News for hackers. Stuff that matters.

A comment on Show HN: dingo - a Google DNS-over-HTTPS caching proxy in Go. Parent comment

Re:Show HN: dingo - a Google DNS-over-HTTPS caching proxy in Go by zokier on Friday September 16, 2016 @02:28PM (#12516157)
DNSCrypt or RFC7858 (dprive) are probably closest equivalents.
[ Parent | on HN ]
Re:Show HN: dingo - a Google DNS-over-HTTPS caching proxy in Go by ademarre on Friday September 16, 2016 @02:44PM (#12516294)
I suppose it could also be implemented with DTLS [0] over UDP [1]. (Checking Wikipedia...) A 2013 paper [2] published some vulnerabilities; mostly implementation flaws, but it raised some questions about the core spec as well.

However you implement it, encrypting DNS probably has it's place, but it doesn't make a whole lot of sense for most applications.

[0] https://en.wikipedia.org/wiki/Datagram_Transport_Layer_Secur...

[1] https://tools.ietf.org/html/rfc6347

[2] http://www.isg.rhul.ac.uk/~kp/dtls.pdf

[ Parent | on HN ]
Re:Show HN: dingo - a Google DNS-over-HTTPS caching proxy in Go by zokier on Friday September 16, 2016 @02:57PM (#12516410)
There are IETF drafts actively being worked on for DNS over DTLS:

https://datatracker.ietf.org/doc/draft-ietf-dprive-dnsodtls/

https://datatracker.ietf.org/doc/draft-ietf-dprive-dtls-and-...

[ Parent | on HN ]