miok Posted at 2020-02-26 16:33:45(248Wks ago) Report Permalink URL | ||
|---|---|---|
| Mozilla has started rolling out DNS over HTTPS for all Firefox users, a solid security change that’s meant to address the issue of third parties spying on the websites you’re visiting. Normally, when you type a website into your browser’s address bar and hit Enter, your browser uses DNS to map the domain name to the actual IP address of the server you’re trying to reach—the one that hosts the website you’re looking to visit. DNS queries are typically unencrypted, which means that these requests can “leak” and be easily intercepted by a third party. This allows everyone from hackers to advertisers to easily view what websites you’re trying to visit, even if the sites themselves are encrypted (HTTPS). As the Center for Democracy and Technology describes: "This process happens every time you type an address into your browser, every time you send an email, and every time you click a link. Some websites may contain content embedded from other domains, in which case the page itself may trigger additional DNS queries. So, even if all of the actual content of the sites you visit is encrypted, the DNS resolver (and anyone else monitoring the network) sees every single site you visit, every time you visit. This record can be used to infer what you look at, the kinds of information you are looking for, when and how you use the internet, and other personal information. Some DNS providers sell or use this information for targeted advertising. Beyond the privacy implications of a third party monitoring and selling your internet usage, DNS presents serious security problems. Specifically, DNS is susceptible to man-in-the-middle attacks in which a malicious actor (not the DNS service) intercepts the DNS query and returns an incorrect IP address, potentially directing the user to a harmful site. This ‘spoofing’ attack can be mitigated through the use of additional verification procedures, such as DNSSEC, but many domains do not do this." With DNS over HTTPS enabled, Mozilla writes, your browsing history should be much more hidden from potential attackers and companies that are trying to track what you’re up to online. But Firefox isn’t the only browser that can handle DNS over HTTPS. For a quick look at how to enable DNS over HTTPS in all the major browsers—Mozilla’s included, visit lifehacker | |
Like 9 | ||
Post liked by - Garthock , realityshow    , Ange1 , ROBBREDD  , brightshadow , eyez  , Deep61, MrBadDog, Csabaxb | ||
| miokPosted at 2020-02-26 16:40:04(248Wks ago) Report Permalink URL | ||
|---|---|---|
| Thanks to PaladinNites for pointing this article out to me  | |
Like 9 | ||
| Post liked by - Garthock, realityshow, Ange1, ROBBREDD, eyez, brightshadow, Deep61, MrBadDog, PaladinNites | ||
| eyezPosted at 2022-04-10 17:59:56(137Wks ago) Report Permalink URL | ||
|---|---|---|
| Cheers PaladinNites And miok forgot abut this :)Last edited by eyez on 2022-04-10 19:25:11 | |
Like 5 | ||
| Post liked by - Garthock, realityshow, Ange1, ROBBREDD, miok | ||
| realityshowPosted at 2022-05-01 10:34:46(134Wks ago) Report Permalink URL | ||
|---|---|---|
| Thanks, never knew about DNS over HTTP very insightful! For firefox it shows i can select cloudflare, Next DNS, and custom. I seem to remember a cloudflare scandal many years ago but that may since have been resolved. So i`m thinking NextDNS unless someone knows a good one to input into custom. I`ve found a handy program called "Simple DNScrypt" which doesnt rely on a browser, it sits in the icon tray when run.This is opensource and customizable, i did try it but seemed to slow down internet browsing, tho i`m sure i need to try some different settings. Anyone use this? If not this may also be handy to play with.  Last edited by realityshow on 2022-05-01 15:58:40 | |
Like 4 | ||
| Post liked by - Ange1, ROBBREDD, Garthock, miok | ||
| miokPosted at 2022-05-01 14:01:59(134Wks ago) Report Permalink URL | ||
|---|---|---|
| "Dns Jumper v2.2" is freeware that will quickly check the response time of all available public DNS servers and allow you to switch to the fastest one with a single click. It also backs up your current settings and will restore them in one click. It also offers several other useful functions. For more detailed information or to download, use your favorite search engine to search for "Dns Jumper" | |
Like 4 | ||
| Post liked by - Ange1, ROBBREDD, realityshow, Garthock | ||
| realityshowPosted at 2022-05-01 15:55:49(134Wks ago) Report Permalink URL | ||
|---|---|---|
| Thanks Looks useful for DNS, but i wanted to highlight theres another method for DNS Encryption which may be of interest to some. DNSCrypt is a protocol that encrypts, authenticates at the Transport Layer Security (TLS), the successor of the now-deprecated Secure Sockets Layer (SSL) For many years, HTTPS used SSL as its standard protocol. However, there is now a newer version of SSL, which is called TLS. They are quite similar in many respects; but essentially, TLS is the upgraded version of SSL. DNS over TLS (DoT) is a network security protocol for encrypting and wrapping Domain Name System (DNS) queries and answers via the Transport Layer Security (TLS) protocol. The goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data via man-in-the-middle attacks. DNS over HTTPS (DoH) is a protocol for performing remote Domain Name System (DNS) resolution via the HTTPS protocol. A goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data by man-in-the-middle attacks. The two are both radically different only in the methods used for encryption and delivery. On the basis of privacy and security, whether or not a superior protocol exists among the two is a matter of debate. The "Simple DNSCrypt" program sits in the tray and does all DNS Traffic & DNS Over HTTPS without relying on a browser, I willl still tick DNS over HTTP in firefox but thought some users may wish to explore DNSCrypt, tho i`m using the simple version called "Simple DNSCrypt". For hardcore user they may wish to search out DNSCrypt which is more advanced and beyond me; which is also open source. Heres some screenshots of Simple DNSCrypt which is more user friendly than DNSCrypt    *If using VPN some VPN services have option to prevent DNS leaks over their nameserver of which is already encrypted so for VPN it should not be needed if u have chosen that option from your VPN settings. Last edited by realityshow on 2022-05-01 16:03:52 | |
Like 3 | ||
| Post liked by - Ange1, ROBBREDD, miok | ||