Шифрование DNS-трафика

Уровень 0 · материалов: 6

В кластер входят документы, посвященные протоколам шифрования DNS-запросов для защиты приватности и обхода блокировок, и не входят материалы об общих методах сетевой безопасности без привязки к DNS.

Общие признаки: DNS-over-HTTPS (DoH), DNS-over-TLS (DoT), защита приватности от ISP, обход цензуры, техническая настройка DNSCrypt

Группа выше: Безопасность DNS

Материалы

• #28035 — Enabling DNS over HTTPS Across Popular Web Browsers — Представитель этого кластера

  Как послать провайдера подальше, и включить DNS по HTTPS в любом браузере — SLY_G

  Смысл: The main idea is to inform users about the benefits of DNS over HTTPS (DoH) for privacy and provide a practical guide on how to enable this encryption in various web browsers to prevent ISPs from monitoring DNS queries.

  A guide on how to enable DNS over HTTPS (DoH) in various browsers to encrypt DNS traffic and enhance online privacy against ISP monitoring.

• #1863 — Firefox and Chrome Implement Encrypted DNS to Bypass Censorship

  Firefox и Chrome будут шифровать DNS-запросы и обходить цензуру — GlobalSign_admin

  Смысл: The text explains the implementation of the DNS-over-HTTPS (DoH) protocol in Firefox and Chrome browsers. It highlights how this technology protects user privacy and bypasses internet censorship by encrypting the 'last mile' of DNS requests, which were previously sent in plain text.

  Firefox and Chrome are integrating DNS-over-HTTPS (DoH) to encrypt DNS queries, thereby preventing ISP tracking and bypassing internet censorship.

• #11164 — Google Public DNS Adds Support for DNS over TLS

  Google Public DNS тихо включили поддержку DNS over TLS — zhovner

  Смысл: The main idea is to inform users about Google's support for DNS over TLS and provide a technical guide on how to secure DNS queries to prevent ISP snooping and censorship.

  Google's 8.8.8.8 now supports DNS over TLS, offering a way to encrypt DNS queries and protect user privacy from ISP interception.

• #6070 — Implementing DoH and Pi-hole for Network Privacy

  Переводим на DoH домашнюю сеть, или еще один щелчок по носу фильтрации — Furriest

  Смысл: The text provides a detailed technical guide on how to encrypt DNS traffic using DNS-over-HTTPS (DoH) via Pi-hole and cloudflared to bypass ISP-level censorship and block advertisements across a home network.

  A technical guide to bypassing ISP DNS filtering and blocking ads by deploying a local Pi-hole server with a Cloudflare DoH proxy.

• #436 — Hiding DNS Queries from Internet Service Providers

  Как спрятать DNS-запросы от любопытных глаз провайдера — m1rko

  Смысл: The main idea is that standard DNS is a privacy loophole allowing ISPs to track users, and while encrypted protocols like DNSCrypt, DoT, and DoH provide vital protection against surveillance and spoofing, they currently require manual technical setup and should be used alongside VPNs for comprehensive privacy.

  The article analyzes how to protect online privacy by encrypting DNS queries using DNSCrypt, DoT, and DoH to prevent ISPs from tracking browsing history.

• #23246 — Rutracker's eSNI Implementation and Bypassing DPI

  Rutracker включил eSNI. Конец эпохи DPI и конец блокировок — Balling

  Смысл: The main idea is that by using eSNI and DNS over HTTPS, users can bypass state-level web blocking (DPI) because the destination website's name is encrypted, preventing censors from identifying and blocking the traffic.

  The article explains how Rutracker uses eSNI and Cloudflare to bypass DPI blocking and provides a guide for Firefox users to enable these settings.