jedisct1/dnscrypt-proxy on Hacker News

▲ 3

Dnscrypt-proxy – A flexible DNS proxy, with support for encrypted DNS protocols

story by bjoko · 2019-08-17 · 0 comments

Another option that may work, suggested by pmoriarty in another thread : https://github.com/jedisct1/dnscrypt-proxy which is a DNS proxy server that could locally transform classic DNS to DNS-over-HTTPS by using iptables to redirect DNS…

comment by antpls · 2019-07-07 · in How to Enable DNS-over-HTTPS in Firefox

…also supports DoT. It's fairly feature rich, you can configure a hosts file and then some. [0] https://github.com/jedisct1/dnscrypt-proxy

comment by uponcoffee · 2019-07-07 · in How to Enable DNS-over-HTTPS in Firefox

…though you'll have to use something like iptables to redirect all DNS traffic to it [1] - https://github.com/jedisct1/dnscrypt-proxy

comment by pmoriarty · 2019-07-06 · in UK ISP group names Mozilla 'Internet Villain' for supporting 'DNS-over-HTTPS'

…be too hard to rig up on Linux. https://tools.ietf.org/html/draft-huitema-quic-dnsoquic-05 oooo. https://github.com/jedisct1/dnscrypt-proxy does a few good protocols.

comment by Ericson2314 · 2019-07-05 · in UK ISP group names Mozilla 'Internet Villain' for supporting 'DNS-over-HTTPS'

dnscrypt-proxy can be used to securely access nextdns, and it supports time-based blocking https://github.com/jedisct1/dnscrypt-proxy/wiki/Filters#time...

comment by jedisct1 · 2019-05-26 · in Show HN: nextdns.io – A Combination of Cloudflare DNS and Pi-Hole

▲ 2

Stretch-Hash-and-Truncate, a novel algorithm for extreme DNS privacy

story by jedisct1 · 2019-04-01 · 0 comments

…very easy to setup DNS-based ad-blocking yourself. It requires only dnscrypt-proxy and nginx. [1] - https://github.com/jedisct1/dnscrypt-proxy/wiki/Connecting-t...

comment by chewz · 2019-02-20 · in Block Ads in Apps on Android

▲ 2

DNSCloak Is Back in the App Store

story by jedisct1 · 2019-02-17 · 0 comments

…macOS and lots of providers[2]. It's really a shame it hasn't been made into a standard. [1]: https://github.com/jedisct1/dnscrypt-proxy [2]: https://dnscrypt.info/public-servers

comment by rnhmjoj · 2019-02-07 · in The Big DNS Privacy Debate at FOSDEM

…should do this. I recently switched my home network DNS forwarder from Bind to DNS Crypt Proxy ( https://github.com/jedisct1/dnscrypt-proxy ). You can get ad/content filtering lists along with some little privacy enhancements like DNS…

comment by kingo55 · 2019-02-06 · in DNS servers that offer privacy and filtering

▲ 3

Apple Has Removed DNSCloak from the App Store

story by jedisct1 · 2019-01-06 · 0 comments

…for using on Android Pie. Works on mobile as well. [3] [1] https://strongswan.org/ [2] https://github.com/jedisct1/dnscrypt-proxy [3] https://github.com/jedisct1/dnscrypt-proxy/wiki/Connecting-t...

comment by chewz · 2018-12-31 · in AdGuard DNS: A Privacy-Oriented DNS Server

If you want more options, dnscrypt-proxy https://github.com/jedisct1/dnscrypt-proxy https://github.com/pi-hole/pi-hole/wiki/DNSCrypt-2.0

comment by klrkdekira · 2018-12-31 · in AdGuard DNS: A Privacy-Oriented DNS Server

See https://github.com/jedisct1/dnscrypt-proxy/wiki/Public-black... As well as the configuration file for the script that comes with dnscrypt-proxy: https://github.com/jedisct1/dnscrypt-proxy/blob/master/utils...

comment by jedisct1 · 2018-11-13 · in Cloudflare 1.1.1.1 iOS app

…since there are legitimate reasons to return different responses over time, but it's something. [1] https://github.com/jedisct1/dnscrypt-proxy [2] https://github.com/jedisct1/dnscrypt-proxy/wiki/Load-Balanci...

comment by cosmie · 2018-11-08 · in Tell HN: Amazon now owns 3.0.0.0/8

In other DNS-over-HTTPS news, dnscrypt-proxy 2.0.17 has been released: https://github.com/jedisct1/dnscrypt-proxy

comment by jedisct1 · 2018-10-03 · in Alphabet's cyber unit Jigsaw introduces a new security app to bust censorship

