e1\u30a4\u30f3\u540d\u3092\u89e3\u6c7a\u3059\u308b\u5b89\u5168\u304b\u3064\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u306a\u65b9\u6cd5\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002\u5f93\u6765\u306e DNS \u30af\u30a8\u30ea\u306f\u901a\u5e38\u3001\u30d7\u30ec\u30fc\u30f3 \u30c6\u30ad\u30b9\u30c8\u3067\u9001\u4fe1\u3055\u308c\u308b\u305f\u3081\u3001\u508d\u53d7\u3084\u64cd\u4f5c\u306b\u5bfe\u3057\u3066\u8106\u5f31\u306b\u306a\u308a\u307e\u3059\u3002 DoH \u3092\u4f7f\u7528\u3059\u308b\u3068\u3001DNS \u30af\u30a8\u30ea\u304c\u6697\u53f7\u5316\u3055\u308c\u3001\u5b89\u5168\u306a\u30c1\u30e3\u30cd\u30eb\u7d4c\u7531\u3067\u9001\u4fe1\u3055\u308c\u308b\u305f\u3081\u3001\u6b21\u306e\u3088\u3046\u306a\u5229\u70b9\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\uff1a<\/strong> DNS over HTTPS \u306f DNS \u8981\u6c42\u306e\u5185\u5bb9\u3092\u96a0\u3057\u3001ISP\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7ba1\u7406\u8005\u3001\u307e\u305f\u306f\u60aa\u610f\u306e\u3042\u308b\u653b\u6483\u8005\u304c DNS \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306b\u57fa\u3065\u3044\u3066\u30e6\u30fc\u30b6\u30fc\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u76e3\u8996\u3059\u308b\u3053\u3068\u3092\u9632\u304e\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b89\u5168\uff1a<\/strong> DNS \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u6697\u53f7\u5316\u3059\u308b\u3068\u3001DNS \u30b9\u30d7\u30fc\u30d5\u30a3\u30f3\u30b0\u3084\u4e2d\u9593\u8005\u653b\u6483\u306a\u3069\u306e DNS \u30d9\u30fc\u30b9\u306e\u653b\u6483\u304b\u3089\u30e6\u30fc\u30b6\u30fc\u304c\u4fdd\u8b77\u3055\u308c\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u6a29\u5a01\u3042\u308b DNS \u30b5\u30fc\u30d0\u30fc\u304b\u3089\u6b63\u5f53\u306a\u5fdc\u7b54\u3092\u78ba\u5b9f\u306b\u53d7\u4fe1\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u691c\u95b2\u3092\u56de\u907f\u3059\u308b:<\/strong> DNS over HTTPS \u306f\u3001\u7279\u5b9a\u306e\u653f\u5e9c\u3084 ISP \u306b\u3088\u3063\u3066\u8ab2\u3055\u308c\u305f DNS \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3084\u691c\u95b2\u3092\u56de\u907f\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u30d6\u30ed\u30c3\u30af\u3055\u308c\u305f Web \u30b5\u30a4\u30c8\u3084\u30b5\u30fc\u30d3\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u3092\u5411\u4e0a\u3055\u305b\u305f\uff1a<\/strong> HTTPS \u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u306b\u3088\u308a\u3001DNS over HTTPS \u306f\u65e2\u5b58\u306e\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u3092\u6d3b\u7528\u3057\u3001\u5b89\u5168\u306a Web \u901a\u4fe1\u306e\u305f\u3081\u306b\u884c\u308f\u308c\u305f\u6700\u9069\u5316\u306e\u6069\u6075\u3092\u53d7\u3051\u3001DNS \u89e3\u6c7a\u6642\u9593\u304c\u77ed\u7e2e\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>DNS over HTTPS (DoH) \u306e\u5185\u90e8\u69cb\u9020 - \u305d\u306e\u4ed5\u7d44\u307f<\/h2>\n<p>DNS over HTTPS \u306f\u3001DNS \u30af\u30a8\u30ea\u3068\u5fdc\u7b54\u3092 HTTPS \u30d1\u30b1\u30c3\u30c8\u3067\u30e9\u30c3\u30d7\u3059\u308b\u3053\u3068\u306b\u3088\u3063\u3066\u52d5\u4f5c\u3057\u3001\u5c02\u7528\u306e DoH \u30b5\u30fc\u30d0\u30fc\u3068\u306e\u9593\u3067\u9001\u53d7\u4fe1\u3055\u308c\u307e\u3059\u3002\u3053\u3053\u3067\u306f\u3001DNS over HTTPS \u304c\u3069\u306e\u3088\u3046\u306b\u6a5f\u80fd\u3059\u308b\u304b\u3092\u6bb5\u968e\u7684\u306b\u8aac\u660e\u3057\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u30ea\u30af\u30a8\u30b9\u30c8:<\/strong> \u30e6\u30fc\u30b6\u30fc\u306e\u30c7\u30d0\u30a4\u30b9\u304c DNS \u89e3\u6c7a\u8981\u6c42\u3092\u958b\u59cb\u3059\u308b\u3068\u3001\u30c7\u30d0\u30a4\u30b9\u4e0a\u306e DNS \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306f\u3001DoH \u4e92\u63db\u306e DNS \u30ea\u30be\u30eb\u30d0\u30fc\u306b\u30af\u30a8\u30ea\u3092\u9001\u4fe1\u3057\u307e\u3059\u3002DoH \u4e92\u63db\u306e DNS \u30ea\u30be\u30eb\u30d0\u30fc\u306f\u3001\u901a\u5e38\u3001DoH \u30b5\u30fc\u30d3\u30b9 \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306b\u3088\u3063\u3066\u904b\u7528\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DNS \u30af\u30a8\u30ea\u6697\u53f7\u5316:<\/strong> DNS \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306f HTTPS \u3092\u4f7f\u7528\u3057\u3066 DNS \u30af\u30a8\u30ea\u3092\u6697\u53f7\u5316\u3057\u3001\u4e8b\u5b9f\u4e0a HTTPS GET \u307e\u305f\u306f POST \u30ea\u30af\u30a8\u30b9\u30c8\u306b\u5909\u63db\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>HTTP(S) \u30c8\u30e9\u30f3\u30b9\u30dd\u30fc\u30c8:<\/strong> \u6697\u53f7\u5316\u3055\u308c\u305f DNS \u30af\u30a8\u30ea\u306f\u3001\u6a19\u6e96 HTTPS \u30dd\u30fc\u30c8 (443) \u7d4c\u7531\u3067 DoH \u30b5\u30fc\u30d0\u30fc\u306b\u9001\u4fe1\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DoH \u30b5\u30fc\u30d0\u30fc\u306e\u51e6\u7406:<\/strong> DoH \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u6697\u53f7\u5316\u3055\u308c\u305f DNS \u30af\u30a8\u30ea\u3092\u53d7\u4fe1\u3057\u3066\u5fa9\u53f7\u5316\u3057\u3001DNS \u30af\u30a8\u30ea\u3092\u9069\u5207\u306a DNS \u30ea\u30be\u30eb\u30d0\u30fc\u306b\u8ee2\u9001\u3057\u3066\u3001\u8981\u6c42\u3055\u308c\u305f\u30c9\u30e1\u30a4\u30f3\u540d\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u305f IP \u30a2\u30c9\u30ec\u30b9\u3092\u53d6\u5f97\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DNS \u89e3\u6c7a:<\/strong> DNS \u30ea\u30be\u30eb\u30d0\u30fc\u306f\u30af\u30a8\u30ea\u3092\u51e6\u7406\u3057\u3001IP \u30a2\u30c9\u30ec\u30b9\u3092\u53d6\u5f97\u3057\u3066\u3001\u5fdc\u7b54\u3092 DoH \u30b5\u30fc\u30d0\u30fc\u306b\u9001\u308a\u8fd4\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DNS \u5fdc\u7b54\u306e\u6697\u53f7\u5316:<\/strong> DoH \u30b5\u30fc\u30d0\u30fc\u306f\u3001HTTPS \u3092\u4f7f\u7528\u3057\u3066 DNS \u5fdc\u7b54\u3092\u6697\u53f7\u5316\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3078\u306e\u8fd4\u7b54:<\/strong> \u6697\u53f7\u5316\u3055\u308c\u305f DNS \u5fdc\u7b54\u306f\u3001HTTPS \u63a5\u7d9a\u7d4c\u7531\u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306b\u8fd4\u9001\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u5fa9\u53f7\u5316:<\/strong> \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306f DNS \u5fdc\u7b54\u3092\u5fa9\u53f7\u5316\u3057\u3001IP \u30a2\u30c9\u30ec\u30b9\u3092\u53d6\u5f97\u3057\u3001\u305d\u308c\u3092\u4f7f\u7528\u3057\u3066\u76ee\u7684\u306e Web \u30b5\u30fc\u30d0\u30fc\u306b\u63a5\u7d9a\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u3053\u306e\u30d7\u30ed\u30bb\u30b9\u306b\u3088\u308a\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068 DoH \u30b5\u30fc\u30d0\u30fc\u9593\u306e\u3059\u3079\u3066\u306e DNS \u901a\u4fe1\u304c\u6697\u53f7\u5316\u304a\u3088\u3073\u5b89\u5168\u306a\u72b6\u614b\u306b\u4fdd\u305f\u308c\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3068\u30c7\u30fc\u30bf\u306e\u6574\u5408\u6027\u304c\u4fdd\u8b77\u3055\u308c\u307e\u3059\u3002<\/p>\n<h2>DNS over HTTPS (DoH) \u306e\u4e3b\u8981\u306a\u6a5f\u80fd\u306e\u5206\u6790<\/h2>\n<p>DNS over HTTPS \u306f\u3001\u5f93\u6765\u306e DNS \u3084\u4ed6\u306e DNS \u6697\u53f7\u5316\u65b9\u5f0f\u3068\u306f\u7570\u306a\u308b\u3044\u304f\u3064\u304b\u306e\u91cd\u8981\u306a\u6a5f\u80fd\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30a8\u30f3\u30c9\u30c4\u30fc\u30a8\u30f3\u30c9\u306e\u6697\u53f7\u5316:<\/strong> DNS over HTTPS \u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304b\u3089 DoH \u30b5\u30fc\u30d0\u30fc\u3078\u306e DNS \u30af\u30a8\u30ea\u3092\u6697\u53f7\u5316\u3057\u3001DoH \u30b5\u30fc\u30d0\u30fc\u304b\u3089\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3078\u306e\u5fdc\u7b54\u3082\u6697\u53f7\u5316\u3057\u307e\u3059\u3002\u3053\u306e\u30a8\u30f3\u30c9\u30c4\u30fc\u30a8\u30f3\u30c9\u306e\u6697\u53f7\u5316\u306b\u3088\u308a\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068 DoH \u30b5\u30fc\u30d0\u30fc\u306e\u307f\u304c DNS \u30af\u30a8\u30ea\u3068\u5fdc\u7b54\u3092\u7406\u89e3\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u643a\u5e2f\u6027:<\/strong> DNS over HTTPS \u306f\u3001HTTPS \u3092\u30b5\u30dd\u30fc\u30c8\u3059\u308b\u3042\u3089\u3086\u308b\u30c7\u30d0\u30a4\u30b9\u3067\u4f7f\u7528\u3067\u304d\u308b\u305f\u3081\u3001\u5e45\u5e83\u3044\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3084\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3068\u4e92\u63db\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u508d\u53d7\u306b\u5bfe\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3:<\/strong> DoH \u306f HTTPS \u3092\u6d3b\u7528\u3059\u308b\u3053\u3068\u3067\u3001DNS \u30ea\u30af\u30a8\u30b9\u30c8\u306e\u76d7\u8074\u3084\u6539\u3056\u3093\u3092\u9632\u304e\u3001\u3055\u307e\u3056\u307e\u306a DNS \u30d9\u30fc\u30b9\u306e\u653b\u6483\u304b\u3089\u30e6\u30fc\u30b6\u30fc\u3092\u5b88\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u306e\u5f37\u5316:<\/strong> DNS over HTTPS \u306f\u30e6\u30fc\u30b6\u30fc\u306e DNS \u30af\u30a8\u30ea\u3092\u96a0\u853d\u3057\u3001ISP \u3084\u305d\u306e\u4ed6\u306e\u30a8\u30f3\u30c6\u30a3\u30c6\u30a3\u304c\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u306b\u95a2\u3059\u308b\u30c7\u30fc\u30bf\u3092\u76e3\u8996\u304a\u3088\u3073\u53ce\u96c6\u3059\u308b\u3053\u3068\u3092\u9632\u304e\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5b9f\u88c5\u306e\u5bb9\u6613\u3055:<\/strong> DoH \u306f\u65e2\u5b58\u306e HTTPS \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u3092\u5229\u7528\u3059\u308b\u305f\u3081\u3001\u3059\u3067\u306b HTTPS \u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u3044\u308b Web \u30d6\u30e9\u30a6\u30b6\u30fc\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u306f\u3001DNS over HTTPS \u306e\u5b9f\u88c5\u304c\u6bd4\u8f03\u7684\u7c21\u5358\u3067\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>DNS over HTTPS (DoH) \u306e\u7a2e\u985e<\/h2>\n<p>DNS over HTTPS \u5c0e\u5165\u306b\u306f\u4e3b\u306b 2 \u3064\u306e\u30bf\u30a4\u30d7\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30d1\u30d6\u30ea\u30c3\u30af DoH \u30ea\u30be\u30eb\u30d0\u30fc:<\/strong> \u3053\u308c\u3089\u306f\u3001DoH \u89e3\u6c7a\u3092\u4e00\u822c\u306b\u63d0\u4f9b\u3059\u308b\u3055\u307e\u3056\u307e\u306a\u7d44\u7e54\u3084\u30b5\u30fc\u30d3\u30b9 \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u306b\u3088\u3063\u3066\u904b\u55b6\u3055\u308c\u3066\u3044\u308b DoH \u30b5\u30fc\u30d0\u30fc\u3067\u3059\u3002\u30e6\u30fc\u30b6\u30fc\u306f\u3001\u3053\u308c\u3089\u306e\u30d1\u30d6\u30ea\u30c3\u30af DoH \u30ea\u30be\u30eb\u30d0\u30fc\u3092\u76f4\u63a5\u4f7f\u7528\u3059\u308b\u3088\u3046\u306b\u30c7\u30d0\u30a4\u30b9\u307e\u305f\u306f\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u69cb\u6210\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8 DoH \u30ea\u30be\u30eb\u30d0\u30fc:<\/strong> \u3053\u306e\u5834\u5408\u3001\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8 DoH \u30ea\u30be\u30eb\u30d0\u30fc\u304c\u7279\u5b9a\u306e\u7d44\u7e54\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u5185\u306b\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3055\u308c\u3001\u30d1\u30d6\u30ea\u30c3\u30af DoH \u30ea\u30be\u30eb\u30d0\u30fc\u306b\u4f9d\u5b58\u305b\u305a\u306b\u5b89\u5168\u306a DNS \u89e3\u6c7a\u3092\u30e6\u30fc\u30b6\u30fc\u306b\u63d0\u4f9b\u3057\u307e\u3059\u3002\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8 DoH \u30ea\u30be\u30eb\u30d0\u30fc\u306f\u3001\u7d44\u7e54\u5185\u306e\u5185\u90e8 DNS \u89e3\u6c7a\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3092\u5f37\u5316\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>DNS over HTTPS (DoH) \u306e\u5229\u7528\u65b9\u6cd5\u3068\u5229\u7528\u306b\u4f34\u3046\u554f\u984c\u70b9\u3068\u305d\u306e\u89e3\u6c7a\u7b56<\/h2>\n<h3>DNS over HTTPS (DoH) \u306e\u4f7f\u7528<\/h3>\n<p>\u30e6\u30fc\u30b6\u30fc\u304c HTTPS \u7d4c\u7531\u3067 DNS \u3092\u5229\u7528\u3067\u304d\u308b\u65b9\u6cd5\u306f\u3044\u304f\u3064\u304b\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30a6\u30a7\u30d6\u30d6\u30e9\u30a6\u30b6\u30fc\uff1a<\/strong> Mozilla Firefox \u3084 Google Chrome \u306a\u3069\u306e\u591a\u304f\u306e\u6700\u65b0\u306e Web \u30d6\u30e9\u30a6\u30b6\u306b\u306f\u3001DNS over HTTPS \u306e\u30b5\u30dd\u30fc\u30c8\u304c\u7d44\u307f\u8fbc\u307e\u308c\u3066\u3044\u307e\u3059\u3002\u30e6\u30fc\u30b6\u30fc\u306f\u30d6\u30e9\u30a6\u30b6\u8a2d\u5b9a\u5185\u3067\u3053\u306e\u6a5f\u80fd\u3092\u6709\u52b9\u306b\u3057\u3066\u3001\u5f37\u5316\u3055\u308c\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u306e\u6069\u6075\u3092\u53d7\u3051\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u69cb\u6210:<\/strong> \u4e00\u90e8\u306e\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3067\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u30b7\u30b9\u30c6\u30e0\u5168\u4f53\u3067 DNS over HTTPS \u3092\u6709\u52b9\u306b\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u3001\u3055\u307e\u3056\u307e\u306a\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304b\u3089\u306e\u3059\u3079\u3066\u306e DNS \u30af\u30a8\u30ea\u304c\u78ba\u5b9f\u306b\u6697\u53f7\u5316\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3:<\/strong> \u30e6\u30fc\u30b6\u30fc\u306f\u3001\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3084 Web \u30d6\u30e9\u30a6\u30b6\u30fc\u3068\u306f\u95a2\u4fc2\u306a\u304f\u3001\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306e DNS over HTTPS \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3084 HTTPS \u7d4c\u7531\u306e DNS \u89e3\u6c7a\u3092\u63d0\u4f9b\u3059\u308b\u30a2\u30d7\u30ea\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h3>\u554f\u984c\u3068\u89e3\u6c7a\u7b56<\/h3>\n<p>DNS over HTTPS \u306b\u306f\u591a\u304f\u306e\u5229\u70b9\u304c\u3042\u308a\u307e\u3059\u304c\u3001\u305d\u306e\u5c0e\u5165\u306b\u306f\u6b21\u306e\u3088\u3046\u306a\u8ab2\u984c\u3082\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u975e\u4e92\u63db\u6027:<\/strong> \u3059\u3079\u3066\u306e DNS \u30ea\u30be\u30eb\u30d0\u30fc\u307e\u305f\u306f DNS \u30b5\u30fc\u30d0\u30fc\u304c DoH \u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u3044\u308b\u308f\u3051\u3067\u306f\u306a\u3044\u305f\u3081\u3001\u975e\u4e92\u63db\u6027\u306e\u554f\u984c\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u305f\u3060\u3057\u3001DoH \u304c\u5e83\u304f\u63a1\u7528\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001DNS \u30ea\u30be\u30eb\u30d0\u30fc \u30aa\u30da\u30ec\u30fc\u30bf\u30fc\u306f\u3053\u306e\u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u30b5\u30dd\u30fc\u30c8\u3092\u8ffd\u52a0\u3059\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u61f8\u5ff5:<\/strong> DNS over HTTPS \u306f\u591a\u304f\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u554f\u984c\u306b\u5bfe\u51e6\u3057\u307e\u3059\u304c\u3001\u6b63\u3057\u304f\u5b9f\u88c5\u3055\u308c\u306a\u3044\u3068\u65b0\u305f\u306a\u30ea\u30b9\u30af\u304c\u751f\u3058\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002 DoH \u30ea\u30be\u30eb\u30d0\u30fc\u306f DNS \u30af\u30a8\u30ea\u306e\u65b0\u3057\u3044\u4ef2\u4ecb\u8005\u3068\u306a\u308b\u305f\u3081\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u4f7f\u7528\u3057\u3066\u3044\u308b DoH \u30ea\u30be\u30eb\u30d0\u30fc\u3092\u4fe1\u983c\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u6f5c\u5728\u7684\u306a\u30ea\u30b9\u30af\u3092\u8efd\u6e1b\u3059\u308b\u306b\u306f\u3001\u8a55\u5224\u304c\u826f\u304f\u4fe1\u983c\u3067\u304d\u308b DoH \u30b5\u30fc\u30d3\u30b9 \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u3092\u63a1\u7528\u3059\u308b\u3053\u3068\u304c\u4e0d\u53ef\u6b20\u3067\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>DNS \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3068\u30da\u30a2\u30ec\u30f3\u30bf\u30eb \u30b3\u30f3\u30c8\u30ed\u30fc\u30eb:<\/strong> DNS over HTTPS \u306f DNS \u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3084\u30da\u30a2\u30ec\u30f3\u30bf\u30eb\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u306e\u30e1\u30ab\u30cb\u30ba\u30e0\u3092\u56de\u907f\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u305f\u3081\u3001\u30b3\u30f3\u30c6\u30f3\u30c4\u306e\u5236\u5fa1\u3084\u4e0d\u9069\u5207\u307e\u305f\u306f\u6709\u5bb3\u306a Web \u30b5\u30a4\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306b\u95a2\u3059\u308b\u61f8\u5ff5\u304c\u751f\u3058\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ed\u30fc\u30ab\u30eb\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7ba1\u7406:<\/strong> DNS over HTTPS \u306f\u3001\u30ed\u30fc\u30ab\u30eb \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u7ba1\u7406\u3092 DNS \u306b\u4f9d\u5b58\u3057\u3066\u3044\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7ba1\u7406\u8005\u306b\u3068\u3063\u3066\u8ab2\u984c\u3068\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002 DoH \u3092\u5927\u898f\u6a21\u306b\u5b9f\u88c5\u3059\u308b\u306b\u306f\u3001\u614e\u91cd\u306a\u8a08\u753b\u3068\u30ed\u30fc\u30ab\u30eb \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7ba1\u7406\u8981\u4ef6\u306e\u8003\u616e\u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u3053\u308c\u3089\u306e\u8ab2\u984c\u306b\u5bfe\u51e6\u3059\u308b\u306b\u306f\u3001\u7d44\u7e54\u3084\u500b\u4eba\u306f