search

mysteriumnetwork / node

Mysterium Network Node - official implementation of distributed VPN network (dVPN) protocol
https://mysterium.network
GNU General Public License v3.0
1.11k stars 311 forks source link

Implement encrypted DNS (DoH or DoT) for nodes #4341

Open MarkWieczorek opened 2 years ago

MarkWieczorek commented 2 years ago

In the mysterium client, you have the option to choose which DNS server you would like to use. One of the options is "Cloudflare", and many people just assumed that this meant encrypted DNS with Cloudflare's DoH server. However, once connected to a node, and going to 1.1.1.1/help, you can confirm that the DNS with Cloudflare is not encrypted.

It is my opinion that a Mysterium node's DNS server should use encrypted DNS be default. Furthermore, there should be a way for the client to tell which DNS server is being used, and whether it is encrypted or not.

cvl commented 2 years ago

I'd add that it would be perfect, if calls to Mysterium APIs should also go through the provider even while not connected. So Mysterium shouldn't ever know the true IP of the consumer.