News for hackers. Stuff that matters.

A comment on Show HN: Home-made crypto in the browser. Parent comment

Re:Show HN: Home-made crypto in the browser by the8472 on Sunday October 22, 2017 @10:48AM (#15527052)
That I assuming that every type network request is covered by available monitoring tools and that they are user-friendly. What if web browsers allow you to trigger DNS lookups without HTTP requests? That could already be used to exfiltrate data.
[ Parent | on HN ]
Re:Show HN: Home-made crypto in the browser by JetSpiegel on Sunday October 22, 2017 @11:59AM (#15527372)
> What if web browsers allow you to trigger DNS lookups without HTTP requests?

Just include hidden links in the page, most browsers have some sort of pre-fetch optimization that does exactly that. I think they make HTTP connections on hover even.

[ Parent | on HN ]
Re:Show HN: Home-made crypto in the browser by anonacct37 on Sunday October 22, 2017 @04:29PM (#15528773)
Meta DNS prefetch tags allow this.
[ Parent | on HN ]