DNSCrypt / dnscrypt-protocol

DNSCrypt protocol specification
https://dnscrypt.info
Other
136 stars 40 forks source link

Anonymized DNSCrypt v2 protocol and eSNI #4

Closed lrq3000 closed 4 years ago

lrq3000 commented 4 years ago

Hello,

I saw that the DNSCrypt v2 protocol intends to provide anonymized DNS requests. On privacytools.io issues tracker, someone mentioned that there may still be an issue with the SNI.

Since this is way above of my head, could someone please maybe clarify that issue? Thank you very much in advance :-)

jedisct1 commented 4 years ago

Browsers still leak websites they are trying to reach due to something called SNI.

This is being addresses in a new protocol called ECHO.

But ECHO is independent from DNSCrypt. This is something that web browsers and web servers have to implement.

ECHO isn't implemented anywhere yet, and the protocol itself is still being finalized.