technology:dns

How to Enable DNS-over-HTTPS (DoH) in Mozilla Firefox
▻https://www.trishtech.com/2018/08/how-to-enable-dns-over-https-doh-in-mozilla-firefox

https://www.trishtech.com/wp/wp-content/uploads/2013/09/firefox-logo.jpg

How to Enable DNS-over-HTTPS (DoH) in Mozilla Firefox

Posted onAugust 8, 2018AuthorTrishaLeave a comment

When you visit a website, the web browser first translates the domain name (such as yahoo.com) to the IP address using the DNS server configured in your operating system. We actually offer a free tool Public DNS Server Tool that helps you quickly configure your Windows system to use one of the publicly available DNS servers.

But now Firefox browser (starting from version 62) has come up with a new feature called Trusted Recursive Resolver (TRR) which sets Firefox to use a secure DNS server of its own. For this feature, all the DNS resolution requests are sent over HTTPS and this is why only a DNS over HTTPS (DoH) complaint server can be used for this feature.

Here is how you can enable DoH in Firefox browser:

Type about:config in the address bar and press Enter.
When warning appears, click on the I accept the risk button.
In the search box type trr to find the settings we want.

#dns #DoH #dnsoverhttps #https

#dns 101
▻https://hackernoon.com/dns-101-fdcbdbe9ccf6?source=rss----3a8144eabfe3---4

https://cdn-images-1.medium.com/max/1024/1*eudhAwCgF58Wj7Ur96dIQA.jpeg

▻https://medium.com/media/a0a23c93ed5dce1af090260ec69339f5/hrefJon Christensen and Chris Hickman of Kelsus teach a primer on the domain name system (DNS) and explain what happens when someone types a URL (i.e., Internet link) into a browser. They demystify the flow process to help you understand how DNS works and the mechanics involved.Some of the highlights of the show include:What is DNS? Fundamental past and present protocol for Internet; connection is made via friendly Internet Protocol (IP) address to identify and map servers within a networkDNS and IP address offer scalability through levels of hierarchy (.com, .net, .org)DNS servers act as authoritative source for domain names they own and manage; servers can host multiple zones and levels to segment URL namespaceBenefits of DNS: (...)

#elastic-container-service #tech-podcasts #dns-podcast #aws

Handshake, ENS and Decentralized Naming Services Explained
▻https://hackernoon.com/handshake-ens-and-decentralized-naming-services-explained-2e69a1ca1313?s

https://cdn-images-1.medium.com/max/936/1*aqAc5FVuPHhqqDjKrgWG_A.png

The Domain Name System has been in operation for decades and is the infrastructure that handles billions of queries over the internet. As a user, you rely on your operating system and browser to help navigate the internet. However, whats humming quietly is the back-end infrastructure that helps your device find the right website. The #dns is part of the internet infrastructure which is a distributed network that handles queries from billions of people. The query is sent to a resolving server and its only task is to find the IP address behind the website you requested.Recently many blockchain based solutions are starting to rise and they offer a compelling value proposition. Imagine being in Turkey the day they disabled the resolving server from seeking the Twitter IP address. How would (...)

#cryptocurrency #ethereum #security #bitcoin

The big #DNS #Privacy Debate at #FOSDEM

From the author:

This weekend at the excellent FOSDEM gathering there were no less than three presentations on DNS over HTTPs. Daniel Stenberg presented a keynote session “DNS over HTTPS – the good, the bad and the ugly” (video), Vittorio Bertola discussed “The DoH Dilemma” while Daniel, Stéphane Bortzmeyer and I formed a DNS Privacy Panel expertly moderated by Jan-Piet Mens. I want to thank Daniel, Jan-Piet, Rudolf van der Berg, Stéphane & Vittorio for proofreading & improving this post, but I should add this does not imply an endorsement from anyone!

