Re:A cartoon intro to DNS over HTTPS (2018)
by jedisct1 on Sunday October 20, 2019 @06:51PM
(#21307865)
Still here, still what most public secure DNS run, still secure and reliable, still being constantly improved, and new implementations keep being written.
The protocol was recently extended with Anonymized DNS, a mechanism that hides client IP addresses from resolvers by using relays dedicated to secure DNS forwarding. A new network of DNS relays is currently being deployed.
DoH, DNSCrypt and DNS relaying can happily share the same TCP port 443.
A complete protocol description has been available for years, but turning it into an IETF document is time consuming. It will eventually happen, but as an independent project, writing software has been prioritized over marketing.
https://dnscrypt.info
The protocol was recently extended with Anonymized DNS, a mechanism that hides client IP addresses from resolvers by using relays dedicated to secure DNS forwarding. A new network of DNS relays is currently being deployed.
https://www.reddit.com/r/dnscrypt/comments/dhoxah/anonymized...
dnscrypt-proxy, the reference client implementation, is at version 2.0.29.beta3, released yesterday.
There is a new, easy to use and deploy implementation in Rust to add DNSCrypt support server-side, Encrypted DNS Server: https://github.com/jedisct1/encrypted-dns-server
DoH, DNSCrypt and DNS relaying can happily share the same TCP port 443.
A complete protocol description has been available for years, but turning it into an IETF document is time consuming. It will eventually happen, but as an independent project, writing software has been prioritized over marketing.