…the MIPS machine. Go is cross-platform, sure. However dnscrypt-proxy [1] is also very portable. [1] https://github.com/jedisct1/dnscrypt-proxy

comment by Fnoord · 2018-09-09 · in DNS over TLS – Thoughts and Implementation

…for something well tested and well supported, check out DNSCrypt (and the awesome DNSCrypt-proxy): https://github.com/jedisct1/dnscrypt-proxy It doesn't get a much love as it should, but it is probably the best way to secure encrypt your…

comment by nykolasz · 2018-09-09 · in DNS over TLS – Thoughts and Implementation

…specific IP addresses, can provide nice logs, does caching, supports time-based rules, and more: https://github.com/jedisct1/dnscrypt-proxy/wiki/Filters

comment by jedisct1 · 2018-09-07 · in Noisy: Random DNS, HTTP/S traffic noise generator

…and keeps them private. If you can afford consider running dnscrypt server yourself. [2] [1] https://github.com/jedisct1/dnscrypt-proxy [2] https://github.com/jedisct1/dnscrypt-proxy/wiki/How-to-setup...

comment by chewz · 2018-08-12 · in Google Public DNS turns 8.8.8.8 years old

…you can't use DNS over HTTPS and pi-hole, just use dnscrypt-proxy, and point your pi-hole at that: https://github.com/jedisct1/dnscrypt-proxy

comment by ac29 · 2018-07-20 · in Getting Started with DNS over HTTPS on Firefox

Use https://github.com/jedisct1/dnscrypt-proxy

comment by jedisct1 · 2018-07-20 · in Getting Started with DNS over HTTPS on Firefox

…There are also tutorials on how to set up your own DNSCrypt server: https://github.com/jedisct1/dnscrypt-proxy/wiki/How-to-setup...

comment by jedisct1 · 2018-07-20 · in Getting Started with DNS over HTTPS on Firefox

dnscrypt-proxy is probably the most popular DNS-over-HTTPS client. https://github.com/jedisct1/dnscrypt-proxy

comment by jedisct1 · 2018-06-04 · in Inside Firefox’s DNS-over-HTTPS engine

dnscrypt-proxy ( https://github.com/jedisct1/dnscrypt-proxy ) supports all major platforms and checkout https://dnscrypt.info for more options.

comment by j605 · 2018-06-01 · in Improving DNS Privacy in Firefox

…a fully functional client in Go, which is the core of dnscrypt-proxy 2, took about the same time: https://github.com/jedisct1/dnscrypt-proxy/commit/b076e01f7a... Correctly implementing DNS-over-TLS is way more complicated. It has to use…

comment by jedisct1 · 2018-06-01 · in A cartoon intro to DNS over HTTPS

…using an IP address. At least to bootstrap the process. This is where DNS Stamps come in handy https://github.com/jedisct1/dnscrypt-proxy/wiki/stamps

comment by jedisct1 · 2018-05-31 · in A cartoon intro to DNS over HTTPS

Use dnscrypt-proxy https://github.com/jedisct1/dnscrypt-proxy

comment by jedisct1 · 2018-05-31 · in A cartoon intro to DNS over HTTPS

Also mentioned in article: Use DNSCrypt Proxy V2 (a golang rewrite) for DNS over TLS and/or DNScurve https://github.com/jedisct1/dnscrypt-proxy E.g. on a Mac with Homebrew. First: brew install dnscrypt-proxy Second: Edit your…

comment by therealmarv · 2018-04-08 · in How to keep your ISP’s nose out of your browser history with encrypted DNS

…you don't benefit from a shared cache. Probably the best thing you can do is to run something like https://github.com/jedisct1/dnscrypt-proxy which at least retains privacy between you and the resolver, and use public resolvers you trust.…

comment by vavrusa · 2018-04-02 · in DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8.8.8 x Quad9 x OpenDNS

https://github.com/jedisct1/dnscrypt-proxy

comment by jedisct1 · 2018-04-02 · in DNS Performance compared: CloudFlare 1.1.1.1 x Google 8.8.8.8 x Quad9 x OpenDNS

…existing TLS connection technology. You can use both (even at the same time) with DNScrypt-proxy V2 https://github.com/jedisct1/dnscrypt-proxy ;)

comment by therealmarv · 2018-04-01 · in 1.1.1.1: Fast, privacy-first consumer DNS service

