Re: DNS over https

George Jones <[email protected]> Thu, 12 Sep 2019 17:06:31 -0400
Newsgroups gmane.network.argus
Message-ID <CALv3B7b6iDxQfawFgm6kdBYKU7FXOV=4jKAn4N6MrP5JRaFEWg@mail.gmail.com>
--000000000000b2ee2605926183e3
Content-Type: text/plain; charset="UTF-8"

Easiest way would be to look for traffic to cloudflare server (1.1.1.1) or
other DoH servers.

https://developers.cloudflare.com/1.1.1.1/dns-over-https/cloudflared-proxy/

Configure Firefox to use it and break out Wireshark (or Argus) to get more
clues.

---george jones

On Thu, Sep 12, 2019, 4:58 PM Monah Baki <[email protected]> wrote:

> Hi all,
>
> With all the hype with DNS over HTTPS, is there a way for argus to detect
> this? I don't mind if its encrypted just wanted to see if it will detect
> some form of communication, or how can I tell if there is any machine using
> dns over https.
>
>
> Thanks
> Monah
>

--000000000000b2ee2605926183e3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Easiest way would be to look for traffic to cloudflare se=
rver (1.1.1.1) or other DoH servers.<div dir=3D"auto"><div dir=3D"auto"><br=
></div><div dir=3D"auto"><a href=3D"https://developers.cloudflare.com/1.1.1=
.1/dns-over-https/cloudflared-proxy/">https://developers.cloudflare.com/1.1=
.1.1/dns-over-https/cloudflared-proxy/</a><br></div><div dir=3D"auto"><br><=
/div><div dir=3D"auto">Configure Firefox to use it and break out Wireshark =
(or Argus) to get more clues.</div><div dir=3D"auto"><br></div><div dir=3D"=
auto">---george jones</div></div></div><br><div class=3D"gmail_quote"><div =
dir=3D"ltr" class=3D"gmail_attr">On Thu, Sep 12, 2019, 4:58 PM Monah Baki &=
lt;<a href=3D"mailto:[email protected]" target=3D"_blank" rel=3D"noreferr=
er">[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmail_=
quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1=
ex"><div dir=3D"ltr">Hi all,<br><div><br></div><div>With all the hype with =
DNS over HTTPS, is there a way for argus to detect this? I don&#39;t mind i=
f its encrypted just wanted to see if it will detect some form of communica=
tion, or how can I tell if there is any machine=C2=A0using dns over https.<=
/div><div><br></div><div><br></div><div>Thanks</div><div>Monah</div></div>
</blockquote></div>

--000000000000b2ee2605926183e3--