News for hackers. Stuff that matters.

A comment on Tell HN: GitHub is partially blocked in India. Parent comment

Re:Tell HN: GitHub is partially blocked in India by Ayesh on Tuesday January 03, 2023 @10:24AM (#34232533)
> On Android:

Most phones nowadays should have DoT support built-in nowadays.

[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by jrochkind1 on Tuesday January 03, 2023 @10:26AM (#34232566)
I don't know what "DoH" or "DoT" are.
[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by javajosh on Tuesday January 03, 2023 @10:30AM (#34232646)
I'm not a big fan of jargon either, but if you clicked on one of those links, you'd see that it stands for DNS over HTTP or DNS over Tor.
[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by Macha on Tuesday January 03, 2023 @10:33AM (#34232703)
TLS, not Tor
[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by javajosh on Tuesday January 03, 2023 @10:39AM (#34232803)
The GP's link, the one they maintain, says DNS over Tor.
[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by anderskaseorg on Tuesday January 03, 2023 @02:00PM (#34236208)
DoT is DNS over TLS: https://techdocs.akamai.com/etp/docs/configure-dot-doh, https://www.cloudflare.com/learning/dns/dns-over-tls/, https://developers.google.com/speed/public-dns/docs/dns-over..., https://en.wikipedia.org/wiki/DNS_over_TLS

Android ≥ 9 natively supports DNS over TLS: https://android-developers.googleblog.com/2018/04/dns-over-t...

So does iOS ≥ 14: https://developer.apple.com/documentation/networkextension/d..., https://support.quad9.net/hc/en-us/articles/360057889591-Set...

The link you’re referring to, https://github.com/celzero/rethink-app, supports DNS over Tor, but does not call it “DoT”. It does not support DNS over TLS (https://github.com/celzero/rethink-app/issues/441), and it is not something that phones have built-in.

[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by jrochkind1 on Tuesday January 03, 2023 @11:36AM (#34233711)
Not sure what you mean, I clicked on the first link before commenting, for "GoodbyeDPI", and learned that it was a "Deep Packet Inspection circumvention utility (for Windows)", I still didn't know what DoT or DoH was, sorry.

Most Android phones... have DNS over Tor... built in? This can't be, can it? I'm pretty confused.

[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by Ayesh on Tuesday January 03, 2023 @10:29AM (#34232610)
DNS over TLS and DNS over HTTPS.
[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by jeroenhd on Tuesday January 03, 2023 @10:53AM (#34233021)
DNS over TLS.

Android calls it "Secure DNS". It's in the connection settings, I believe starting from Android 9 or 10.

[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by bobbob1921 on Tuesday January 03, 2023 @02:29PM (#34236707)
It’s an acronym, of an acronym
[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by ignoramous on Tuesday January 03, 2023 @12:26PM (#34234570)
> Most phones nowadays should have DoT support built-in nowadays.

DoT does help even if it can be trivially blocked (more than one way to do so, but blocking TCP on port 853 would do the trick)... DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting).

[ Parent | on HN ]
Re:Tell HN: GitHub is partially blocked in India by josephcsible on Tuesday January 03, 2023 @12:45PM (#34234883)
> DoT does help even if it can be trivially blocked (more than one way to do so, but blocking TCP on port 853 would do the trick)...

Indeed, and this is exactly why DoH is better than DoT.

> DoT cannot help bypass SNI-based censorship (unless apps implement domain-fronting).

TLS ECH will. I can't wait for it to become mainstream.

[ Parent | on HN ]