Actions
Feature #8415
closed
Add DNS over TLS (RFC 7858) fonctionality to dns resolver and forwarder
Status:
Duplicate
Priority:
Normal
Assignee:
-
Category:
DNS Resolver
Target version:
-
Start date:
04/02/2018
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Release Notes:
Description
See https://tools.ietf.org/html/rfc7858 for the proposed standard. The benefit to the user is out of the box DNS privacy.
Unbound seems to support TLS from their changelog but its not specified that it is '7858 compliant.
I think that for the UI, there should simply be an option to enable TLS on outgoing or incomming request and the rest should be tuck away in the advanced settings tab. By "the rest" I mean standard TLS options : port, certificate management, cipher choice etc...
There are already 2 major providers supporting it in production : Google (8.8.8.8 & 8.8.4.4) and Cloudfare (1.1.1.1 & 1.0.0.1) so testing should be easy.
Updated by
Actions