Comments (8)
https://patents.google.com/patent/US9661108
from dnscloak.
dnscrypt-proxy
has a query_meta
parameter that allows adding arbitrary TXT records to queries. These records will always be encrypted like other records.
The development code of dnscrypt-proxy
also supports TLS authentication.
Identification via extra EDNS options is subject to patents issues.
Actually, a custom URL isn't that bad. It is strictly equivalent to HTTP Basic authentication.
from dnscloak.
Thanks for pointing on "query_meta".
"TLS authentication" do you mean certificate based? It may be "heavy" if you need to serve multiple clients.
Custom URL is unsecure w/o TLS 1.3 and SNI encryption. FQDN can leak various ways (e.g. via passive DNS), URL with custom user ID (if is not encrypted) may be intercepted on the line.
from dnscloak.
Identification via extra EDNS options is subject to patents issues.
Can you elaborate this. Who's has patents on this?
from dnscloak.
Weird. EDNS was proposed to address such use cases....
From rfc2671
The Domain Name System's wire protocol includes a number of fixed
fields whose range has been or soon will be exhausted and does not
allow clients to advertise their capabilities to servers. This
document describes backward compatible mechanisms for allowing the
protocol to grow.
from dnscloak.
Anything can be proposed.
Also, what you quoted refers to advertising what parts of the protocol the client implements. It is not about sending configuration data.
from dnscloak.
I can't find query_meta
in the UI of 2.2.0 on iOS. Is it meant to be used via the config editor only?
from dnscloak.
BTW Intra (on Android) supports basic HTTP authentication. Can you add support for it (I've tried it in the recent DNSCloak release and it didn't work)?
from dnscloak.
Related Issues (20)
- ios 14.5 blacklist not working HOT 1
- Doesn't start anymore HOT 4
- Set (Longer) App Passcode HOT 1
- Whitelist Networks
- Feature request: Anonymized DNS
- Feature request: automatically update blocklist. HOT 2
- Paste notification
- Pick a file doesn't respect dark mode
- VPN fails to start on iOS 15.1 betas HOT 5
- “Hide VPN Icon in Statusbar” gone in latest update (2.2.2) HOT 1
- Version 2.2.2 wifi exceptions don't work on iPhone iOS 15.1 HOT 1
- dnscloak does not change dns servers, this must be done manually HOT 3
- ipad: vpn connection keeps reconnecting after turning off wifi
- dnscloak (29.12.2019) : can't connect to github.com
- Works fine on Wi-Fi, but stops working on cellular HOT 7
- Siri shortcut
- Feauture Request HOT 1
- I cannot find a-and-a
- DNSCloak is not listed in Background app refresh
- iOS: whitelisting doesn't work
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dnscloak.