subfinder / research

❄️ Research project for SubFinder core API V2
MIT License
36 stars 8 forks source link

add dns-over-https resolving utility #47

Open picatz opened 6 years ago

picatz commented 6 years ago

CloudFlare and Google do this.

https://developers.google.com/speed/public-dns/docs/dns-over-https

Ice3man543 commented 6 years ago

I'll work on this one.

bugbaba commented 6 years ago

@Ice3man543 Could you share a brief on how are you planning to do this.

Did you guys found the way to send a multiple values in a single request ?

Sending so many http requests doesn't sounds right.

Ice3man543 commented 6 years ago

@bugbaba that's a good question. We are considering whether it is really needed since dns request cost less resources than HTTP requests. But we think a combination of both could be useful.

picatz commented 6 years ago

@bugbaba I'd like for version 2 to have the DNS-over-HTTPs resolvers be an optional, configurable part of the application in the sense you can opt-out of using them and provide custom endpoints. I don't want to force users into using this at all.

One of the main draws I see in supporting this feature is to provide a way to make DNS requests without "leaking" those plaintext requests you're making on a network.

bugbaba commented 6 years ago

concern regarding leaking is valid @picatz

picatz commented 6 years ago

I have made a separate command-line utility that does dns-over-http: https://github.com/picatz/doh

I think that the majority of that code could be ripped out (or used as a library) to support resolving domains.

picatz commented 6 years ago

The work made on doh might also be a good fit for https://github.com/domainr/whois#todo