DNS HTTP 请求

发布于 2024-07-13 18:21:42 字数 357 浏览 8 评论 0原文

如果我要将 URL 发送到 DNS 服务器,可以说:“dev.example.com/?username=daniel”, 到底发送到 DNS 服务器的是什么? 整个 URL(包括任何传递的参数)还是只是网站部分“dev.example.com”? 我想知道应该在 URL 中隐藏哪些参数。

我之所以问这个问题是因为我不想将机密信息发送到 DNS 服务器。 我对所有 URL 使用 https,但当有人要求访问某个 URL 时,我希望对所有 DNS 服务器隐藏该 URL 中的所有参数信息。 我只是不确定发送到 DNS 服务器以建立 SSL 连接的内容。 由于我有一个网站几乎需要对每个参数进行加密,因此我担心如果 DNS 读取该信息,如何隐藏该信息。

If I was to send a URL to a DNS server, lets say: "dev.example.com/?username=daniel",
what is exactly sent to the DNS server? The whole URL (including any passed parameters) or is it just website section "dev.example.com"? I want to know so that I know what parameters I should be hiding in a URL.

The reason I am asking is because I just don't want confidential information sent to DNS servers. I am using https for all URLs but when someone asks to go to a URL, I want all parameter information from the URLs to be hidden from all DNS servers. I just am not sure what is sent to a DNS server to establish an SSL connection. Since I have a site that needs just about every parameter encrypted I am concerned about how to hide this information if DNS reads it.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(4

£烟消云散 2024-07-20 18:21:42

dev.example.com 可以通过将其发送到您的 DNS 服务器(几乎肯定会引用另一个 DNS 服务器)来解析(如果它尚未在本地缓存中)。

仅发送“dev.example.com”,其余部分将仅作为 HTTP 请求传递到已解析的 IP 号码。

因此,您不需要隐藏任何参数,当然,如果用户从您的页面(作为引用者)访问这些参数,这些参数很可能最终出现在另一个网站上。 如果这些参数确实很敏感,请对其进行编码或(ab)使用 POST,

dev.example.com may be resolved (if it is not already in the local cache) by sending it to your DNS server (which will almost certainly refer to another DNS Server).

Only the "dev.example.com" is sent, the rest will be passed only to the resolved IP number as an HTTP request.

So, you do not need to hide any parameters, except of course that these parameters could well end up on another website if a user visits it from your page (as a referer). If these parameters are really sensitive encode them or (ab)use POST,

永不分离 2024-07-20 18:21:42

域名系统 (DNS) 将主机名解析为 IP 地址,因此仅发送主机名的值。

The Domain Name System (DNS) resolves hostnames to IP addresses, so only the value of the hostname is sent.

愛上了 2024-07-20 18:21:42

DNS 与协议无关。 发送的值只是主机名,因此在本例中为 dev.example.com

我也不确定这与“参数隐藏”有什么关系,但如果您可以扩展这一点,我们也许能够提供更有用的建议。

编辑(根据您的更新):啊。 那么您就可以开始了,因为只发送了域名本身。

DNS is agnostic of protocol. The value sent is just the hostname, so in this case dev.example.com.

I'm also not sure what this has to do with "parameter hiding" but if you could expand on that we might be able to provide more helpful advice.

Edit (based on your update): Ah. Well then you shoud be good to go, as only the domain name itself is sent.

禾厶谷欠 2024-07-20 18:21:42

如果 DNS 服务器恰好是根 Web 应用程序恰好回答“用户名”查询的 Web 服务器,那么您可能会得到一些结果。 除此之外,DNS 是另一种动物。

If the DNS server happens to be a web server which root web application happens to answer to the "username" query, then you might get something back. Other than that, DNS is another kind of animal.

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文