News for hackers. Stuff that matters.

A comment on 72% of smart TVs and 46% of game consoles hardcode DNS settings. Parent comment

Re:72% of smart TVs and 46% of game consoles hardcode DNS se... by yencabulator on Monday December 07, 2020 @12:16PM (#25334222)
Just to nitpick: TLS 1.3 still uses plaintext SNI by default. You need to explicitly put public keys in DNS to enable the encrypted SNI extension.

And in the context of pihole and such, avoiding that means editing the DNS response to remove those public keys. Which takes us full circle back to "do I control DNS for this gadget, or not".

[ Parent | on HN ]
Re:72% of smart TVs and 46% of game consoles hardcode DNS se... by fiddlerwoaroof on Monday December 07, 2020 @02:09PM (#25335842)
Well, it’s easy to control the DNS if you can block DoH and VPNs: just have your router forward all traffic on port 53 to a resolver you control.
[ Parent | on HN ]