In what follows, I will attempt to give a neutral description of what I think we learned, and where we now are on DoH, with a focus on the European perspective. If you find a noticeable bias, please let me know urgently and I’ll address it. But to be clear, I’m no fan of centralizing DNS on a small number of cloud providers.

After the neutral description you will find some strong opinions on if “DNS over Cloud” is a good thing or not.

▻https://blog.powerdns.com/2019/02/07/the-big-dns-privacy-debate-at-fosdem

Aujourd’hui c’est #DNSFlagDay : êtes-vous prêts ? ▻https://www.afnic.fr/fr/ressources/blog/1er-fevrier-2019-le-dns-va-t-il-trembler-7.html #Afnic

Today is #DNSFlagDay : are you ready ? ▻https://www.afnic.fr/en/resources/blog/february-1-2019-is-the-dns-going-to-shake-3.html #Afnic #DNS #Internet #Web

https://www.afnic.fr/medias/images/blog/BLOG-RENFORCER.jpg

[Success stories] Renforcer son infrastructure pour l’adapter à ses ambitions ▻https://www.afnic.fr/fr/ressources/blog/success-stories-renforcer-son-infrastructure-pour-l-adapter-a-ses-ambitions.ht

https://www.afnic.fr/medias/images/blog/BLOG-RENFORCER-EN.jpg

[Success stories] Strengthen your infrastructure to suit your ambitions ▻https://www.afnic.fr/en/resources/blog/success-stories-strengthen-your-infrastructure-to-suit-your-ambitions.html

#Afnic #DNS #CoachingDays

Hosting a Free Static Website on #google Cloud Storage
▻https://hackernoon.com/hosting-a-free-static-website-on-google-cloud-storage-d0d83704173b?sourc

https://cdn-images-1.medium.com/max/1024/1*W8MU64X2qfYMbEUbl3fJ7A.jpeg

This guide walks you through setting up a free bucket to serve a static website through a custom domain name using Google Cloud Platform services.Sign in to Google Cloud Platform, navigate to Cloud DNS service and create a new public DNS zone:By default it will have a NS (Nameserver) and a SOA (Start of Authority) records:Go to you domain registrar, in my case I purchased a domain name from GoDaddy (super cheap). Add the nameserver names that were listed in your NS record:PS: It can take some time for the changes on GoDaddy to propagate through to Google Cloud DNS.Next, verify you own the domain name using the Open Search Console. Many methods are available (HTML Meta data, Google Analytics, etc). The easiest one is DNS verification through a TXT record:Add the TXT record to your DNS zone (...)

#web-development #programming #infrastructure #google-cloud-platform

The Journey To Becoming A Web Host
▻https://hackernoon.com/the-journey-to-becoming-a-web-host-3de489d2c05c?source=rss----3a8144eabf

https://cdn-images-1.medium.com/max/1024/1*GKrWBBpykLNaUZEDM3fKOg.jpeg

Hosting Your Own Web ServerThis article requires that you have knowledge of #php and cURL.All Websites Need Web HostingIf you aren’t sure what web #hosting is — everything on the Internet usually needs a web host. To summarize: the Internet is the Earth. The websites on it are real estate and could be considered houses or commercial buildings, which can be defined with an IP address. The roads on it are the DNS routes. The browser is the car we all drive to visit those places. A web host is where your files are and how everyone finds your real estate on the web. A registrar helps with getting your address, an IP address, that you actually don’t ever really see — which resolves to a name for your website, and usually starts with www.(dot) and ends with (dot)com or another TLD (top level domain) (...)

#wordpress #web-hosting #web-development

Everything You Didn’t Know About the Handshake Naming System — How this #blockchain Project Will…
▻https://hackernoon.com/everything-you-didnt-know-about-the-handshake-naming-system-how-this-blo

Everything You Didn’t Know About the Handshake Naming SystemHow this Blockchain Project Will Disintermediate the Keepers of the InternetThe project was conceived by the people who brought you Purse and Private Internet Access.Handshake, despite popular misconception, is not a blockchain project that seeks to decentralize existing #dns infrastructure in its entirety. That’d be biting off something much more than any #cryptocurrency-backed system could chew. Indeed, it is part of the reason why the predecessors of Handshake have not seen true adoption.According to the project paper,“The Handshake naming protocol differs from its predecessors in that it has no concept of namespacing or subdomains at the consensus layer. Its purpose is currently not to replace all of DNS, but to replace the root (...)

