jedisct1

69 ms·

1. 931.▲
   by jedisct1 8y ago

   https://simplednscrypt.org/
2. 932.▲
   by jedisct1 8y ago

   Unless you are still running version 1, dnscrypt-proxy will automatically pick the fastest, working servers for you.
3. 933.▲
   by jedisct1 8y ago

   dnscrypt-proxy also supports DNS-over-HTTPS and is probably the most popular DoH client. You can use it to connect to Cloudflare or other DoH servers, and this will not be limited to queries sent by Firefox. On iOS, use DNSCloak.
4. 934.▲
   by jedisct1 8y ago

   Encrypted SNI for TLS 1.3 is being worked on: https://github.com/ekr/draft-rescorla-tls-esni/blob/master/d...
5. 935.▲
   by jedisct1 8y ago

   Quite the opposite, actually. A DNSCrypt client can be implemented in a couple lines of Python: https://github.com/tresni/dnspython-dnscrypt/blob/master/dns... It probably took about 15 minutes to write
6. 936.▲
   by jedisct1 8y ago

   Not necessarily. You can connect using an IP address. At least to bootstrap the process. This is where DNS Stamps come in handy https://github.com/jedisct1/dnscrypt-proxy/wiki/stamps
7. 937.▲
   by jedisct1 8y ago

   Because DNS servers were never designed to keep many open TCP connections.
8. 938.▲
   by jedisct1 8y ago

   DNSCrypt is also the fastest and most secure. It doesn't require sessions (uses UDP by default, like regular DNS, but prevents amplification), enforces safe cryptography and pinned certificates, is trivial to implement, doesn't ne
9. 939.▲
   by jedisct1 8y ago

   Use dnscrypt-proxy https://github.com/jedisct1/dnscrypt-proxy
10. 940.▲
    by jedisct1 8y ago

    Looks appealing, but when I click "Start free trial", nothing happens, except "ReferenceError: cli_show_cookiebar is not defined" in the console. Not a good start.
11. 941.▲
    by jedisct1 8y ago

    Tell Cisco.
12. 942.▲
    by jedisct1 8y ago

    For dnscrypt-proxy, definitely not. In addition to a signature of the parent cert, the DNS stamp for Cloudflare DNS says that validation must be done against dns.cloudflare.com so this would require getting a certificate for cloudflare.com.
13. 943.▲
    by jedisct1 8y ago

    Useless without pinning. If you're using DNS-over-HTTPS, you should be safe though. dnscrypt-proxy enforces pinning (the parent cert signature is included in the DNS stamp required to connect), and I guess Firefox and cloudflared also
14. 944.▲
    by jedisct1 8y ago

    GfA-Basic is the best.
15. 945.▲
    by jedisct1 8y ago

    Bureaucracy... not so much. Things have been drastically simplified.
16. 946.▲
    by jedisct1 8y ago

    Get a French accountant to do it for you. It costs virtually nothing, and they will take care of all the paperwork for you.
17. 947.▲
    by jedisct1 8y ago

    For people under 40: "Perl" refers to a script interpreter that used to be popular in the 90's.
18. 948.▲
    by jedisct1 8y ago

    I use Enpass. $10 once for mobile devices, free everywhere else, can use Dropbox/iCloud/Google Drive for password storage, no need for any subscription whatsoever. And it can seamlessly import 1Password databases.
19. 949.▲
    by jedisct1 8y ago

    And for a VPN with multipath support, check out Glorytun: https://github.com/angt/glorytun Used by OVH routers to efficiently aggregate multiple physical links.
20. 950.▲
    by jedisct1 8y ago

    Read the SSH documentation again. Especially the -w option
21. 951.▲
    by jedisct1 8y ago

    Terrible.
22. 952.▲
    by jedisct1 9y ago

    Spaces.
23. 953.▲
    by jedisct1 9y ago

    Does that mean no food, no snacks during the flight? That sucks.
24. 954.▲
    by jedisct1 9y ago

    https://apility.io/search/127.0.0.1 Not sure I would trust Apility.
25. 955.▲
    by jedisct1 9y ago

    jed.
26. 956.▲
    by jedisct1 9y ago

    Not maintained any more. A new macOS GUI would be really great.
27. 957.▲
    by jedisct1 9y ago

    I use this as an UI for dnscrypt-proxy v2: https://getbitbar.com/plugins/Network/dnscrypt-proxy-switche...
28. 958.▲
    by jedisct1 9y ago

    https://download.libsodium.org/doc/secret-key_cryptography/e... also provides some guidance on how to do it when the libraries doesn't provide anything off the shelf. Libhydrogen takes a different approach, a
29. 959.▲
    by jedisct1 9y ago

    ChaCha is generally faster and has more implementations, including OpenSSL. Salsa is essentially limited to NaCl and Sodium. From a security perspective, there is nothing wrong with Salsa. But libraries implementing ChaCha today are unlikel
30. 960.▲
    by jedisct1 9y ago

    I wish XChaChaPoly was more widely implemented.