DNS over HTTPS \u5c55\u958b\u3092\u614e\u91cd\u306b\u8a55\u4fa1\u3057\u3001\u4fe1\u983c\u3067\u304d\u308b DoH \u30b5\u30fc\u30d3\u30b9 \u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u3092\u9078\u629e\u3057\u3001\u9069\u5207\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56\u3092\u5b9f\u88c5\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<h2>\u4e3b\u306a\u7279\u5fb4\u3068\u985e\u4f3c\u7528\u8a9e\u3068\u306e\u6bd4\u8f03<\/h2>\n<p>\u4ee5\u4e0b\u306f\u3001DNS over HTTPS (DoH) \u3068\u540c\u69d8\u306e DNS \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30e1\u30ab\u30cb\u30ba\u30e0\u3068\u306e\u6bd4\u8f03\u3067\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u6a5f\u69cb<\/th>\n<th>\u7279\u5fb4<\/th>\n<th>DoH\u3068\u306e\u6bd4\u8f03<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>DNS over TLS (DoT)<\/td>\n<td>TLS (Transport Layer Security) \u3092\u4f7f\u7528\u3057\u3066 DNS \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u6697\u53f7\u5316\u3057\u307e\u3059\u3002<\/td>\n<td>DoT \u3068 DoH \u306f\u4e21\u65b9\u3068\u3082 DNS \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u6697\u53f7\u5316\u3092\u63d0\u4f9b\u3057\u307e\u3059\u304c\u3001DoH \u306f\u65e2\u5b58\u306e Web \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u3092\u6d3b\u7528\u3059\u308b HTTPS \u3092\u4f7f\u7528\u3057\u3001\u3088\u308a\u5e83\u304f\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>DNSCrypt<\/td>\n<td>\u6697\u53f7\u5316\u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u4f7f\u7528\u3057\u3066 DNS \u30af\u30a8\u30ea\u3092\u4fdd\u8b77\u3057\u307e\u3059<\/td>\n<td>DNSCrypt \u3082 DNS \u6697\u53f7\u5316\u65b9\u5f0f\u306e 1 \u3064\u3067\u3059\u304c\u3001DoH \u306f HTTPS \u306e\u4f7f\u7528\u306b\u3088\u308a\u4eba\u6c17\u304c\u9ad8\u307e\u3063\u3066\u304a\u308a\u3001\u3059\u3067\u306b HTTPS \u3092\u30b5\u30dd\u30fc\u30c8\u3057\u3066\u3044\u308b Web \u30d6\u30e9\u30a6\u30b6\u3084\u30b7\u30b9\u30c6\u30e0\u3068\u4e92\u63db\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>VPN (\u4eee\u60f3\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af)<\/td>\n<td>\u3059\u3079\u3066\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u5b89\u5168\u306a\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8 \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3057\u307e\u3059\u3002<\/td>\n<td>VPN \u306f\u30aa\u30f3\u30e9\u30a4\u30f3 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5168\u4f53\u3092\u5f37\u5316\u3067\u304d\u307e\u3059\u304c\u3001DNS \u30ea\u30af\u30a8\u30b9\u30c8\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306b\u7279\u5225\u306b\u8a2d\u8a08\u3055\u308c\u305f\u3082\u306e\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002 DoH \u306f\u3001\u3059\u3079\u3066\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u5225\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3059\u308b\u3053\u3068\u306a\u304f\u3001DNS \u89e3\u6c7a\u306e\u305f\u3081\u306e\u96c6\u4e2d\u7684\u306a\u6697\u53f7\u5316\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>DNSSEC (DNS \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u62e1\u5f35\u6a5f\u80fd)<\/td>\n<td>DNS\u30c7\u30fc\u30bf\u306b\u30c7\u30b8\u30bf\u30eb\u7f72\u540d\u3092\u8ffd\u52a0\u3057\u307e\u3059<\/td>\n<td>DNSSEC \u306f\u4e3b\u306b\u3001DNS \u30c7\u30fc\u30bf\u306e\u4fe1\u983c\u6027\u3068\u6574\u5408\u6027\u3092\u78ba\u4fdd\u3059\u308b\u3053\u3068\u306b\u91cd\u70b9\u3092\u7f6e\u3044\u3066\u3044\u307e\u3059\u304c\u3001DNS \u30af\u30a8\u30ea\u306f\u6697\u53f7\u5316\u3055\u308c\u307e\u305b\u3093\u3002 DNSSEC \u3068 DoH \u306f\u76f8\u4e92\u306b\u88dc\u5b8c\u3057\u3001\u5305\u62ec\u7684\u306a DNS \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30a2\u30d7\u30ed\u30fc\u30c1\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>DNS over HTTPS (DoH) \u306b\u95a2\u9023\u3059\u308b\u5c06\u6765\u306e\u5c55\u671b\u3068\u30c6\u30af\u30ce\u30ed\u30b8\u30fc<\/h2>\n<p>DNS over HTTPS \u306f\u3001DNS \u901a\u4fe1\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u78ba\u4fdd\u3057\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u4e0a\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3092\u4fdd\u8b77\u3059\u308b\u4e0a\u3067\u4eca\u5f8c\u3082\u5927\u304d\u306a\u9032\u6b69\u3092\u3082\u305f\u3089\u3059\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002 