#technology #open-source

ggsava/block-this: Block This - FREE DNS based Ad Blocker for Android
▻https://github.com/ggsava/block-this

Block This is a DNS/VPN based ad blocking & privacy app for Android, that blocks malicious or unwanted internet content by filtering DNS requests and redirecting them to 127.0.0.1 (localhost). It uses a dummy VPN client in order to go around the restrictions in Android and change the DNS settings without having root access. The backend behind the app is a DNS based on PowerDNS - an open source DNS management software working with MySQL as a datasource.

1tayH/noisy : Simple random DNS, HTTP/S internet traffic noise generator
▻https://github.com/1tayH/noisy

A simple python script that generates random HTTP/DNS traffic noise in the background while you go about your regular web browsing, to make your web traffic data less valuable for selling and for extra obscurity.

MailTester.com
▻http://mailtester.com

Just enter the e-mail address and wait for the test results to appear.
There you will see the results of the different checks that are performed:
– Syntax check
If the format is incorrect it will be reported why. For example: unsupported characters, missing @-sign.
– DNS lookup
Any problems looking up the domain (the part after the @-sign) in DNS (Domain Name System) will be reported.
– SMTP verification
If possible an SMTP connection will be made to a mail server that is responsible for the e-mail, and any issues are reported.
Note that for some domains the SMTP servers don’t allow verification, so no information can be found. In this case the e-mail address may or may not exist.

#mail #test #vérification

Global DNS Propagation Checker - What’s My DNS?
►https://www.whatsmydns.net

DNS Propagation Checker
whatsmydns.net lets you instantly perform a DNS lookup to check a domain names current IP address and DNS record information against multiple name servers located in different parts of the world.
This allows you to check the current state of DNS propagation after having made changes to your domains records.

#DNS #propagation #test

La newsletter #Afnic de juillet est en ligne ! ▻http://afnic-media.fr/newsletter/20180717.html Abonnez-vous ici ►https://www.afnic.fr/fr/ressources/newsletter-afnic-36.html #IoT #LivreBlanc #DNS #Syreli

July issue of the #Afnic newsletter is now online! ▻http://afnic-media.fr/newsletter/20180717-english.html Subscribe today to get the next issues directly in your mailbox ▻https://www.afnic.fr/en/resources/afnic-newsletter-71.html #IoT #WhitePaper #DNS #ADR #Syreli

https://www.afnic.fr/medias/images/actus/save-the-date-sanslogo.png

L’Afnic dévoile la thématique de la #JCSA18: Droits humains et Protocoles. RDV le 9 juillet 2018 ! ▻https://www.afnic.fr/fr/l-afnic-en-bref/actualites/actualites-generales/11035/show/l-afnic-devoile-la-thematique-de-la-jcsa18-droits-humains-et-protocoles.html #Afnic #algorithmes #applications #DNS

Afnic reveals the theme of #JCSA18: Human Rights and Protocols. Join us on 9 July 2018! ▻https://www.afnic.fr/en/about-afnic/news/general-news/11034/show/afnic-reveals-the-theme-of-jcsa18-human-rights-and-protocols.html #Afnic

As Google and AWS kill domain fronting, users must find a new way to fight censorship - TechRepublic
▻https://www.techrepublic.com/article/as-google-and-aws-kill-domain-fronting-users-must-find-a-new-way-to-fi

Google and Amazon have both made technical changes to stop the practice of domain fronting, which Signal uses to circumvent censorship in certain countries.
The technique has also been used by a Russian state-sponsored attack group.

