DNSCrypt – A protocol to improve DNS security

Re:DNSCrypt – A protocol to improve DNS security by geocar on Thursday March 30, 2017 @04:04AM (#13993698)

Hi there, I work in advertising, and I absolutely use the EDNS0 data to track users. I'm okay with a 1:250ish potential error rate since outside of facebook and google, you probably don't go to the same websites as your neighbour.

Thanks for your hard work.

[ Parent | on HN ]

Re:DNSCrypt – A protocol to improve DNS security by pfg on Thursday March 30, 2017 @06:33AM (#13994237)

I'm curious: what's the reason for doing this rather than just logging the IP addresses that hit your server directly? Is this a way to get around VPNs that leak the real IP via DNS? Or does this allow you to get something back from users with ad blockers that block the request, but no the DNS lookup (I don't know if this is the case)? Is it just a performance optimization (just a DNS lookup vs. a HTTP request)?

[ Parent | on HN ]

Re:DNSCrypt – A protocol to improve DNS security by geocar on Thursday March 30, 2017 @07:14PM (#13999763)

I don't have a server for them to hit directly: My DNS server always returns NXDOMAIN.

[ Parent | on HN ]

Re:DNSCrypt – A protocol to improve DNS security by chillydawg on Thursday March 30, 2017 @05:47AM (#13994041)

How does that work?

[ Parent | on HN ]

Re:DNSCrypt – A protocol to improve DNS security by geocar on Thursday March 30, 2017 @05:59AM (#13994087)

I log the requests to my DNS servers.

My client embeds information I need into the host part and the custom DNS server always returns NXDOMAIN.

[ Parent | on HN ]