DNS
Resolución de nombres y cifrado
menos de un minuto
https://wiki.archlinux.org/index.php/Domain_name_resolution
DNS
- Utilidades
- El paquete bind proporciona
dig
,host
,nslookup
- ldns proporciona
drill
- El paquete bind proporciona
ECH
- https://blog.mozilla.org/security/2021/01/07/encrypted-client-hello-the-future-of-esni-in-firefox/
- https://img1.wsimg.com/blobby/go/b5eb0792-7081-48f3-b13f-1f464bf1f8a1/Notes%20From%20A%20Roundtable%20Discussion%20About%20-0001.pdf
Config
- Comprobar resolver :
journalctl --no-pager -b -u dnscrypt-proxy.service
- Comprobar resolver :
network.trr.mode
: 3network.trr.uri
: https://127.0.0.1:3000/dns-querynetwork.trr.custom_uri
: https://127.0.0.1:3000/dns-query- ECH
network.dns.echconfig.enabled
: truenetwork.dns.use_https_rr_as_altsvc
: true
- ESNI (Obsoleto)
network.security.esni.enabled
: true
- https://bugzilla.mozilla.org/show_bug.cgi?id=1667801
Comprobaciones
- https://www.cloudflare.com/es-es/ssl/encrypted-sni/ - No funciona con ECH
- https://clienttest.ssllabs.com:8443/ssltest/viewMyClient.html
- https://esnjcheck.com
- https://servo.org/cdn-cgi/trace
Comentarios
¿Fue útil esta página?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.