Recent changes in the software stack of Google App Engine broke a technique called “domain fronting,” which had been used most notably by the privacy-focused messaging service Signal. The app had used the technique since 2016 to allow users in Egypt, Oman, Qatar, and the United Arab Emirates to continue using the app, despite apparent attempts to block Signal.

Blocking-resistant communication through domain fronting
▻https://www.bamsoftware.com/papers/fronting

Abstract

We describe “domain fronting,” a versatile censorship circumvention technique that hides the remote endpoint of a communication. Domain fronting works at the application layer, using HTTPS, to communicate with a forbidden host while appearing to communicate with some other host, permitted by the censor. The key idea is the use of different domain names at different layers of communication. One domain appears on the “outside” of an HTTPS request—in the DNS request and TLS Server Name Indication—while another domain appears on the “inside”—in the HTTP Host header, invisible to the censor under HTTPS encryption. A censor, unable to distinguish fronted and non-fronted traffic to a domain, must choose between allowing circumvention traffic and blocking the domain entirely, which results in expensive collateral damage. Domain fronting is easy to deploy and use and does not require special cooperation by network intermediaries. We identify a number of hard-to-block web services, such as content delivery networks, that support domain-fronted connections and are useful for censorship circumvention. Domain fronting, in various forms, is now a circumvention workhorse. We describe several months of deployment experience in the Tor, Lantern, and Psiphon circumvention systems, whose domain-fronting transports now connect thousands of users daily and transfer many terabytes per month.

#internet #censure

Create a private local #docker registry
▻https://hackernoon.com/create-a-private-local-docker-registry-5c79ce912620?source=rss----3a8144

On your machines inside a VPN, there are use-cases where a private docker registry is handy especially if you want to have a customized image built for your stack.The caveat is that docker automatically assumes that all your connections are encrypted via https . And that means you need to have domain to encrypt your traffic on https protocol. This guide will help you setup a regisry without having a DNS and a valid SSL/TLS Certificate:Question:Ahm.. Ken there is already a Tutorial on docker official docs about creating a private registryDeploy a registry serverAnswer:The docker official docs are a good enough starting point when you want to learn the basics and the theory. However you will need to dig around if you want to make it registry work without a proper SSL Certificate and (...)

#ssl-certificate #docker-registry #ubuntu #linux

Presented at the last #NDSS symposium, an excellent paper about #DNS #privacy, full of concrete observations made at a DNS root name server.

Analyzing and Mitigating Privacy with the DNS Root Service
by Wes Hardaker

▻https://drive.google.com/file/d/1JlsLeMrabn7O4a9AysGJE2MG5utm7SwZ/view
▻https://indico.dns-oarc.net/event/28/session/11/contribution/69/material/slides/0.pdf

The #Internet Should Be a Public Good

▻http://jacobinmag.com/2016/08/internet-public-dns-privatization-icann-netflix

https://images.jacobinmag.com/2015/03/17003133/5890323039_58e1dc8e3a_z-1.jpg

On October 1, the Internet will change and no one will notice. This invisible transformation will affect the all-important component that makes the Internet usable: the Domain Name System (DNS). When you type the name of a website into your browser, DNS is what converts that name into the string of numbers that specify the website’s actual location. Like a phone book, DNS matches names that are meaningful to us to numbers that aren’t.

#biens_publics

Using Dnsmasq for local development on OS X - Passing Curiosity
▻https://passingcuriosity.com/2013/dnsmasq-dev-osx

“This is a quick guide to installing Dnsmasq on OS X and using it to redirect development sites to your local machine.”

#dnsmasq_local_dev_network_DNS_macOS

“#Nebula_Genomics will leverage #blockchain technology to eliminate middlemen and empower people to own their personal #genomic_data. This will effectively lower sequencing costs and enhance data privacy, resulting in growth of genomic data. Our open protocol will leverage the genomic data growth by enabling data buyers to efficiently aggregate standardized data from many individual people and genomic databanks.”

