Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-10 Thread Neal Becker
A nice article on dns security: https://arstechnica.com/information-technology/2018/04/how-to-keep-your-isps-nose-out-of-your-browser-history-with-encrypted-dns/ ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to deve

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-10 Thread Martin Sehnoutka
On 04/09/2018 10:54 AM, Matthias Runge wrote: > On Mon, Apr 09, 2018 at 10:01:21AM +0200, Martin Sehnoutka wrote: >>> Restarted Firefox and then also the whole laptop. Doesn't work. But >>> then I'm in Fedora 28 so it may be a bug. Anyway, getting this to work >>> for me isn't really the point of

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-09 Thread Chuck Anderson
On Mon, Apr 09, 2018 at 10:54:10AM +0200, Matthias Runge wrote: > On Mon, Apr 09, 2018 at 10:01:21AM +0200, Martin Sehnoutka wrote: > > > Restarted Firefox and then also the whole laptop. Doesn't work. But > > > then I'm in Fedora 28 so it may be a bug. Anyway, getting this to work > > > for me isn

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-09 Thread Tom Hughes
On 09/04/18 09:54, Matthias Runge wrote: On Mon, Apr 09, 2018 at 10:01:21AM +0200, Martin Sehnoutka wrote: Restarted Firefox and then also the whole laptop. Doesn't work. But then I'm in Fedora 28 so it may be a bug. Anyway, getting this to work for me isn't really the point of the thread. I'm w

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-09 Thread Matthias Runge
On Mon, Apr 09, 2018 at 10:01:21AM +0200, Martin Sehnoutka wrote: > > Restarted Firefox and then also the whole laptop. Doesn't work. But > > then I'm in Fedora 28 so it may be a bug. Anyway, getting this to work > > for me isn't really the point of the thread. I'm wondering about > > something tha

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-09 Thread Martin Sehnoutka
On 04/09/2018 02:07 AM, Chris Murphy wrote: > On Sun, Apr 8, 2018 at 4:59 PM, Dominik 'Rathann' Mierzejewski > wrote: >> On Monday, 09 April 2018 at 00:52, Chris Murphy wrote: >> [...] >>> [chris@f28h ~]$ dnssec-trigger-control status >>> at 2018-04-08 16:46:45 >>> cache 75.75.76.76: OK >>> cach

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Chuck Anderson
On Sun, Apr 08, 2018 at 04:41:34PM -0600, Chris Murphy wrote: > On Sun, Apr 8, 2018 at 3:52 PM, wrote: > > > > There was also > > https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver which was > > proposed for F22, but deferred twice and eventually dropped. > > I followed the multis

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Chris Murphy
On Sun, Apr 8, 2018 at 4:59 PM, Dominik 'Rathann' Mierzejewski wrote: > On Monday, 09 April 2018 at 00:52, Chris Murphy wrote: > [...] >> [chris@f28h ~]$ dnssec-trigger-control status >> at 2018-04-08 16:46:45 >> cache 75.75.76.76: OK >> cache 75.75.75.75: OK >> cache 2001:558:feed::1: OK >> cache

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Dominik 'Rathann' Mierzejewski
On Monday, 09 April 2018 at 00:52, Chris Murphy wrote: [...] > [chris@f28h ~]$ dnssec-trigger-control status > at 2018-04-08 16:46:45 > cache 75.75.76.76: OK > cache 75.75.75.75: OK > cache 2001:558:feed::1: OK > cache 2001:558:feed::2: OK > state: cache secure This looks good, similar to mine. >

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Chris Murphy
On Sun, Apr 8, 2018 at 4:38 PM, Dominik 'Rathann' Mierzejewski wrote: > On Monday, 09 April 2018 at 00:33, Chris Murphy wrote: >> On Sun, Apr 8, 2018 at 4:25 PM, Chris Murphy wrote: >> > On Sun, Apr 8, 2018 at 4:07 PM, Dominik 'Rathann' Mierzejewski >> > wrote: >> >> On Sunday, 08 April 2018 at

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Chris Murphy
On Sun, Apr 8, 2018 at 3:52 PM, wrote: > > There was also > https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver which was > proposed for F22, but deferred twice and eventually dropped. I followed the multistep instructions there, and this also breaks everything. Apr 08 16:38:21 f2

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Dominik 'Rathann' Mierzejewski
On Monday, 09 April 2018 at 00:33, Chris Murphy wrote: > On Sun, Apr 8, 2018 at 4:25 PM, Chris Murphy wrote: > > On Sun, Apr 8, 2018 at 4:07 PM, Dominik 'Rathann' Mierzejewski > > wrote: > >> On Sunday, 08 April 2018 at 23:52, mcatanz...@gnome.org wrote: > >>> > >>> There was also > >>> https://f

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Chris Murphy
On Sun, Apr 8, 2018 at 4:25 PM, Chris Murphy wrote: > On Sun, Apr 8, 2018 at 4:07 PM, Dominik 'Rathann' Mierzejewski > wrote: >> On Sunday, 08 April 2018 at 23:52, mcatanz...@gnome.org wrote: >>> >>> There was also >>> https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver which was >>

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Chris Murphy
On Sun, Apr 8, 2018 at 4:07 PM, Dominik 'Rathann' Mierzejewski wrote: > On Sunday, 08 April 2018 at 23:52, mcatanz...@gnome.org wrote: >> >> There was also >> https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver which was >> proposed for F22, but deferred twice and eventually dropped.

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Dominik 'Rathann' Mierzejewski
On Sunday, 08 April 2018 at 23:52, mcatanz...@gnome.org wrote: > > There was also > https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver which was > proposed for F22, but deferred twice and eventually dropped. Guys, I've had this enabled since forever with unbound as the local resolv

Re: DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread mcatanzaro
There was also https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver which was proposed for F22, but deferred twice and eventually dropped. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...

DNSSEC, DoH, dnscrypt-proxy 1 vs 2

2018-04-08 Thread Chris Murphy
Hi, I've been doing some digging around to figure out how to enhance DNS security privacy, and it's really a rabbit hole. Fedora 28, not any different near as I can tell from Windows 10 or macOS 10.13 is simply deferring to DHCP assigned DNS which for my POS ISP is hardwired to their DNS servers a