5 ms·

HTTP-over-DNS would also be neat :) I think I would be able to get internet access in some airports if I had HTTP-over-DNS

skissane 10y ago
IP-over-DNS has already been done. https://news.ycombinator.com/item?id=7619259 https://news.ycombinator.com/item?id=7619259
- jsmthrowaway 10y ago
  As has IP over ICMP echo requests, which I have actually found useful: http://code.gerade.org/hans/ http://code.gerade.org/hans/
  - sparky_ 10y ago
    Just curious, what use did you find for this?
    - obitoo 10y ago
      Its useful for reading your email on those 'free' wifi networks that require you to give your name, address mothers maiden name, and credit card before getting http access.
    - chris_wot 10y ago
      Tunnelling into networks and bypassing proxies, ancient IDSes and ineffective monitoring systems.
kijin 10y ago
DNS-over-HTTPS-over-Tor-over-DNS-over-ICMP is where it's at. None of the three-letter agencies can eavesdrop on your DNS queries now! It might even be faster than RFC 1149. https://www.ietf.org/rfc/rfc1149.txt https://www.ietf.org/rfc/rfc1149.txt
- deleted 10y ago
  [deleted]
- chris_wot 10y ago
  Not if you actually use RFC 1149. You're operating at layer 1 and 2 when you rely on birds. I'm waiting for the day when RFC 1149 is expanded to incorporate a layer 2 tunnelling protocol. I suspect this issue is not the initial encapsulation but how to extract the original frame without it getting mangled.
- takeda 10y ago
  > It might even be faster than RFC 1149 Depends on definition of fast, the latency indeed could be better, but your bandwidth is only limited by the size of your USB stick, and most often would be much faster than current solutions.
satbyy 10y ago
Not just HTTP but you can TCP-over-DNS: apt-get install dns2tcp Pretty easy to use too (though development seems to have stopped)
nathancahill 10y ago
Don't those networks hijack DNS to display captive portals? I always like poking around domains on "free limited-browsing" networks trying to get an open connection to the open web.
- danellis 10y ago
  Not all of them. Some of them hijack HTTP, so you resolve your destination address as usual, but when you actually attempt to connect, you're redirected. This seems to be becoming less common, though, unfortunately.
textmode 10y ago
I sort of did this many years ago and before the person who advertised "Wikipedia over DNS". I hacked up djbdns and put HTML into TXT records. Then I used dnstxt as the "HTTP client". It was limited to 512 bytes of course.
deleted 10y ago
[deleted]

skissane 10y ago

IP-over-DNS has already been done. https://news.ycombinator.com/item?id=7619259 https://news.ycombinator.com/item?id=7619259

jsmthrowaway 10y ago
As has IP over ICMP echo requests, which I have actually found useful: http://code.gerade.org/hans/ http://code.gerade.org/hans/
- sparky_ 10y ago
  Just curious, what use did you find for this?
  - obitoo 10y ago
    Its useful for reading your email on those 'free' wifi networks that require you to give your name, address mothers maiden name, and credit card before getting http access.
  - chris_wot 10y ago
    Tunnelling into networks and bypassing proxies, ancient IDSes and ineffective monitoring systems.

kijin 10y ago

DNS-over-HTTPS-over-Tor-over-DNS-over-ICMP is where it's at. None of the three-letter agencies can eavesdrop on your DNS queries now! It might even be faster than RFC 1149. https://www.ietf.org/rfc/rfc1149.txt https://www.ietf.org/rfc/rfc1149.txt

deleted 10y ago
[deleted]
chris_wot 10y ago
Not if you actually use RFC 1149. You're operating at layer 1 and 2 when you rely on birds. I'm waiting for the day when RFC 1149 is expanded to incorporate a layer 2 tunnelling protocol. I suspect this issue is not the initial encapsulation but how to extract the original frame without it getting mangled.
takeda 10y ago
> It might even be faster than RFC 1149 Depends on definition of fast, the latency indeed could be better, but your bandwidth is only limited by the size of your USB stick, and most often would be much faster than current solutions.

satbyy 10y ago

Not just HTTP but you can TCP-over-DNS: apt-get install dns2tcp Pretty easy to use too (though development seems to have stopped)

nathancahill 10y ago

Don't those networks hijack DNS to display captive portals? I always like poking around domains on "free limited-browsing" networks trying to get an open connection to the open web.

danellis 10y ago
Not all of them. Some of them hijack HTTP, so you resolve your destination address as usual, but when you actually attempt to connect, you're redirected. This seems to be becoming less common, though, unfortunately.

textmode 10y ago

I sort of did this many years ago and before the person who advertised "Wikipedia over DNS". I hacked up djbdns and put HTML into TXT records. Then I used dnstxt as the "HTTP client". It was limited to 512 bytes of course.

deleted 10y ago

[deleted]