3 ms·
Still here, still what most public secure DNS run, still secure and reliable, still being constantly improved, and new implementations keep being written. http
by jedisct1 7y ago
Still here, still what most public secure DNS run, still secure and reliable, still being constantly improved, and new implementations keep being written.
https://dnscrypt.info https://dnscrypt.info
The protocol was recently extended with Anonymized DNS, a mechanism that hides client IP addresses from resolvers by using relays dedicated to secure DNS forwarding. A new network of DNS relays is currently being deployed.
https://www.reddit.com/r/dnscrypt/comments/dhoxah/anonymized_dns_is_here/ https://www.reddit.com/r/dnscrypt/comments/dhoxah/anonymized...
dnscrypt-proxy, the reference client implementation, is at version 2.0.29.beta3, released yesterday.
There is a new, easy to use and deploy implementation in Rust to add DNSCrypt support server-side, Encrypted DNS Server: https://github.com/jedisct1/encrypted-dns-server https://github.com/jedisct1/encrypted-dns-server
DoH, DNSCrypt and DNS relaying can happily share the same TCP port 443.
A complete protocol description has been available for years, but turning it into an IETF document is time consuming. It will eventually happen, but as an independent project, writing software has been prioritized over marketing.
- scrollaway 7y agoThanks for the information. Are you involved with the project?
- jedisct1 7y agoA little bit. I run some public DNS servers.