{"id":186,"date":"2024-12-27T12:08:34","date_gmt":"2024-12-27T10:08:34","guid":{"rendered":"https:\/\/nwps.fi\/wordpress\/?page_id=186"},"modified":"2026-03-21T19:53:45","modified_gmt":"2026-03-21T17:53:45","slug":"dnscrypt","status":"publish","type":"page","link":"https:\/\/nwps.fi\/wordpress\/dnscrypt\/","title":{"rendered":"DNSCrypt"},"content":{"rendered":"\n<p style=\"\" class=\"has-text-align-center has-small-font-size wp-block-paragraph\">[ <a href=\"https:\/\/nwps.fi\/mrtg\/dnscrypt-week.png\" data-type=\"link\" data-id=\"https:\/\/nwps.fi\/mrtg\/dnscrypt-week.png\">viikko<\/a> | <a href=\"https:\/\/nwps.fi\/mrtg\/dnscrypt-month.png\" data-type=\"link\" data-id=\"https:\/\/nwps.fi\/mrtg\/dnscrypt-month.png\">kuukausi<\/a> | <a href=\"https:\/\/nwps.fi\/mrtg\/dnscrypt-year.png\">vuosi<\/a> | <a href=\"https:\/\/nwps.fi\/mrtg\/dnscrypt-5year.png\">15 vuotta<\/a> ]<\/p>\n\n\n\n<figure style=\"\" class=\"wp-block-image aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/nwps.fi\/mrtg\/dnscrypt-day.png\" alt=\"\"\/><\/figure>\n\n\n\n<figure class=\"wp-block-table is-style-stripes is-style-stripes--1\" style=\"font-size:0.6rem;\"><table><tbody><tr><td>Nimi<\/td><td>2.dnscrypt-cert.nwps.fi<\/td><\/tr><tr><td>Sijainti<\/td><td>Helsinki, Suomi<\/td><\/tr><tr><td>Public key<\/td><td>ba8af36ed73f256114d0a06118b656baf22721e19df91e427041d84be488cfb7<\/td><\/tr><tr><td><\/td><td><strong>V\u00e4limuistillinen, sensuroimaton, lokittamaton, DNSSEC-yhteensopiva<\/strong><\/td><\/tr><tr><td>DNS Stamp<\/td><td>sdns:\/\/AQcAAAAAAAAAETk1LjIxNy4xMS42Mzo4NDQzILqK827XPyVhFNCgYRi2VrryJyHhnfkeQnBB2EvkiM-3FzIuZG5zY3J5cHQtY2VydC5ud3BzLmZp<\/td><\/tr><tr><td>Anonymized DNS relaying<\/td><td>sdns:\/\/gRE5NS4yMTcuMTEuNjM6ODQ0Mw<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\"><strong>DNSCrypt<\/strong> on protokolla, joka lis\u00e4\u00e4 salauksen ja autentikoinnin DNS-kyselyihin, mik\u00e4 tekee verkkoselaamisesta turvallisempaa ja yksityisemp\u00e4\u00e4. Sen tarkoitus on suojata DNS-kyselyt, jotka normaalisti l\u00e4hetet\u00e4\u00e4n salaamattomana, kolmansien osapuolten salakuuntelulta tai muokkaukselta.<\/p>\n\n\n\n<h3 style=\"\" id=\"dnscryptin-hyodyt\" class=\"wp-block-heading\"><strong>DNSCryptin hy\u00f6dyt<\/strong><\/h3>\n\n\n\n<ol style=\"\" class=\"wp-block-list\">\n<li style=\"\"><strong>Salattu liikenne<\/strong>: Est\u00e4\u00e4 DNS-kyselyiden sieppaamisen ja tietojen urkinnan.<\/li>\n\n\n\n<li style=\"\"><strong>Tietojen eheys<\/strong>: Varmistaa, ett\u00e4 vastaukset DNS-kyselyihin eiv\u00e4t ole muokattuja.<\/li>\n\n\n\n<li style=\"\"><strong>Yksityisyys<\/strong>: Piilottaa DNS-kyselyt palveluntarjoajilta ja muilta ulkopuolisilta.<\/li>\n\n\n\n<li style=\"\"><strong>Suojaus v\u00e4\u00e4rink\u00e4yt\u00f6ksilt\u00e4<\/strong>: V\u00e4hent\u00e4\u00e4 mahdollisuuksia DNS-spoofing- ja MITM-hy\u00f6kk\u00e4yksille.<\/li>\n<\/ol>\n\n\n\n<hr style=\"\" class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 style=\"\" id=\"dnscryptin-kaytto\" class=\"wp-block-heading\"><strong>DNSCryptin k\u00e4ytt\u00f6<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\">DNSCryptin k\u00e4ytt\u00f6 edellytt\u00e4\u00e4 DNSCrypt-asiakasohjelman asentamista ja konfigurointia. Alla on ohjeet Windowsille, Linuxille ja macOS:lle.