A cartoon intro to DNS over HTTPS (2018)

Re:A cartoon intro to DNS over HTTPS (2018) by throw0101a on Sunday October 20, 2019 @11:29AM (#21304723)

> ... nothing mandated that malware use standard DNS requests on port 53.

Except using other ports would cause network monitoring software to throw red flags because of the "strange" traffic on non-standard ports.

[ Parent | on HN ]

Re:A cartoon intro to DNS over HTTPS (2018) by akerl_ on Sunday October 20, 2019 @01:51PM (#21305743)

Nothing requires malware to pick a “strange” port. It could just shove its data into ICMP, or make it look like an SSH connection on 22, or anything else.

[ Parent | on HN ]