DNS-over-TLS vs. DNS-over-HTTPS

Re:DNS-over-TLS vs. DNS-over-HTTPS by LogicX on Tuesday July 28, 2020 @12:27PM (#23977437)

Author and CTO of DNSFilter here; for any questions.

[ Parent | on HN ]

Re:DNS-over-TLS vs. DNS-over-HTTPS by m3047 on Tuesday July 28, 2020 @05:59PM (#23981126)

I'm unable to understand from your documentation how your "roaming client" works, or if it is applicable to desktop systems for example. Are you replacing the stub resolver?

[ Parent | on HN ]

Re:DNS-over-TLS vs. DNS-over-HTTPS by LogicX on Wednesday July 29, 2020 @05:55AM (#23985021)

Correct. We have agents for desktops (Windows, MacOS, Linux) as well as Mobile (Android, iOS) We basically run a service that listens for dns requests on port 53 loop back IP, and then we change system DNS to point to that loopback IP.

Now we can do a bunch of things with the traffic between your machine and us: like inject edns0 data to authenticate requests, shift traffic between our anycast networks, and encrypt you’re traffic using DNS over TLS!

[ Parent | on HN ]