News for hackers. Stuff that matters.

A comment on Personal VPN Services are Snake-Oil. Parent comment

Re:Personal VPN Services are Snake-Oil by RajT88 on Sunday April 14, 2024 @05:10PM (#40034504)
Unless you're using DNS over HTTPS or DNS over TLS. Then they can't.

Side question: Anyone know of a gateway or self-host service which supports DNS over HTTPS relay?

i.e. it will accept vanilla DNS requests, but if it needs to forward requests, it will only do so to DoH / DoT servers?

[ Parent | on HN ]
Re:Personal VPN Services are Snake-Oil by pgraf on Sunday April 14, 2024 @05:21PM (#40034590)
They can still deduce it from the TLS SNI unless the web server you access supports TLS 1.3 Encrypted Client Hello. https://en.m.wikipedia.org/wiki/Server_Name_Indication
[ Parent | on HN ]
Re:Personal VPN Services are Snake-Oil by jachee on Sunday April 14, 2024 @06:13PM (#40034943)
I do that with pihole.
[ Parent | on HN ]