[tor-bugs] #28955 [Applications/Orbot]: should Orbot include DNS forwarder backed by DNS-over-TLS

Thu Dec 27 19:05:03 UTC 2018

#28955: should Orbot include DNS forwarder backed by DNS-over-TLS
-----------------------+------------------------------------
 Reporter:  eighthave  |          Owner:  n8fr8
     Type:  defect     |         Status:  new
 Priority:  Medium     |      Component:  Applications/Orbot
  Version:             |       Severity:  Normal
 Keywords:             |  Actual Points:
Parent ID:             |         Points:
 Reviewer:             |        Sponsor:
-----------------------+------------------------------------
 DNS-over-TLS (DoT) is now available on many nameservers, and at least
 three, large public ones 9.9.9.9, 8.8.8.8, and 1.1.1.1.  DoT plugs a
 significant metadata leak: the domain in plain text.  Starting in Android
 9, Android itself supports DoT.  Should Orbot itself include a DNS server
 that uses only DoT?

 If yes, then here is some related example code:
 https://github.com/gryphius/androdns

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28955>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online