4 ms·
Good thing, but what servers do use DNS over TLS? To be honest I don't really know who manage DNS mirrors... Is there an existing RFC for encrypted DNS? Aren't
by jokoon 9y ago
Good thing, but what servers do use DNS over TLS?
To be honest I don't really know who manage DNS mirrors... Is there an existing RFC for encrypted DNS? Aren't ISPs the one who take care of mirroring DNS servers?
- james_pm 9y agoConveniently, Google Public DNS. "This does require the DNS you are using to have DNS over TLS support, though, but it’s a start. Users can switch to Google’s DNS if they wish to benefit from DNS over TLS." Cut the ISPs out of the DNS data mining of Android users and encourage more users to switch to Google DNS which, I assume, Google can still mine even when using DNS over TLS because they are the provider.
- icebraining 9y agoGoogle claims they don't log any personally identifiable information (including IPs) long term or correlate with data from other services: https://developers.google.com/speed/public-dns/privacy https://developers.google.com/speed/public-dns/privacy
- lightswitch05 9y agoAre we talking about the same company that exploited Safari to bypass privacy protections? https://www.eff.org/deeplinks/2012/02/time-make-amends-google-circumvents-privacy-settings-safari-users https://www.eff.org/deeplinks/2012/02/time-make-amends-googl...
- icebraining 9y agoI'm just reporting what they claim. It's interesting, though, that the fix to that problem had been developed by Google months before and submitted to Webkit; Apple has just not merged it into Safari yet.
- _joel 9y agohttps://dnscrypt.org/ https://dnscrypt.org/ is a fairly good source for servers that support the dnscrypt protocol (assuming this is what's being used - it may be a different protocol, but dnscrypt has been in the wild for some time). Not to be confused with DNSSEC
- therealmarv 9y agothis is not DNS over TLS. It's its own crypto standard but pretty similar to DNS over TLS.
- edf13 9y agoAs with most things with Google... it first seems a benefit for the users but always helps them (Google). They take the data away from someone but it actually helps them (Look at AMP pages). In this case it is highly likely all DNS requests will be onto 8.8.8.8 and 8.8.4.4 DNS servers - giving them more info on what you are doing when no on their own services.
- hannob 9y agoUncensorer DNS supports it: https://blog.uncensoreddns.org/blog/32-dns-over-tls-pubkey-pinning-info-for-unicastuncensoreddnsorg/ https://blog.uncensoreddns.org/blog/32-dns-over-tls-pubkey-p...