…you want to use DNS over HTTPS on Linux/Mac I strongly recommend dnscrypt proxy V2 (golang rewrite) https://github.com/jedisct1/dnscrypt-proxy and put e.g. cloudflare in their config toml file to make use of it.

comment by therealmarv · 2018-04-01 · in 1.1.1.1: Fast, privacy-first consumer DNS service

Snap, hours later as I was looking for some things relating to setting up dnscrypt-proxy2 I landed on https://github.com/jedisct1/dnscrypt-proxy and spotted a certain similarity between the usernames of that GitHub user and the person that…

comment by codetrotter · 2018-03-30 · in 1.1.1.1 Cloudflare DNS Resolver Soon to Be Announced?

▲ 2

DNSCrypt Proxy v2, golang rewrite, supports DNS-over-HTTPS

story by therealmarv · 2018-03-07 · 0 comments

▲ 3

Dnscrypt-proxy 2.0.0 released

story by vuln · 2018-02-06 · 0 comments

DNS-over-HTTPS draft-03 is implemented in dnscrypt-proxy https://github.com/jedisct1/dnscrypt-proxy I'm currently working on an nginx module, which will make it trivial to deploy DoH as a vhost on an existing webserver.

comment by jedisct1 · 2018-02-04 · in DNS Queries over HTTPS (draft-03)

▲ 2

DNSCrypt discontinued?

story by snowpanda · 2018-01-06 · 0 comments

…local network, which is often the weakest point of the chain, against man-in-the-middle attacks." https://github.com/jedisct1/dnscrypt-proxy/blob/master/READM... So my guess is that for example your dns requests could be…

comment by DavideNL · 2017-12-30 · in Apple-centric guide to improve privacy and security

…plunged just in design of Quad9 webpage they could have kept some servers running for years[^2] [1] https://github.com/jedisct1/dnscrypt-proxy/wiki [2] According to soltysiak his monthly costs are c.a. 40€/month but as it is his private…

comment by chewz · 2017-11-17 · in IBM Quad9 – A free security solution using DNS to protect against cyber threats

Nice - for those wondering how to do this themselves (like me) - check out https://github.com/jedisct1/dnscrypt-proxy/wiki

comment by anujdeshpande · 2017-08-09 · in Indian government bans archive.org

…[1] can also be used to do DNS-based ad (and other categories) filtering, logging and more: [1] https://github.com/jedisct1/dnscrypt-proxy/wiki/Filtering

comment by jedisct1 · 2017-03-19 · in Pi-hole: Adblocking for every device on your network

dnscrypt-proxy can do filtering as well: https://github.com/jedisct1/dnscrypt-proxy/wiki/Filtering

comment by jedisct1 · 2017-03-13 · in Pi-hole – A black hole for Internet advertisements

…four resolvers configured for them [2]. [1] https://adguard.com/en/adguard-dns/overview.html [2] https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscr...

comment by Ir3eu1yo · 2017-03-12 · in Set up a cheap cloud hosted adblocker in an hour for $2.50 a month

Huh? https://github.com/jedisct1/dnscrypt-proxy/blob/master/DNSCR... Oh! Sorry! I misread your comment. Yes: HTTPS can leak hostnmes.

comment by tptacek · 2016-11-25 · in Transparent DNS proxies

…For example the list of public resolvers compatible with DNSCrypt can be verified with a oneliner: https://github.com/jedisct1/dnscrypt-proxy#dnscrypt-enabled-... OpenWRT is now also leveraging Ed25519 signatures to sign their packages,…

comment by jedisct1 · 2015-06-12 · in Signify: Securing OpenBSD from Us to You

…just as much information is being sent insecurely in the form of DNS queries/responses. Learn more: https://github.com/jedisct1/dnscrypt-proxy http://dnscrypt.org/ Check if you already have it enabled (unlikely if this is the first time…

comment by sft · 2014-12-13 · in Marking HTTP as Non-Secure

…public resolvers, most of them without logs, and some supporting DNSSEC and/or Namecoin: https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscr... Adding DNSCrypt support is as easy as running a small daemon (dnscrypt-wrapper)…

comment by jedisct1 · 2014-07-20 · in DNS.watch – Fast, free and uncensored

…a list of servers supporting DNSCrypt, to authenticate queries and responses sent to the resolvers: https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscr... Some of these support DNSSEC and Namecoin.

comment by jedisct1 · 2014-05-30 · in Use other DNS servers than your ISP's