<\/p>\n\n\n\n<hr style=\"\" class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 style=\"\" id=\"1-windows\" class=\"wp-block-heading\"><strong>1. Windows<\/strong><\/h4>\n\n\n\n<ul style=\"\" class=\"wp-block-list\">\n<li style=\"\"><strong>Asenna DNSCrypt Proxy<\/strong>:\n<ol style=\"\" class=\"wp-block-list\">\n<li style=\"\">Lataa <a href=\"https:\/\/github.com\/DNSCrypt\/dnscrypt-proxy\/releases\">DNSCrypt Proxy<\/a> ja pura tiedostot.<\/li>\n\n\n\n<li style=\"\">Aseta konfiguraatiotiedosto <code>dnscrypt-proxy.toml<\/code> oikein. M\u00e4\u00e4rit\u00e4 palvelinlistasta (esim. <a href=\"https:\/\/dnscrypt.info\/public-servers\/\">public resolvers<\/a>) haluamasi DNS-palvelin.<\/li>\n\n\n\n<li style=\"\">Aja <code>dnscrypt-proxy<\/code> taustapalveluna tai ohjelmana.<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li style=\"\"><strong>Vaihtoehto<\/strong>: K\u00e4yt\u00e4 valmiita sovelluksia, kuten <a href=\"https:\/\/simplednscrypt.org\/\">Simple DNSCrypt<\/a>, jossa on graafinen k\u00e4ytt\u00f6liittym\u00e4.<\/li>\n<\/ul>\n\n\n\n<hr style=\"\" class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 style=\"\" id=\"2-linux\" class=\"wp-block-heading\"><strong>2. Linux<\/strong><\/h4>\n\n\n\n<ol style=\"\" class=\"wp-block-list\">\n<li style=\"\">Asenna DNSCrypt Proxy jakelun paketinhallinnasta tai suoraan GitHubista.\n<ul style=\"\" class=\"wp-block-list\">\n<li style=\"\">Esimerkiksi Ubuntu\/Debian: <code>sudo apt install dnscrypt-proxy<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\">Config-tiedosto l\u00f6ytyy yleens\u00e4 polusta:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\">\ud83d\udccd <strong><code>\/etc\/dnscrypt-proxy\/dnscrypt-proxy.toml<\/code><\/strong><\/p>\n\n\n\n<h3 style=\"\" id=\"%25f0%259f%2593%258c-vaiheet-palvelimen-vaihtamiseksi\" class=\"wp-block-heading\">\ud83d\udccc <strong>Vaiheet palvelimen vaihtamiseksi<\/strong><\/h3>\n\n\n\n<ol style=\"\" class=\"wp-block-list\">\n<li style=\"\"><strong>Avaa konfiguraatiotiedosto:<\/strong> <code>sudo nano \/etc\/dnscrypt-proxy\/dnscrypt-proxy.toml<\/code><\/li>\n\n\n\n<li style=\"\"><strong>Muokkaa palvelinasetuksia:<\/strong>\n<ul style=\"\" class=\"wp-block-list\">\n<li style=\"\">Etsi rivi, jossa on <code>server_names<\/code>, ja varmista, ett\u00e4 se on kommentoitu pois (tai tyhj\u00e4), jotta vain m\u00e4\u00e4rittelem\u00e4si palvelin k\u00e4ytet\u00e4\u00e4n: <code># server_names = []<\/code><\/li>\n\n\n\n<li style=\"\">Lis\u00e4\u00e4 tai muokkaa <code>static<\/code>-asetuksia n\u00e4in: <\/li>\n\n\n\n<li style=\"\"><code>[static.\"nwps.fi\"] stamp = \"sdns:\/\/AQcAAAAAAAAAETk1LjIxNy4xMS42Mzo4NDQzILqK827XPyVhFNCgYRi2VrryJyHhnfkeQnBB2EvkiM-3FzIuZG5zY3J5cHQtY2VydC5ud3BzLmZp\"<\/code><\/li>\n\n\n\n<li style=\"\">Aseta t\u00e4m\u00e4 palvelin oletukseksi: <code>server_names = [\"nwps.fi\"]<\/code><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li style=\"\"><strong>Tallenna ja sulje tiedosto:<\/strong>\n<ul style=\"\" class=\"wp-block-list\">\n<li style=\"\">Paina <code>CTRL + X<\/code>, sitten <code>Y<\/code> ja <code>Enter<\/code> tallentaaksesi muutokset.