News for hackers. Stuff that matters.

A comment on iOS allows DNS request to escape the VPN tunnel. Parent comment

Re:iOS allows DNS request to escape the VPN tunnel by giobox on Wednesday October 12, 2022 @12:32PM (#33179394)
The key difference is the point of control:

For PiHole today, most everything comes over port 53, and thus easy to track, monitor and block as required.

Tomorrow, DNS requests can be on any port, to any server, on any protocol. This makes trying to use a single point of control like the PiHole so much harder than it was in the past. Who is to say next week its HTTPS as the encrypted transport for DNS? Use whatever bizarre encryption scheme you like. It's your app... The app can just ignore whatever DNS server you suggested via DHCP or whatever and go back to its homebrew domain name resolution system.

[ Parent | on HN ]
Re:iOS allows DNS request to escape the VPN tunnel by saurik on Wednesday October 12, 2022 @12:35PM (#33179441)
> Who is to say next week its HTTPS as the encrypted transport for DNS?

That ship has already set sail, my friend :(.

[ Parent | on HN ]
Re:iOS allows DNS request to escape the VPN tunnel by novok on Thursday October 13, 2022 @11:17PM (#33199254)
Eventually ads, tracking, etc are just going to be proxied by the app server, along with normal app server traffic, to one IP and you can't do much effective filtering in the end.
[ Parent | on HN ]