AdguardTeam / AdguardTeam/AdGuardHome
Split history / split identity
- Lingua principale
- TypeScript
- Stelle
- 36.9k
- Fork
- 2.5k
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Descrizione
Imagine you've set 2-3 different upstream DNS-servers, and you resolve some domains by one of them, others by the second and the rest by the third.
If some of them (or all of them) are spying and collecting your browsing history, creating your behavioral identity, they won't get your true history and identity. Only a part of it.
But how to decide which domain to resolve by which upstream?
I propose hashing domains, getting first byte mod number of upstreams.
And for some randomization for different clients - adding some salt for hash.
Then the formula of chosen upstream index becomes:
`index = hash(salt + domain)[0] mod upstreams.length`
1. The salt variable can be a simple integer, it doesn't need to be big.
2. Salt can change after some period of inactivity. It will imitate of client change. Like dynamic IP address.
Hash function does need to be cryptographically strong. It can be even some CRC32 or similar function. And if we use simple integer function like CRC32 we can mod it without getting first byte. Like this: `index = crc32(salt + domain) mod upstreams.length`.
Guida per i contributori
Apri la guida per i contributori
Valutazione
Questa issue non è ancora stata valutata.