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li style=\"\"><strong>K\u00e4ynnist\u00e4 palvelu uudelleen:<\/strong> <code>sudo systemctl restart dnscrypt-proxy<\/code><\/li>\n\n\n\n<li style=\"\"><strong>Tarkista, ett\u00e4 dnscrypt-proxy k\u00e4ytt\u00e4\u00e4 oikeaa palvelinta:<\/strong> <code>sudo systemctl status dnscrypt-proxy <\/code>Voit my\u00f6s testata DNS-resoluutiota: <code>dig @127.0.0.1 example.com<\/code><\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\">Jos k\u00e4yt\u00e4t eri bind-asetusta, varmista, ett\u00e4 kyselyt menev\u00e4t <code>dnscrypt-proxy<\/code>:n kautta (<code>listen_addresses<\/code>-asetuksessa m\u00e4\u00e4ritetty IP, yleens\u00e4 <code>127.0.0.1<\/code>).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\">\ud83d\udd39 <strong>Nyt dnscrypt-proxy k\u00e4ytt\u00e4\u00e4 ainoastaan m\u00e4\u00e4ritt\u00e4m\u00e4\u00e4si DNS-palvelinta!<\/strong><\/p>\n\n\n\n<hr style=\"\" class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h4 style=\"\" id=\"3-macos\" class=\"wp-block-heading\"><strong>3. macOS<\/strong><\/h4>\n\n\n\n<ul style=\"\" class=\"wp-block-list\">\n<li style=\"\">K\u00e4yt\u00e4 sovellusta, kuten <a href=\"https:\/\/github.com\/alterstep\/dnscrypt-osxclient\">DNSCrypt Menubar<\/a>, joka on helppo asentaa ja k\u00e4ytt\u00e4\u00e4.<\/li>\n\n\n\n<li style=\"\">Vaihtoehtoisesti asenna DNSCrypt Proxy ja m\u00e4\u00e4rit\u00e4 se k\u00e4sin.<\/li>\n<\/ul>\n\n\n\n<h3 style=\"\" id=\"\" class=\"wp-block-heading\"><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ viikko | kuukausi | vuosi | 15 vuotta ] Nimi 2.dnscrypt-cert.nwps.fi Sijainti Helsinki, Suomi Public key ba8af36ed73f256114d0a06118b656baf22721e19df91e427041d84be488cfb7 V\u00e4limuistillinen, sensuroimaton, lokittamaton, DNSSEC-yhteensopiva DNS Stamp sdns:\/\/AQcAAAAAAAAAETk1LjIxNy4xMS42Mzo4NDQzILqK827XPyVhFNCgYRi2VrryJyHhnfkeQnBB2EvkiM-3FzIuZG5zY3J5cHQtY2VydC5ud3BzLmZp Anonymized DNS relaying sdns:\/\/gRE5NS4yMTcuMTEuNjM6ODQ0Mw DNSCrypt on protokolla, joka lis\u00e4\u00e4 salauksen ja autentikoinnin DNS-kyselyihin, mik\u00e4 tekee verkkoselaamisesta turvallisempaa ja yksityisemp\u00e4\u00e4. Sen tarkoitus on suojata DNS-kyselyt, jotka normaalisti l\u00e4hetet\u00e4\u00e4n salaamattomana, kolmansien osapuolten [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"footnotes":""},"class_list":["post-186","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/nwps.fi\/wordpress\/wp-json\/wp\/v2\/pages\/186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nwps.fi\/wordpress\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nwps.fi\/wordpress\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nwps.fi\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nwps.fi\/wordpress\/wp-json\/wp\/v2\/comments?post=186"}],"version-history":[{"count":21,"href":"https:\/\/nwps.fi\/wordpress\/wp-json\/wp\/v2\/pages\/186\/revisions"}],"predecessor-version":[{"id":557,"href":"https:\/\/nwps.fi\/wordpress\/wp-json\/wp\/v2\/pages\/186\/revisions\/557"}],"wp:attachment":[{"href":"https:\/\/nwps.fi\/wordpress\/wp-json\/wp\/v2\/media?parent=186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}