News for hackers. Stuff that matters.

A comment on macOS Sequoia 15 may bypass DNS encryption. Parent comment

Re:macOS Sequoia 15 may bypass DNS encryption by jesse_faden on Wednesday September 18, 2024 @03:35AM (#41576867)
I would believe so. I have a custom DNS profile setup that redirects a few domains to a server I run. The server has custom SSL certs issued by a private CA. I the certificate installed on iOS as a trusted root certificate.

Everytime I'm connected to my home WiFi I would randomly get `peer closed connection in SSL handshake (104: Connection reset by peer)`. I have absolutely no clue why it does this and this issue goes away when I'm connected on mobile data.

Now I'm guessing that it is bypassing the DNS profile and resolving it using my ISPs DNS or some other way.

[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by gigatexal on Wednesday September 18, 2024 @07:09AM (#41578223)
Oh this is not good. I hope the vpn providers chime in, the MullVads and ExpressVPNs etc
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by gigatexal on Thursday September 19, 2024 @04:36AM (#41589804)
Nvm. Turns out it was a bug in littlesnitch.
[ Parent | on HN ]
Re:macOS Sequoia 15 may bypass DNS encryption by zimpenfish on Wednesday September 18, 2024 @12:58PM (#41582410)
> I would believe so.

It won't, it was specifically a bug in Little Snitch (which doesn't currently run on iOS, I believe.)

"The problem discussed here turned out to be specific to Little Snitch 6.1 and not a general issue in macOS. It has already been fixed in Little Snitch 6.1.1."

[ Parent | on HN ]