Don't route DNS queries for Tor-disabled apps through Tor

Gedsh / InviZible

Android application for online privacy and security

https://invizible.net

GNU General Public License v3.0

1.44k stars 102 forks source link

Don't route DNS queries for Tor-disabled apps through Tor #258

Closed kanji-deshi closed 4 months ago

kanji-deshi commented 5 months ago

I'm using Tor without DNSCrypt and have excluded a few apps from using Tor. However, InviZible Pro sends all DNS queries through Tor. This has two drawbacks:

Those apps get slow.
Those DNS queries could get associated with both you and the Tor traffic, e.g. by a malicious exit node, resulting in all your Tor traffic being deanonymized.

Orbot seperates DNS queries, which is about the only thing that app gets right, and it should be common for VpnServices to have different DNS, so I'd expect separation to be the default behavior (prove me wrong).

Gedsh commented 5 months ago

I'd expect separation to be the default behavior (prove me wrong).

You're wrong. On Android, it is impossible to split DNS traffic from different apps. The only way is to completely bypass the VPN using the Android API, which is what Orbot does. So in the case of InviZible, this app will completely bypass InviZible.

This feature is available in the latest beta version and will be available in the stable version soon. Note that this will not work with the "Block connections without VPN" feature. Just like in Orbot.

Gedsh commented 4 months ago

Fixed via 9befd505233f093b384e50f2a53f0156485786e6