Re:SkyLink – Bluesky DID Detector browser plugin
by darnfish on Monday May 08, 2023 @03:00AM
(#35858877)
DNS over HTTP is still a DNS request
Re:SkyLink – Bluesky DID Detector browser plugin
by reflexco on Monday May 08, 2023 @05:47AM
(#35859803)
Whether it can technically be called a DNS request or not, this is a privacy leak for anyone who isn't already using Google as a DOH provider. So this should really be written on the extension page...
Re:SkyLink – Bluesky DID Detector browser plugin
by progval on Monday May 08, 2023 @06:41AM
(#35860102)
That seems to be a custom Google API, not DNS over HTTP(S). Request format is very different from what is specified in https://www.rfc-editor.org/rfc/rfc8484 (/dns-query?dns= followed by raw DNS bytes). But sure, the implementation could easily be changed to use DoH
and it looks like it's only resolving domains to DIDs, but not that the DID's owner accepted the domain; so you could make any of your domains point to anyone's DID. The extension would need to use ATP's new protocol to check it.