AdguardTeam / AdguardTeam/AdGuardHome

Split history / split identity

Aperta
#1,283 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
enhancement feature request P3: Medium
Lingua principale
TypeScript
Stelle
36.9k
Fork
2.5k
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

Imagine you've set 2-3 different upstream DNS-servers, and you resolve some domains by one of them, others by the second and the rest by the third.

If some of them (or all of them) are spying and collecting your browsing history, creating your behavioral identity, they won't get your true history and identity. Only a part of it.

But how to decide which domain to resolve by which upstream?
I propose hashing domains, getting first byte mod number of upstreams.
And for some randomization for different clients - adding some salt for hash.

Then the formula of chosen upstream index becomes:
`index = hash(salt + domain)[0] mod upstreams.length`

1. The salt variable can be a simple integer, it doesn't need to be big.
2. Salt can change after some period of inactivity. It will imitate of client change. Like dynamic IP address.

Hash function does need to be cryptographically strong. It can be even some CRC32 or similar function. And if we use simple integer function like CRC32 we can mod it without getting first byte. Like this: `index = crc32(salt + domain) mod upstreams.length`.

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.