Android getting “DNS over TLS” support to stop ISPs from knowing what websites you visit

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

For Existing Member Sign In

DNS 参考资料

› List of DNS Record Types

› dig 使用说明

› djbdns

› DNS Parameters

› dnslib for Python

This topic created in 3103 days ago, the information mentioned may be changed or developed.

It appears that “ DNS over TLS ” support is being added to Android, according to several commits added to the Android Open Source Project (AOSP). The addition in the Android repository shows that a new setting will be added under Developer Options allowing users to turn on or off DNS over TLS. Presumably, if such an option is being added to Developer Options, then that means it is in testing and may arrive in a future version of Android such as version 8.1.

13 replies • 2017-11-04 18:05:57 +08:00

EmmaSwan

Oct 27, 2017

https://www.engadget.com/2017/10/23/google-android-dns-tls/

Google's efforts to push websites to use encrypted connections is paying off. Just days ago, the search giant revealed that HTTPS use on its own products is at 89 percent overall, up from just 50 percent at the beginning of 2014. (Not sure what we're blabbering on about? Just peep the green lock icon and the word "secure" in the address bar). Now, Google is adding an extra layer of security to Android. XDA Developers has spotted that DNS over TLS (Transport Layer Security) support is heading to the mobile OS, according to the Android Open Source Project -- meaning DNS queries will be encrypted to the same level as HTTPS.

The Domain Name System (DNS) -- often referred to as the internet's phone book -- translates domain names (like engadget.com) into machine-readable IP addresses. The process is hidden from users, but essentially applies to every website you visit. While TLS hides your DNS requests, it won't afford you full privacy (as your Internet Service Provider can still see the IP address you're communicating with). For that, you'll still need a VPN app. But, this is also about DNS robustness. TLS would make it harder for hackers to hijack a DNS to spy on users or, worse still, to direct them to fake sites and phishing pages.

Updates to the Android repository suggest you will be able to disable DNS over TLS, and that it may arrive on a future update.