[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound

To: <tor-relays@xxxxxxxxxxxxxxxxxxxx>
Subject: Re: [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound
From: Job Pfeiffer <job.pfeiffer@xxxxxxxxx>
Date: Sun, 20 Dec 2015 04:06:59 +0300
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sat, 19 Dec 2015 20:07:33 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=user-agent:date:subject:from:to:message-id:thread-topic:references :in-reply-to:mime-version:content-type:content-transfer-encoding; bh=mu+Pbs+lKxt9NMT27C6vM4uw6ZotqsuKRLyJZcwbzGw=; b=kefPk0D8QYDbCEYJ300JbGSZkoqkfaA3D/p9CUX/K4hstKJPIKmYH9rgx0jI2bwCkM c0IcZxzaOJFISYH79zhJb9GDWFZDewd41azc/gAl/CdDlytHQ+rW9csEj7ytiy/MkVIh K/puo5RN62Fh+42Orl6biOxNxGvtFM6CO3S77vdWSidDZVLjTnE7oHJC8tvNxf48h/AF XkuI1b+GrNHzaPKaWpmuymlBfzDWbYQFdBO91E2NSyEAc2TLL+gXLnW1WQJh2iFTgmRu ECzrT610uM1J9a/LabZuv4Li2FMZVgy6aqp1x0zcl5p5XfC9+wtACh3PSh5n16f4jDlu tpIg==
In-reply-to: <5675FC7B.2020505@xxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <5675CACE.20800@xxxxxxxxxx> <5675FC7B.2020505@xxxxxxxxxx>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>
Thread-topic: [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound
User-agent: Microsoft-MacOutlook/0.0.0.151105

>Using DNSCrypt will encrypt
>DNS queries and responses from your Tor relay to the DNSCrypt resolver.
>From that point on you do not know and cannot control how the resolver
>is going to do with DNS queries. And you don't know if that resolver
>uses Google or is compromised or is malicious etc.

Why not route all DNS queries through Tor for "Plausible Deniability". The nuts and bolts are already there in the client. 

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Follow-Ups:
- Re: [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound
  - From: Jesse V

References:
- [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound
  - From: Jesse V
- Re: [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound
  - From: Alexandros

Prev by Author: Re: [tor-relays] tor hidden services & SSL EV certificate
Next by Author: Re: [tor-relays] Unbelieveable
Previous by thread: Re: [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound
Next by thread: Re: [tor-relays] Running an exit? Please secure your DNS with DNSCrypt+Unbound
Index(es):
- Author
- Thread