Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement DNS-over-TLS client #211

Closed
DGDG14 opened this issue May 22, 2022 · 4 comments
Closed

Implement DNS-over-TLS client #211

DGDG14 opened this issue May 22, 2022 · 4 comments
Labels
enhancement New feature or request
Milestone

Comments

@DGDG14
Copy link

DGDG14 commented May 22, 2022

Please add the secure DNS OR CUSTOM DNS option to get privacy.
For example
Once traffic is processed from pcapdroid than it will directly go to router and then it will go to the service provider DNS and then it will go to the destination this currently happening.
And I'm thinking of this once traffic is process by pcapdroid at the end of VPN tunnel add option for where traffic needs to be sent user can select to add custom DNS or a secure DNS.
for secure DNS there are many free secure DNS for example adguard DNS or CLOUDFLARENET DNS and many more which you can also provide as list of DNS
I know this is kind complicated request.
This could help alot VISIBILITY WITH PRIVACY.

@emanuele-f emanuele-f added the enhancement New feature or request label May 23, 2022
@emanuele-f emanuele-f changed the title Please add the secure DNS OR CUSTOM DNS option Implement DNS-over-TLS client May 23, 2022
@kevin0t
Copy link

kevin0t commented Oct 12, 2022

Implementing a dns over tls client could provide additional info about the connections made to a certain domians particularly which are made through quic protocol which won't give out the sni too.
Also in decryption mode , it could be useful to keep outgoing requests secure.
Though priority of this request could be evaluated by the dev.

@emanuele-f
Copy link
Owner

https://github.com/Gedsh/InviZible#dnscrypt can provide useful ideas for integration

@kevin0t
Copy link

kevin0t commented Oct 28, 2022

Also in decryption mode , it could be useful to keep outgoing requests secure.\nThough priority of this request could be evaluated by the dev.

For providing secure dns queries in tls decryption mode , the reverse-dns mode of mitmproxy can be used and specify upstream dns server.

--mode reverse:dns://8.8.8.8

refer mitmproxy documention regarding this here
Replace google dns with cloudflare dns

@emanuele-f
Copy link
Owner

PCAPdroid can now be used in conjunction with InviZible Pro, to encrypt the DNS traffic with DNSCrypt/DNS-over-HTTPS
see https://emanuele-f.github.io/PCAPdroid/advanced_features#42-doh-support for more details.
Integrating dnscrypt-proxy directly could be possible in the future but it's involved, both because it will probably require relying on pre-built executables and because the UI for the DNSCrypt settings needs to be implemetend in PCAPdroid

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants