Stack Overflow
Stack Overflow

Questions tagged [dns-over-https]

DNS over HTTPS is a protocol for secure name lookups.

DNS Queries over HTTPS (DoH)

18 questions
2
votes
1 answer

Which encoding does application/dns-message use?

I am writing DNS-over-HTTPS server which should resolve custom names, not just proxy them to some other DoH server, like Google's. I am having trouble properly decoding the body of the request. For example, I get body of request, that is in binary…
ajaleksa
  • 324
  • 1
  • 6
  • 20
2
votes
1 answer

Q: DNS over HTTPS (DOH) and corporate split DNS setups

Since Mozilla and Google announced, that they intend to activate DNS over HTTPS in the default settings in the future and the IETF approved officially the draft (https://datatracker.ietf.org/wg/doh/about/), I tried to understand the impact on our…
kwinsch
  • 59
  • 1
  • 6
1
vote
0 answers

How to set timeout for cURL CRL checking?

curl --connect-timeout 5 --doh-url $dohUrl --max-time 10 --tlsv1.3 .... I've tried using either --connect-timeout, --max-time or both at the same time as you can see above, still cURL wastes so much time trying to check for CRL and I want to tell…
user20682592
1
vote
1 answer

Getting "Illegal Instruction" error when trying to install cloudflared on a fresh Raspberry Pi install

I am following the guide here for 32bit raspberry pi: https://bendews.com/posts/implement-dns-over-https/ At the very first step after "cloudflared -v" here I get an "illegal instruction" error and I can't proceed. wget…
Coltography
  • 31
  • 3
1
vote
1 answer

iOS 14, mobileconfig, DNS over HTTPS with DNSDomainMatch whitelist support

I run my own dns over https server. I'm wanting most DNS requests to go through it, but any requests from "apple.com", "icloud.com" domains/subdomains to bypass my DOH server and just use the phone's default DNS for that. I've created a…
CamHart
  • 3,825
  • 7
  • 33
  • 69
1
vote
1 answer

What is the difference between DNS-over-HTTPS and DNSSEC?

I was just introduced to the Domain Name System Security Extensions (DNSSEC) and it sounds very similar to the concept of DNS-over-HTTPS (DoH) and DNS-over-TLS: to add privacy and security into DNS lookups. What are the main differences between…
MakisH
  • 967
  • 1
  • 9
  • 23
1
vote
1 answer

Enable DNS over HTTPS (DoH) when visiting a specific domain

I am totally new with this new protocol that is already available in latest Firefox browser but I can not manage it to work on Chrome browser at least in a Windows PC. Now I totally had no idea where to put this question in SO so please…
Bitwise DEVS
  • 2,858
  • 4
  • 24
  • 67
1
vote
1 answer

Will website name in certificate shared by server during handshake kill the DNS over https purpose?

While querying DNS over https lets assume the user gets ip over secure connection. In the handshaking process the website shares its certificate in plaintext which includes website name and other info. Will it kill the DNS over https purpose other…
sujoshi
  • 157
  • 1
  • 5
0
votes
0 answers

Debugging Android private DNS

Tl;Dr: want to know, how to debug Android DNS resolution problems with Private DNS. I've created my own DoH (Dns-over-Https) proxy server, to use it as a "Private DNS" in android. It proxifies requests to my own installation of dnscrypt-proxy, that…
MihanEntalpo
  • 1,952
  • 2
  • 14
  • 31
0
votes
0 answers

Very slow connection with OkHttp ipv6 enabled domain on Android Studio

I have two domain pointing to the same server, one have ipv6 enabled, the other one doesn't. 4 scenario for sending request ipv6 enabled, using wifi, return in about 4sec ipv6 enabled, using cellular data, return in about 36SEC ipv6 disabled, using…
ramen87x
  • 160
  • 3
  • 18
0
votes
1 answer

How to configure iOS MDM payload DNSSettings to stay active after device restart?

We are using SimpleMDM to manage iPhones and iPads, and push a Custom Configuration Profile with DNSSettings MDM payload This DNSSettings payload configures device to use a custom DNS server via HTTPS protocol. These changes work until the device is…
igorg
  • 1
0
votes
1 answer

What happens if a DNS over HTTPS server responds with status 5xx or 4xx on iOS?

Looking at this example mobileconfig, I am trying to find out what happens if a DoH server responds with a status of 4xx or 5xx in responds to a DoH query on iOS. For example, if NGINX is broken or for whatever reason, the DoH server responds with…
bbkrz
  • 423
  • 1
  • 8
  • 16
0
votes
1 answer

Client cannot resolve my DoH server response

I am making a custom DoH server that should resolve some TLDs differently. I am using NodeJS to implement it. For most domains, it just proxies them to Google's DoH and it works. But when I try to resolve some custom domains, for…
ajaleksa
  • 324
  • 1
  • 6
  • 20
0
votes
0 answers

Is it possible to enable DNS-over-HTTPS on CEF? How?

All major browsers are rolling out support for DNS Over HTTPS (DoH). Firefox recently announced that it is now enabled by default. Chrome has support for a few months now. The Microsoft Edge browser (that now uses Chromium) also has support for it…
Guilherme
  • 5,143
  • 5
  • 39
  • 60
0
votes
2 answers

Does curl --doh-url not accept ip address for dns servers and is the response just html?

When running the curl --doh-url https://dns-server.example.com https://www.example.com command, does curl --doh-url not take in an ip address? Can you not specify https://127.0.0.1 or something along the lines of an ip address? Trying to do this…
bwang
  • 49
  • 7
1
2