DNS over HTTPS \u306e\u666e\u53ca\u304c\u9032\u3080\u306b\u3064\u308c\u3066\u3001DNS over HTTPS \u306b\u95a2\u9023\u3059\u308b\u6b21\u306e\u3088\u3046\u306a\u958b\u767a\u3068\u30c6\u30af\u30ce\u30ed\u30b8\u304c\u671f\u5f85\u3055\u308c\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30b5\u30dd\u30fc\u30c8\u306e\u5f37\u5316:<\/strong> \u3088\u308a\u591a\u304f\u306e DNS \u30ea\u30be\u30eb\u30d0\u30fc\u3068 DNS \u30b5\u30fc\u30d0\u30fc\u3067 DoH \u306e\u30b5\u30dd\u30fc\u30c8\u304c\u8ffd\u52a0\u3055\u308c\u3001\u5b89\u5168\u306a DNS \u89e3\u6c7a\u306e\u6a19\u6e96\u6a5f\u80fd\u306b\u306a\u308b\u3053\u3068\u304c\u4e88\u60f3\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6697\u53f7\u5316\u3055\u308c\u305f SNI (\u30b5\u30fc\u30d0\u30fc\u540d\u8868\u793a):<\/strong> \u6697\u53f7\u5316\u3055\u308c\u305f SNI \u306f\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u308b Web \u30b5\u30a4\u30c8\u306e\u30db\u30b9\u30c8\u540d\u3092\u96a0\u3059\u88dc\u5b8c\u7684\u306a\u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u3067\u3059\u3002 DoH \u3068\u4f75\u7528\u3057\u3066\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3092\u3055\u3089\u306b\u5f37\u5316\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>IoT \u30c7\u30d0\u30a4\u30b9\u306e HTTPS \u7d4c\u7531\u306e DNS:<\/strong> \u30e2\u30ce\u306e\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 (IoT) \u304c\u62e1\u5927\u3057\u7d9a\u3051\u308b\u4e2d\u3001IoT \u30c7\u30d0\u30a4\u30b9\u306b DNS over HTTPS \u3092\u5b9f\u88c5\u3059\u308b\u3068\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u5411\u4e0a\u3057\u3001DNS \u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u6f5c\u5728\u7684\u306a\u653b\u6483\u3092\u9632\u3050\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6a19\u6e96\u5316\u3068\u898f\u5236:<\/strong> DoH \u306e\u63a1\u7528\u304c\u9032\u3080\u306b\u3064\u308c\u3066\u3001\u4e00\u8cab\u6027\u306e\u3042\u308b\u5b89\u5168\u306a\u4f7f\u7528\u3092\u78ba\u4fdd\u3059\u308b\u305f\u3081\u306b\u3001\u305d\u306e\u5b9f\u88c5\u306b\u95a2\u3059\u308b\u6a19\u6e96\u5316\u306e\u53d6\u308a\u7d44\u307f\u3068\u898f\u5236\u304c\u5c0e\u5165\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092\u4f7f\u7528\u3059\u308b\u65b9\u6cd5\u3001\u307e\u305f\u306f DNS over HTTPS (DoH) \u306b\u95a2\u9023\u4ed8\u3051\u308b\u65b9\u6cd5<\/h2>\n<p>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u6b21\u306e\u65b9\u6cd5\u3067 DNS over HTTPS \u5c55\u958b\u3092\u5f37\u5316\u3059\u308b\u4e0a\u3067\u91cd\u8981\u306a\u5f79\u5272\u3092\u679c\u305f\u3057\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30ad\u30e3\u30c3\u30b7\u30e5\u3068\u9ad8\u901f\u5316:<\/strong> \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001DoH \u3092\u901a\u3058\u3066\u53d6\u5f97\u3057\u305f DNS \u5fdc\u7b54\u3092\u30ad\u30e3\u30c3\u30b7\u30e5\u3067\u304d\u307e\u3059\u3002\u3053\u306e\u30ad\u30e3\u30c3\u30b7\u30e5\u306b\u3088\u308a\u3001\u5f8c\u7d9a\u306e DNS \u89e3\u6c7a\u304c\u9ad8\u901f\u5316\u3055\u308c\u3001\u5168\u4f53\u7684\u306a\u9045\u5ef6\u304c\u77ed\u7e2e\u3055\u308c\u3001\u30e6\u30fc\u30b6\u30fc \u30a8\u30af\u30b9\u30da\u30ea\u30a8\u30f3\u30b9\u304c\u5411\u4e0a\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u8ca0\u8377\u5206\u6563:<\/strong> \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001DNS over HTTPS \u30af\u30a8\u30ea\u3092\u8907\u6570\u306e DoH \u30b5\u30fc\u30d0\u30fc\u306b\u5206\u6563\u3057\u3066\u3001\u52b9\u7387\u7684\u306a\u5229\u7528\u3092\u78ba\u4fdd\u3057\u3001DoH \u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u306e\u8ca0\u8377\u3092\u5206\u6563\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3068\u30ed\u30ae\u30f3\u30b0:<\/strong> \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u7279\u5b9a\u306e DNS \u8981\u6c42\u3092\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u3057\u305f\u308a\u3001DNS \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30ed\u30b0\u306b\u8a18\u9332\u3057\u305f\u308a\u3059\u308b\u3088\u3046\u306b\u69cb\u6210\u3067\u304d\u3001\u7ba1\u7406\u8005\u306b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5185\u306e DNS \u306e\u4f7f\u7528\u72b6\u6cc1\u306b\u95a2\u3059\u308b\u8cb4\u91cd\u306a\u6d1e\u5bdf\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3068\u533f\u540d\u6027:<\/strong> \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068 DoH \u30ea\u30be\u30eb\u30d0\u30fc\u306e\u9593\u3067\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u306b\u3088\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u81ea\u5206\u306e\u672c\u5f53\u306e IP \u30a2\u30c9\u30ec\u30b9\u3092 DoH \u30ea\u30be\u30eb\u30d0\u30fc\u304b\u3089\u96a0\u3059\u3053\u3068\u3067\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3068\u533f\u540d\u6027\u3092\u3055\u3089\u306b\u5f37\u5316\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5730\u7406\u4f4d\u7f6e\u60c5\u5831\u3068\u30b3\u30f3\u30c6\u30f3\u30c4 \u30a2\u30af\u30bb\u30b9:<\/strong> \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u7570\u306a\u308b\u5730\u57df\u306b\u3042\u308b\u30b5\u30fc\u30d0\u30fc\u3092\u4ecb\u3057\u3066 HTTPS \u7d4c\u7531\u3067 DNS \u30ea\u30af\u30a8\u30b9\u30c8\u3092\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u3059\u308b\u3053\u3068\u306b\u3088\u308a\u3001\u5730\u7406\u7684\u306b\u5236\u9650\u3055\u308c\u305f\u30b3\u30f3\u30c6\u30f3\u30c4\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u30e6\u30fc\u30b6\u30fc\u306b\u63d0\u4f9b\u3059\u308b\u3053\u3068\u3082\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<p>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092 DNS over HTTPS \u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u306b\u7d44\u307f\u8fbc\u3080\u3068\u3001\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u304c\u6700\u9069\u5316\u3055\u308c\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u5411\u4e0a\u3057\u3001\u8ffd\u52a0\u306e\u5236\u5fa1\u304a\u3088\u3073\u30ab\u30b9\u30bf\u30de\u30a4\u30ba \u30aa\u30d7\u30b7\u30e7\u30f3\u304c\u63d0\u4f9b\u3055\u308c\u307e\u3059\u3002<\/p>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<p>DNS over HTTPS (DoH) \u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ol>\n<li>DNS over HTTPS \u306b\u95a2\u3059\u308b Internet Engineering Task Force (IETF) \u306e\u8349\u6848: <a href=\"https:\/\/datatracker.ietf.org\/doc\/draft-ietf-doh-dns-over-https\/\" target=\"_new\" rel=\"noopener nofollow\">https:\/\/datatracker.ietf.org\/doc\/draft-ietf-doh-dns-over-https\/<\/a><\/li>\n<li>Mozilla Developer Network (MDN) \u2013 DNS over HTTPS (DoH) \u306e\u6982\u8981: <a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Overview_of_DNS_over_HTTPS\" target=\"_new\" rel=\"noopener nofollow\">https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Overview_of_DNS_over_HTTPS<\/a><\/li>\n<li>Google Developers \u2013 DNS over HTTPS (DoH) \u306e\u8aac\u660e: <a href=\"https:\/\/developers.google.com\/speed\/public-dns\/docs\/doh\" target=\"_new\" rel=\"noopener nofollow\">https:\/\/developers.google.com\/speed\/public-dns\/docs\/doh<\/a><\/li>\n<\/ol>\n<p>\u7d50\u8ad6\u3068\u3057\u3066\u3001DNS over HTTPS (DoH) \u306f\u3001DNS \u901a\u4fe1\u3092\u4fdd\u8b77\u3057\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u4e0a\u3067\u30e6\u30fc\u30b6\u30fc\u306e\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3092\u4fdd\u8b77\u3059\u308b\u4e0a\u3067\u91cd\u8981\u306a\u9032\u6b69\u3067\u3059\u3002 DoH \u306f\u3001HTTPS \u3092\u4f7f\u7528\u3057\u3066 DNS \u30af\u30a8\u30ea\u3092\u6697\u53f7\u5316\u3059\u308b\u3053\u3068\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u306e DNS \u30ea\u30af\u30a8\u30b9\u30c8\u306e\u6a5f\u5bc6\u6027\u3092\u78ba\u4fdd\u3057\u3001\u3055\u307e\u3056\u307e\u306a\u8105\u5a01\u304b\u3089\u4fdd\u8b77\u3057\u307e\u3059\u3002 DoH \u306f\u9032\u5316\u3092\u7d9a\u3051\u3001\u5e45\u5e83\u3044\u652f\u6301\u3092\u5f97\u3066\u3044\u308b\u305f\u3081\u3001\u5c06\u6765\u7684\u306b\u306f\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u6a19\u6e96\u6a5f\u80fd\u3068\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3068 DNS over HTTPS \u3092\u7d44\u307f\u8fbc\u3080\u3068\u3001\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u304c\u3055\u3089\u306b\u6700\u9069\u5316\u3055\u308c\u3001\u7d44\u7e54\u3068\u500b\u3005\u306e\u30e6\u30fc\u30b6\u30fc\u306e DNS \u89e3\u6c7a\u306e\u5236\u5fa1\u304c\u5f37\u5316\u3055\u308c\u307e\u3059\u3002<\/p>","protected":false},"featured_media":468245,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476910","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>DNS over HTTPS (DoH): Securing DNS Requests with Enhanced Privacy<\/mark>","faq_items":[{"question":"What is DNS over HTTPS (DoH)?","answer":"<p>DNS over HTTPS (DoH) is a protocol that enhances the security and privacy of DNS requests by encrypting them using HTTPS (Hypertext Transfer Protocol Secure). It ensures that your DNS queries remain confidential and protected from interception or manipulation.