Communication apparatus, method of controlling communication apparatus, and storage medium
The communication apparatus stores a condition for excluding from a target of the name resolution using the encrypted communication. The communication apparatus requests, in a case where name resolution of a host name requested from an application is to be performed, a first Domain Name System (DNS) server to perform the name resolution of the host name via an encrypted communication path established with the first DNS server at least based on a fact that use of the encrypted communication is set. On the other hand, the communication apparatus requests a second DNS server to perform the name resolution of the host name by plain text based on a fact that non-use of the encrypted communication is set.
1. A communication apparatus, comprising:
at least one memory and at least one processor which function as:
a setting unit configured to set whether to use encrypted communication for name resolution, as operation setting of the communication apparatus;
a recording unit configured to record a condition for excluding from a target of the name resolution using the encrypted communication in a storage unit; and
a communication control unit configured to, in a case where name resolution of a host name requested from an application is performed, request a first Domain Name System (DNS) server to perform the name resolution of the host name via an encrypted communication path established with the first DNS server at least based on a fact that use of the encrypted communication is set by the setting unit, and to request a second DNS server to perform the name resolution of the host name by plain text based on a fact that non-use of the encrypted communication is set by the setting unit,
wherein, in a case where the request of the name resolution of the host name satisfies the condition stored in the storage unit, the communication control unit requests the second DNS server to perform the name resolution of the host name by the plain text even in a case where use of the encrypted communication is set by the setting unit.
2. The communication apparatus according to claim 1 ,
wherein the recording unit records identification information of an application to be excluded from the target of the name resolution using the encrypted communication as the condition,
wherein the communication apparatus further comprises a determination unit configured to determine whether a request source application is an application to be excluded from the target of the name resolution using the encrypted communication, based on the identification information stored in the storage unit and a type of the request source application, and
wherein, in a case where the determination unit determines that the request source application is an application to be excluded from the target of the name resolution using the encrypted communication, the communication control unit requests the second DNS server to perform the name resolution of the host name by the plain text even in the case where use of the encrypted communication is set by the setting unit.
3. The communication apparatus according to claim 2 , wherein the at least one memory and the at least one processor further function as a reception unit configured to receive designation of an application to be excluded from the target of the name resolution using the encrypted communication,
wherein the recording unit records identification information of the application, designation of which is received by the reception unit.
4. The communication apparatus according to claim 3 ,
wherein the communication apparatus at least includes a transmission application transmitting scan data to a destination designated by a host name and a web browser application, and
wherein the transmission application and the web browser application are designatable as exceptional applications excluded by the reception unit.
5. The communication apparatus according to claim 1 ,
wherein the recording unit records identification information of a communication protocol to be excluded from the target of the name resolution using the encrypted communication as the condition,
wherein the at least one memory and the at least one processor further function as a determination unit configured to determine whether a request source application is a communication protocol to be excluded from the target of the name resolution using the encrypted communication, based on the identification information stored in the storage unit and a type of the communication protocol used for communication with a partner specified by the host name, and
wherein, in a case where the determination unit determines that the request source application is a communication protocol to be excluded from the target of the name resolution using the encrypted communication, the communication control unit requests the second DNS server to perform the name resolution of the host name by plain text even in the case where use of the encrypted communication is set by the setting unit.
6. The communication apparatus according to claim 5 , wherein the at least one memory and the at least one processor further function as a reception unit configured to receive designation of a communication protocol to be excluded from the target of the name resolution using the encrypted communication,
wherein the recording unit records identification information of the communication protocol, designation of which is received by the reception unit.
7. The communication apparatus according to claim 6 , wherein the reception unit designates at least file transfer protocol (FTP) as the communication protocol to be excluded.
8. The communication apparatus according to claim 2 ,
wherein the recording unit further records a list of host names to be excluded from the target of the name resolution using the encrypted communication, as the condition, and
wherein, in a case where the host name, the name resolution of which is requested, is included in the list of host names to be excluded stored in the storage unit, the communication control unit requests the second DNS server to perform the name resolution of the host name by the plain text, irrespective of setting performed by the setting unit.
9. A method of controlling a communication apparatus, comprising:
a first setting step of setting whether to use encrypted communication for name resolution, as operation setting of the communication apparatus;
a second setting step of setting a condition for excluding from a target of the name resolution using the encrypted communication; and
a communication control step of, in a case where name resolution of a host name requested from an application is performed, in a case where use of the encrypted communication is set by the first setting step and the request of the name resolution of the host name does not satisfy the condition set in the second setting step, requesting a first DNS server to perform the name resolution of the host name via an encrypted communication path established with the first DNS server, whereas in a case where non-use of the encrypted communication is set by the first setting step and in a case where use of the encrypted communication is set by the first setting step and the request of the name resolution of the host name satisfies the condition set in the second setting step, requesting a second DNS server to perform the name resolution of the host name by plain text.
10. A non-transitory computer-readable storage medium storing a program to cause a computer to perform the method of controlling the communication apparatus according to claim 9 .