4 ms·
So is this where we are going, application level dns implementations?
by jacob019 8y ago
So is this where we are going, application level dns implementations?
- MaxBarraclough 8y agoSeems the sensible place to start, no? We're a long way off secure DNS from the OS.
- lnx01 8y agoAs part of releasing 1.1.1.1, Cloudflare implemented DNS-Over-HTTPS proxy functionality in to one of their tools: cloudflared, also known as argo-tunnel. You can install it and configure the OS to do lookups agains cloudflared on localhost instead of some outside DNS server.
- Spivak 8y agoAnd by a long way, you mean you can do it right now on pretty much all Linux systems. https://github.com/systemd/systemd/pull/8849 https://github.com/systemd/systemd/pull/8849
- mderazon 8y agoAndroid P (beta) has it in system settings. I am using it right now. (Although I have no idea how to test if it's really working) There's also this interesting app: https://play.google.com/store/apps/details?id=app.intra https://play.google.com/store/apps/details?id=app.intra
- jedisct1 8y agoUse https://github.com/jedisct1/dnscrypt-proxy https://github.com/jedisct1/dnscrypt-proxy
- blueatlas 8y agoI think we can also say that SSL is "application level". I mean, the network isn't secure, so the application (ie. a web browser) must do something to encrypt data in transit.
- jedisct1 8y agoIt doesn't have to be. On iOS, DNSCloak will provide system-level DNS authentication (plus filtering, caching, etc). On Android, AdGuard Pro also does. On Windows, Simple DNSCrypt does. On Unix, dnscrypt-proxy does.