6 ms·

What does this shady technique (dns tunneling) have to do with dns-over-ssl?

• gsich 9y ago
  why shady? (assuming that shady is meant in a negative way)
  • spydum 9y ago
    It's clearly to evade a security control.. As if you approached a door, to find it locked, but then discovered the front window was unlocked and let yourself in.. Clearly the occupant didn't want you to enter, and just failed to secure the entire building. Pretty sure nobody would ever suggest it was okay for you to enter in such a way.
    • gsich 9y ago
      I doubt that. If DNS traffic is not filtered or blocked, it is clearly intended to transmit data that way. On a public wlan I first try to use VPN with port 53 (not DNS). If it works, I'll use it that way.
  • ce4 9y ago
    It's unfit for general use and abuses the DNS protocol to stealthily convey data, hence the shadiness. You're right, it needn't be used in a negative way. DNS tunneling is slow, needs polling for incoming traffic (due to the way dns works over udp) and is usually used to circumvent firewalls for both good (censorship) and bad reasons (exfiltrating data).