<\/p>"},{"question":"How did DNS over HTTPS (DoH) originate?","answer":"<p>The concept of encrypting DNS traffic gained significant attention when it was first proposed by Patrick McManus of Mozilla in October 2017. Since then, the protocol has undergone refinements and iterations, becoming widely accepted and adopted.<\/p>"},{"question":"How does DNS over HTTPS (DoH) work?","answer":"<p>DNS over HTTPS operates by encrypting DNS queries and responses in HTTPS packets, which are then sent to and received from specialized DoH servers. This end-to-end encryption secures your DNS communication and protects against various DNS-based attacks.<\/p>"},{"question":"What are the key features of DNS over HTTPS (DoH)?","answer":"<p>DNS over HTTPS offers end-to-end encryption, improved privacy, enhanced security against interception, and compatibility with a wide range of platforms and operating systems. It also enables circumvention of DNS filtering and censorship.<\/p>"},{"question":"What types of DNS over HTTPS (DoH) exist?","answer":"<p>There are two main types of DoH deployments: Public DoH Resolvers, operated by service providers for public use, and Private DoH Resolvers, set up within an organization's network infrastructure to enhance internal DNS resolution security.<\/p>"},{"question":"How can I use DNS over HTTPS (DoH)?","answer":"<p>You can use DNS over HTTPS in several ways:<\/p><ol><li>Enable it in modern web browsers like Mozilla Firefox and Google Chrome.<\/li><li>Configure it system-wide in some operating systems.<\/li><li>Utilize third-party applications that support DoH independently.<\/li><\/ol>"},{"question":"What are the challenges and solutions related to DNS over HTTPS (DoH) usage?","answer":"<p>Challenges include potential incompatibility, security concerns with untrusted DoH resolvers, bypassing DNS filtering, and potential difficulties in local network management. Solutions involve selecting reputable DoH service providers and carefully planning DoH deployments.<\/p>"},{"question":"What are the future perspectives of DNS over HTTPS (DoH)?","answer":"<p>As DoH adoption continues to grow, we can expect increased support, encrypted SNI, implementation in IoT devices, standardization, and regulations to ensure secure and consistent usage.<\/p>"},{"question":"How can proxy servers be associated with DNS over HTTPS (DoH)?","answer":"<p>Proxy servers can enhance DoH deployments by caching and accelerating DNS responses, load balancing queries, providing filtering and logging capabilities, improving privacy and anonymity, and assisting with content access and geolocation.<\/p>"},{"question":"Where can I find more information about DNS over HTTPS (DoH)?","answer":"<p>For further details, you can refer to the following resources:<\/p><ol><li>Internet Engineering Task Force (IETF) Draft on DNS over HTTPS: <a href=\"https:\/\/datatracker.ietf.org\/doc\/draft-ietf-doh-dns-over-https\/\" target=\"_new\">https:\/\/datatracker.ietf.org\/doc\/draft-ietf-doh-dns-over-https\/<\/a><\/li><li>Mozilla Developer Network (MDN) - Introduction to DNS over HTTPS (DoH): <a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Overview_of_DNS_over_HTTPS\" target=\"_new\">https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Overview_of_DNS_over_HTTPS<\/a><\/li><li>Google Developers - DNS over HTTPS (DoH) Explained: <a href=\"https:\/\/developers.google.com\/speed\/public-dns\/docs\/doh\" target=\"_new\">https:\/\/developers.google.com\/speed\/public-dns\/docs\/doh<\/a><\/li><\/ol>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/476910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/476910\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/468245"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=476910"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}