-
## Description
DNS-over-HTTPS is only available in auto-upgrade mode in Brave; this is behavior inherited from Chromium. DNS-over-HTTPS should instead be the default choice for DNS resolutio…
-
"DNS over TLS differs from DNS over HTTPS, mostly in that it omits the HTTP/2 protocol, sending DNS data directly over the TLS circuit itself. This simplification means DoT misses the opportunity to b…
-
One issue with allowing users to trust a validating resolver over a secure channel is that the secure connection itself relies on WebPKI which takes away the advantages provided by DANE.
Pinning is…
-
Hi,
_Disclaimer: I was told by Cloudflare after reporting this to them at https://hackerone.com/cloudflare to also report this publicly in this project. Report ID: #1544311 (Not disclosed yet)_
…
-
Dear stubby team,
I want my DNS requests to be spread over different servers. For this, option `round_robin_upstreams` is a first step. However, it is weak if the attacker gets to make fake DNS req…
-
I was recently experimenting with the famous website which is blocked at max place and at so much deeper level - `ThePirateBay.org` (Just wanted to test my advanced overall configuration to see how mu…
-
I find DNSCrypt-Proxy secure, efficient, and easy to integrate with other services in relation while in use with Dietpi. Is there any plans for this feature? If yes does it need support?
Sincerely,…
-
Rethink configuration:
Connect over SOCKS5 proxy.
Configuration -> Network -> enabled "Use all available networks (experimental)" and "Loopback (experimental)"
Configuration -> Network -> "Choose f…
-
Code name: Turbo Tunnel
Designing circumvention protocols for speed, flexibility, and robustness
In working on circumvention protocols, I have repeatedly felt the need for a piece that is missing …
-
**Authors:** Anonymous, David Fifield, Amir Houmansadr
Date: Friday, September 24, 2021
[*中文版:评估苹果的iCloud Private Relay的抗封锁能力*](https://gfw.report/blog/private_relay_censorship/zh/)
This repo…