DNSCrypt / DNSCrypt/SimpleDnsCrypt
General questions and resolver/leak testing issues
- Dominant language
- C#
- Stars
- 2.5k
- Forks
- 249
- PR merge metrics
- No merged PRs in 30d
Description
1. If DNS over HTTP(S) (DOH) is enabled in the browser, does that override SimpleDNSCrypt (SDC)?
1. How are resolvers selected in automatic mode? It says it selects the fastest ones, but how does it do this? I can't imagine it checks each time, because that would be msasive overhead. Does it check each one's response time every hour/day/whatever? Also, does it shuffle through them at all, e.g. randomly using the fastest 3/5/etc, to increase privacy by preventing one from getting all requests?
1. Does it really protect privacy against ISPs? It keeps them from seeing the DNS requests, but won't they still see where you're going by the communication between you and the site after the connection is made? Or is that all concealed by HTTPS, only allowing them to see what server the info is coming from, which may or may not be the server for the site you're on?
1. While searching through previous issues just now, I learned the interface doesn't need to be running in order to be doing its job. I keep occasionally noticing that it's not running and launch it, thinking I haven't been protected for who knows how long. Perhaps the GUI should state on the main page that it's for configuration only and doesn't need to be kept running, especially since there have been multiple people asking if it's necessary to have it (the GUI) running. That said, when I noticed today that it wasn't running and launched it, I saw the service wasn't running, so not sure why that was, especially since it's set in services to start automatically. I had also previously changed the recovery options in services to restart it on each failure, but those had also reverted back to the default of doing nothing. Not sure if that's a Windows issue or something related to SDC, but figured I'd mention it.
1. I tried using dnsleaktest.com to test SDC, but I got seemingly strange results. I ran it a couple times and it listed two DNS resolvers, but AFAICT one of them isn't in the list in SDC. It also didn't seem to matter whether I had auto mode enabled or disabled with just Cloudflare selected. Then I disabled the service and ran it again, at which point it ran much quicker (pretty much instantly) and didn't list any resolvers. I enabled it and had the same results, then tried refreshing the page with a cache clear (shift+refresh) and then it listed four resolvers, with 1-2 of them not being listed in SDC AFAICT (it's difficult to tell because they're not listed in any order and they keep shuffling around). Also, nothing is showing up in the query log, it just says "waiting for DNS queries." Not sure if it matters, but I don't have any servers selected, figuring I'll just leave them all as options and let SDC choose.
1. With servers limited as much as possible (all options selected), I see jp.tiar.app and jp.tiar.app-doh. I can only assume the first does NOT have DOH, otherwise why would the latter exist with its name, and the first doesn't say anything about it in the description, or what's visible of it, whereas the latter does. So it seems SDC isn't properly narrowing them down.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.