chrome浏览器无法更新
Chrome 86 introduces security and performance improvements by way of DoH, mixed forms, domain only URLs, and caching mechanisms.
Chrome 86通过DoH,混合表单,仅域URL和缓存机制引入了安全性和性能改进。
Is your go to browser Google Chrome? If not, then here are some features that might make you think twice about switching. If you’re already a satisfied customer, be aware of the changes that are coming.
您要使用浏览器Google Chrome吗? 如果没有,那么这里的一些功能可能会让您三思而后行。 如果您已经是满意的客户,请注意即将发生的变化。
Let’s dive right in and see what Google’s releasing in the 86 update that increases security for the end-user and boosts performance.
让我们深入研究一下Google在86更新中发布的内容,这些更新可以提高最终用户的安全性并提高性能。
通过HTTPS的DNS(DoH) (DNS over HTTPS (DoH))
Built on top of HTTPS and designed to improve user security and privacy while browsing, DoH functionality is a game-changer and provides encryption for DNS queries. This keeps the ISP from snooping and the bad guys out.
DoH功能建立在HTTPS之上,旨在提高浏览时用户的安全性和隐私性,它是改变游戏规则的功能,并为DNS查询提供加密。 这可以防止ISP窥探和阻止坏人。
![An image shows two green locks letting you know DNS is a secure request.](https://miro.medium.com/max/9999/1*WL8fTD7BMdPJ40V_eNcBdw.png)
It’s about time! DNS remains unencrypted since its birth in 1987. Here are a few things you need to know to understand the importance of this change.
是时候了! 自1987年诞生以来,DNS一直未加密 。要了解此更改的重要性,您需要了解以下几点。
Chrome can verify the authenticity of the DNS servers now.
Chrome现在可以验证DNS服务器的真实性 。
We can verify the integrity of data returned from the DNS server.
我们可以验证从DNS服务器返回的数据的完整性 。
Provides protection against network-level surveillance of online activities.
提供针对在线活动的网络级监视的保护 。
- Even prevents the ISP from snooping. 甚至防止ISP监听。
Google is diligently working with internet service providers to make sure the rollout and implementation are superb. DoH requires ISPs to be involved because encryption has to be set up on both ends.
Google致力于与互联网服务提供商合作,以确保其出色的部署和实施。 DoH要求ISP参与,因为必须在两端都设置加密。
If your ISP supports DoH, Chrome will use it. If it doesn’t, DNS queries will be sent over the wire unencrypted like they always have.
如果您的ISP支持DoH,Chrome将使用它。 如果没有,DNS查询将像以往一样通过未加密的线路发送。
混合形式 (Mixed Forms)
You’re supposed to feel all safe, warm, and fuzzy inside when the site you are using has that notable lock icon by the URL showing its traffic is sent over HTTPS, right?
当您正在使用的网站的URL上带有显着的锁定图标(表明其流量通过HTTPS发送)时,您应该会感到内部安全 , 温暖和模糊 。
Sites you connect to over HTTPS can still be insecure by way of form submissions. Forms on an HTTPS site that are submitted over HTTP are known as ‘mixed forms’.
通过HTTPS连接到的站点仍然可以通过表单提交的方式来保证安全。 通过HTTP提交的HTTPS站点上的表单称为“ 混合表单 ”。
As we all know, data that is sent over an HTTP protocol is not encrypted and can be easily read by an attacker. Protecting your information is a three-step process:
众所周知,通过HTTP协议发送的数据未加密,攻击者可以轻松读取。 保护您的信息的过程分为三个步骤:
- Chrome will disable Chrome Password Manager from auto-filling sensitive information into the form. Chrome会禁止Chrome Password Manager将敏感信息自动填写到表单中。
If the user begins typing data into the mixed form manually then a friendly warning message will be shown.
如果用户开始手动将数据键入混合形式,则会显示友好的警告消息 。
Submitting data into a mixed form will send the user to a warning page which will allow them to override safety measures.
If that doesn’t stop you from unknowingly submitting information to a mixed form, I don’t know what will.
如果那不能阻止您在不知不觉中以混合形式提交信息,我不知道会怎样。
网址缩短 (URL Shortening)
Google plan for this technique is to see if presenting URLs in a certain manner will help the user realize they’re on a malicious site. They hope it will help protect us from phishing and social engineering attacks.
Google对该技术的计划是查看以某种方式显示URL是否可以帮助用户意识到他们位于恶意网站上。 他们希望这将有助于保护我们免受网络钓鱼和社会工程攻击。
![This is a fig showing that when you hover the mouse over the url of the website then the full url is shown.](https://miro.medium.com/freeze/max/9999/1*6Rdg_xZnsUy-z2X0mfi65Q.gif)
It will take time to know if the techinque is a success because data will need to be aggregated. It makes sense to only show the root URL because the lock and the domain itself are very obvious at that point.
由于需要汇总数据,因此需要一定时间才能知道该技术是否成功。 仅显示根URL是有意义的,因为此时锁定和域本身非常明显。
Most phishing and social engineering attacks execute on domains that are obscured by the text around it.
大多数网络钓鱼和社会工程学攻击都在周围文字掩盖的域上执行。
With Google’s good intentions and all the data that can be aggregated from this feature, I think they will find the right balance between presenting informative information to the end-user about the current domain and protecting them from certain attacks.
凭借Google的良好意愿以及可以从此功能聚合的所有数据,我认为他们会在向最终用户提供有关当前域的信息和保护它们免受某些攻击之间找到适当的平衡。
后退缓存 (Backward-Forward Cache)
Back/forward cache will cache the entire page, even the JavaScript and DOM state. This functionality increases page load times drastically. Google list three main requirements for bfcache in the initial document.
后退/前进缓存将缓存整个页面,甚至包括JavaScript和DOM状态。 此功能大大增加了页面加载时间。 Google在初始 文档中列出了bfcache的三个主要要求 。
The back navigation to the visited page should be instant.
返回到已访问页面的导航应该是即时的 。
The page restored from bfcache should be fully functional.
从bfcache恢复的页面应具有完整的功能 。
The user should not be able to interact with a bfcached page under the hood, directly or indirectly.
用户不应直接或间接与幕后的bfcached页面进行交互 。
Here is a video demonstrating the bfcache prototype. It’s really fast!
这是一个演示 bfcache原型的视频 。 真的很快!
As you can see, the page loads a lot quicker. This feature is also coming to Chrome on mobile so benefits there are obvious!
如您所见,页面加载速度更快。 移动设备上的Chrome也具有此功能,因此好处显而易见!
结论 (In Conclusion)
With chrome being the most used browser around the globe, the focus has to remain on the end user as the product develops. It is an update like this that keeps them in 1st place.
由于chrome是全球使用最广泛的浏览器,因此随着产品的开发,必须将重点始终放在最终用户身上。 像这样的更新使它们排在第一位。
If Google continues to deliver balanced features that protect the end-user while decreasing the complexity of browsing the web, it will stay far in front of competitive browsers in a league of its own.
如果Google继续提供平衡的功能来保护最终用户,同时降低浏览网络的复杂性,它将在自己的联盟中遥遥领先于竞争性浏览器。
翻译自: https://medium.com/swlh/how-chromes-new-update-will-improve-the-way-you-browse-6d06a0092441
chrome浏览器无法更新