News for hackers. Stuff that matters.

A comment on HTML over DNS: Serving Blog Content over DNS. Parent comment

Re:HTML over DNS: Serving Blog Content over DNS by k4ch0w on Thursday August 19, 2021 @03:30PM (#28238250)
Well, allowlist to a known DNS server and block anything on DNS that isn't allowlisted.
[ Parent | on HN ]
Re:HTML over DNS: Serving Blog Content over DNS by ignoramous on Thursday August 19, 2021 @09:02PM (#28241232)
The exfiltrated data isn't for DNS resolvers but is leaked to Nameservers through them.

A similar technique forms the basis of how services like dnsleaktest.com and which.nameserve.rs identify DNS resolvers in-use by a particular client.

[ Parent | on HN ]