namecoin / ncdns

:globe_with_meridians: Namecoin to DNS bridge daemon
https://www.namecoin.org/
GNU General Public License v3.0
133 stars 40 forks source link

Look into transparent DNS redirects for non-DNS record types #36

Open JeremyRand opened 7 years ago

JeremyRand commented 7 years ago

Tor onion services and ZeroNet services aren't usually accessed by DNS. However, Tor does have the ability to do some kind of transparent DNS magic that I don't fully understand, so that when an application does a DNS query for a .onion domain, Tor replies with a DNS response that results in the TCP connection being directed to an IP that Tor can intercept and route to the onion service.

We could, in theory, make ncdns mimic this behavior for .bit domains that point to an onion service. We could probably also do something vaguely analogous (though perhaps implemented differently) for .bit domains that point to a ZeroNet site.

It should be noted that doing this kind of trick will break stream isolation. It will also not work properly for DNS names that point to onion services or ZeroNet sites. It may be wiser to instead do this kind of thing via dns-prop279 or Yawning's SOCKS proxy. I'm filing this issue not because I'm convinced this is a smart thing to do, but simply because it occurred to me and I wanted to write it down and get comments.

JeremyRand commented 7 years ago

CC: @samurai321