[tor-bugs] #34004 [Core Tor/Tor]: Support for full DNS and DNSSEC resolution

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Apr 25 21:44:51 UTC 2020


#34004: Support for full DNS and DNSSEC resolution
--------------------------+------------------------
 Reporter:  chrisss404    |          Owner:  (none)
     Type:  enhancement   |         Status:  new
 Priority:  Medium        |      Milestone:
Component:  Core Tor/Tor  |        Version:
 Severity:  Major         |     Resolution:
 Keywords:  DNS, DNSSEC   |  Actual Points:
Parent ID:                |         Points:
 Reviewer:                |        Sponsor:
--------------------------+------------------------

Comment (by cypherpunks):

 If the DNS Resolver is on a onion service, but we want it to not correlate
 different name requests together. Do we need to setup a new circuit to it
 for each domain resolution?

 Because of:

 {{{
 HiddenServiceExportCircuitID protocol
 The onion service will use the given protocol to expose the global circuit
 identifier of each inbound client circuit
 }}}
 The Onion Resolver could create a profile of all domains visited per
 {{{
 circuit identifier
 }}}
 If no stream isolation is used.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/34004#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list