5 ms·

> On Android: Most phones nowadays should have DoT support built-in nowadays.

by Ayesh 4y ago

jrochkind1 4y ago
I don't know what "DoH" or "DoT" are.
- Ayesh 4y ago
  DNS over TLS and DNS over HTTPS.
- javajosh 4y ago
  I'm not a big fan of jargon either, but if you clicked on one of those links, you'd see that it stands for DNS over HTTP or DNS over Tor.
  - Macha 4y ago
    TLS, not Tor
    - javajosh 4y ago
      The GP's link, the one they maintain, says DNS over Tor.
      - anderskaseorg 4y ago
        DoT is DNS over TLS: https://techdocs.akamai.com/etp/docs/configure-dot-doh https://techdocs.akamai.com/etp/docs/configure-dot-doh, https://www.cloudflare.com/learning/dns/dns-over-tls/ https://www.cloudflare.com/learning/dns/dns-over-tls/, https://developers.google.com/speed/public-dns/docs/dns-over-tls https://developers.google.com/speed/public-dns/docs/dns-over..., https://en.wikipedia.org/wiki/DNS_over_TLS https://en.wikipedia.org/wiki/DNS_over_TLS Android ≥ 9 natively supports DNS over TLS: https://android-developers.googleblog.com/2018/04/dns-over-tls-support-in-android-p.html https://android-developers.googleblog.com/2018/04/dns-over-t... So does iOS ≥ 14: https://developer.apple.com/documentation/networkextension/dns_settings https://developer.apple.com/documentation/networkextension/d..., https://support.quad9.net/hc/en-us/articles/360057889591-Setup-iOS-DNS-over-HTTPS-or-DNS-over-TLS https://support.quad9.net/hc/en-us/articles/360057889591-Set... The link you’re referring to, https://github.com/celzero/rethink-app https://github.com/celzero/rethink-app, supports DNS over Tor, but does not call it “DoT”. It does not support DNS over TLS (https://github.com/celzero/rethink-app/issues/441 https://github.com/celzero/rethink-app/issues/441), and it is not something that phones have built-in.
  - jrochkind1 4y ago
    Not sure what you mean, I clicked on the first link before commenting, for "GoodbyeDPI", and learned that it was a "Deep Packet Inspection circumvention utility (for Windows)", I still didn't know what DoT or DoH was, sorry. Most Android phones... have DNS over Tor... built in? This can't be, can it? I'm pretty confused.
    - nix23 4y ago
      [dead]
- jeroenhd 4y ago
  DNS over TLS. Android calls it "Secure DNS". It's in the connection settings, I believe starting from Android 9 or 10.
- bobbob1921 4y ago
  It’s an acronym, of an acronym
ignoramous 4y ago
> Most phones nowadays should have DoT support built-in nowadays. DoT does help even if it can be trivially blocked (more than one way to do so, but blocking TCP on port 853 would do the trick)... DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting).
- josephcsible 4y ago
  > DoT does help even if it can be trivially blocked (more than one way to do so, but blocking TCP on port 853 would do the trick)... Indeed, and this is exactly why DoH is better than DoT. > DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting). TLS ECH will. I can't wait for it to become mainstream.

> On Android: Most phones nowadays should have DoT support built-in nowadays.

by Ayesh 4y ago

> On Android: Most phones nowadays should have DoT support built-in nowadays.

jrochkind1 4y ago

I don't know what "DoH" or "DoT" are.

Ayesh 4y ago
DNS over TLS and DNS over HTTPS.
javajosh 4y ago
I'm not a big fan of jargon either, but if you clicked on one of those links, you'd see that it stands for DNS over HTTP or DNS over Tor.
- Macha 4y ago
  TLS, not Tor
  - javajosh 4y ago
    The GP's link, the one they maintain, says DNS over Tor.
    - anderskaseorg 4y ago
      DoT is DNS over TLS: https://techdocs.akamai.com/etp/docs/configure-dot-doh https://techdocs.akamai.com/etp/docs/configure-dot-doh, https://www.cloudflare.com/learning/dns/dns-over-tls/ https://www.cloudflare.com/learning/dns/dns-over-tls/, https://developers.google.com/speed/public-dns/docs/dns-over-tls https://developers.google.com/speed/public-dns/docs/dns-over..., https://en.wikipedia.org/wiki/DNS_over_TLS https://en.wikipedia.org/wiki/DNS_over_TLS Android ≥ 9 natively supports DNS over TLS: https://android-developers.googleblog.com/2018/04/dns-over-tls-support-in-android-p.html https://android-developers.googleblog.com/2018/04/dns-over-t... So does iOS ≥ 14: https://developer.apple.com/documentation/networkextension/dns_settings https://developer.apple.com/documentation/networkextension/d..., https://support.quad9.net/hc/en-us/articles/360057889591-Setup-iOS-DNS-over-HTTPS-or-DNS-over-TLS https://support.quad9.net/hc/en-us/articles/360057889591-Set... The link you’re referring to, https://github.com/celzero/rethink-app https://github.com/celzero/rethink-app, supports DNS over Tor, but does not call it “DoT”. It does not support DNS over TLS (https://github.com/celzero/rethink-app/issues/441 https://github.com/celzero/rethink-app/issues/441), and it is not something that phones have built-in.
- jrochkind1 4y ago
  Not sure what you mean, I clicked on the first link before commenting, for "GoodbyeDPI", and learned that it was a "Deep Packet Inspection circumvention utility (for Windows)", I still didn't know what DoT or DoH was, sorry. Most Android phones... have DNS over Tor... built in? This can't be, can it? I'm pretty confused.
  - nix23 4y ago
    [dead]
jeroenhd 4y ago
DNS over TLS. Android calls it "Secure DNS". It's in the connection settings, I believe starting from Android 9 or 10.
bobbob1921 4y ago
It’s an acronym, of an acronym

ignoramous 4y ago

> Most phones nowadays should have DoT support built-in nowadays. DoT does help even if it can be trivially blocked (more than one way to do so, but blocking TCP on port 853 would do the trick)... DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting).

josephcsible 4y ago
> DoT does help even if it can be trivially blocked (more than one way to do so, but blocking TCP on port 853 would do the trick)... Indeed, and this is exactly why DoH is better than DoT. > DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting). TLS ECH will. I can't wait for it to become mainstream.