News for hackers. Stuff that matters.

A comment on Show HN: dingo - a Google DNS-over-HTTPS caching proxy in Go. Parent comment

Re:Show HN: dingo - a Google DNS-over-HTTPS caching proxy in Go by nickodell on Friday September 16, 2016 @07:22PM (#12518103)
It seems like this includes up to 500 bytes of padding in a request. Is there a reason for that?
[ Parent | on HN ]
Re:Show HN: dingo - a Google DNS-over-HTTPS caching proxy in Go by pjf on Friday September 16, 2016 @07:27PM (#12518129)
Yes, the random padding (which is optional) is to counter-measure possible side-channel privacy attacks that could infer the domain name from the packet sizes.

The Google documentation explains that (look for "random_padding") at https://developers.google.com/speed/public-dns/docs/dns-over...

[ Parent | on HN ]