DNS Privacy: DNS-over-TLS (Stubby)

  • st3fx
  • st3fx's Avatar Topic Author
  • Rotary Dial
  • Rotary Dial
More
2 months 5 days ago #35417 by st3fx
Problem:
"The DNS is one of the most significant leaks of data about an individuals activity on the Internet...Note that even when using a VPN some VPNs will still leak your DNS queries by sending them unencrypted to your ISP." dnsprivacy.org/wiki/display/DP/DNS+Privacy+-+The+Problem

Solution:
"DNS over TLS (DoT) is a security protocol for encrypting and wrapping Domain Name System (DNS) queries and answers via the Transport Layer Security (TLS) protocol. The goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data via man-in-the-middle attacks." en.wikipedia.org/wiki/DNS_over_TLS

Stubby (DNS Privacy Daemon):
"'Stubby' is an application that acts as a local DNS Privacy stub resolver (using DNS-over-TLS). Stubby encrypts DNS queries sent from a client machine (desktop or laptop) to a DNS Privacy resolver increasing end user privacy." dnsprivacy.org/wiki/display/DP/DNS+Privacy+Daemon+-+Stubby#DNSPrivacyDaemon-Stubby-Installation

More info:
security.googleblog.com/2019/01/google-public-dns-now-supports-dns-over.html
www.quad9.net/faq/#Does_Quad9_support_DNS_over_TLS
The following user(s) said Thank You: Isamorph

Please Log in or Create an account to join the conversation.

More
2 months 5 days ago #35421 by KentE
(Much to my dismay, I feel like the dog in the "what your dog hears" cartoon...... I know it's important..... )

Please Log in or Create an account to join the conversation.

  • st3fx
  • st3fx's Avatar Topic Author
  • Rotary Dial
  • Rotary Dial
More
2 months 5 days ago #35439 by st3fx

KentE wrote: (Much to my dismay, I feel like the dog in the "what your dog hears" cartoon...... I know it's important..... )

DNS is used to translate domain/host names to IP addresses. The takeaway is that DNS-TLS is much more secure than standard DNS. Hopefully soon there will be native support for DNS-TLS on all platforms so additional software will not be required.
The following user(s) said Thank You: KentE

Please Log in or Create an account to join the conversation.