Re:Android getting “DNS over TLS” support
by yjftsjthsd-h on Monday October 23, 2017 @10:20AM
(#15533323)
Proxy would need a cert trusted by the client. Not impossible, but raises the bar.
[ Parent
| on HN ]
Re:Android getting “DNS over TLS” support
by naikrovek on Tuesday October 24, 2017 @07:29PM
(#15546101)
In an Enterprise or provider-patched device, this is trivial.
Re:Android getting “DNS over TLS” support
by yjftsjthsd-h on Wednesday October 25, 2017 @07:54AM
(#15549282)
Yes, that's true, but I think we have to assume the Enterprise devices are mitm'd. Carrier provided devices are a legitimate threat, I agree