Nice and interesting project but (see later).

Official corporate Web site: ▻https://www.nebulagenomics.io

The detailed white paper: ▻https://www.nebulagenomics.io/assets/documents/NEBULA_whitepaper_v4.52.pdf

A summary, with an interview of the founders: ▻http://www.sciencemag.org/news/2018/02/q-george-church-and-company-genomic-sequencing-blockchain-and-better-dru

#DNS #DNS_sequencing #genomics

After reading the white paper, some comments:

Sentences such as “Nebula network addresses are cryptographic identifiers that are not associated with any personal information.” are worrying because they seem to indicate that the authors do not really understand the concept of “personal information”. “Personal information” is not only when you name is on it. There have been a lot of research on tracing blockchain addresses.

The white paper sometimes make bold claims, then seriously reduces them. For instancen it talks about “#homomorphic_encryption”, something which is very cool for the mathematically inclined, but offers very poor performances. Later, the paper speaks only of “partially homomorphic encryption”.

Most of the security seems to rely, not on homomorphic encryption, but on Intel’s #Software_Guard_ Extensions (#SGX). SGX is an interesting technology, but quite recent. (Also, it comes from the company that puts a backdoor on every processor, through the Management Engine.) Relying on Intel security one month after Meltdown and Spectre seems audacious.

It is not clear if the “Nebula blockchain” is a private one or a public one, like Blockstack. Private blockchains remove most of the security of a blockchain.

“we want to support research conducted by non-profit institutions, such as universities.” In countries where researchers in public institutions are allowed to create for-profit companies with the results of research funded by “non-profit” research, the concept of “non-profit” is quite blurred.

Chrome pour Android sera plus rapide grâce au DNS Prefetch
▻http://www.tomshardware.fr/articles/internet-navigateur-chrome-android,1-66533.html#xtor=RSS-100

http://media.bestofmicro.com/8/V/744223/gallery/Chrome-Android-cover_rc_120x90.jpg

Pages Web plus réactives

http://media.bestofmicro.com/8/V/744223/gallery/Chrome-Android-cover_rc_120x90.jpg

►https://www.afnic.fr/medias/images/blog/yeti2.PNG

Notre article de blog le plus lu en 2017 ? Celui de @bortzmeyer sur le nouveau résolveur #DNS public DNS-sur-TLS, qui utilise la racine Yeti ►https://www.afnic.fr/fr/ressources/blog/resolveur-public-de-dns-sur-tls-yeti.html #Afnic

Our most popular blog article in 2017 was written by @bortzmeyer! Read his explanations on the new DNS-over-TLS public #DNS resolver that uses the Yeti root ►https://www.afnic.fr/en/resources/blog/yeti-dns-over-tls-public-resolver.html #Afnic

#Sci-Hub domains inactive following court order • The Register
▻https://www.theregister.co.uk/2017/11/23/scihubs_become_inactive_following_court_order

A spokesperson for Verisign, which controls .cc domains, told us: “Verisign responds to lawful court orders subject to our technical capabilities. When the Company is presented with such lawful orders impacting domain names within our registries, we respond within our technical capabilities. Beyond that, we have no comment.”

The domain sci-hub.bz, whose registrar is listed as todaynic.com, does not currently have the status of “serverHold”. On the social networking site vk, Sci-Hub wrote that users could use the DNS project servers 80.82.77.83 and 80.82.77.84.

#science #libre

#Wikileaks was attacked on 30 august, the #domain_name being hijacked, sending visitors to a Web site controlled by the attacker.

The Guardian (not too bad): ▻https://www.theguardian.com/technology/2017/aug/31/wikileaks-hacked-ourmine-group-julian-assange-dns-attack

My technical analysis: ▻http://www.bortzmeyer.org/observations-wikileaks.html

No official publication by Wikileaks, except a few tweets: ▻https://twitter.com/JulianAssange/status/903217338593497088

#DNS #network_security #pharming