Re: [opennic-discuss] DNS+TLS

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--mfrSgV7EX5QWdimf8UHRBrv9gO0QE5vOL
Content-Type: multipart/mixed; boundary="3ZDvgfmcjmMWir3lvXp1bVtVqPi1mIYW8";
 protected-headers="v1"
From: Corl3ss <[email protected]>
To: [email protected]
Message-ID: <[email protected]>
Subject: Re: [opennic-discuss] DNS+TLS
References: <[email protected]> <[email protected]>
In-Reply-To: <[email protected]>

--3ZDvgfmcjmMWir3lvXp1bVtVqPi1mIYW8
Content-Type: text/plain; charset=windows-1252
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Hi all,


Jacob Bachmeyer:
> Daniel Quintiliani wrote:
>> Isn't that what's built into Tor Browser?
>> =A0=20
> No, Tor does DNS resolution on its own, by asking the exit node to
> perform name lookups.

Yes, it is true for the default configuration of the Tor browser, but
tor itself can be used many other ways (and without being a DNS proxy)

> This is the reason that OpenNIC cannot be (easily)
> used with Tor: the exit node's DNS configuration determines what names
> are resolvable and the Tor network currently is sticking to the ICANN
> root simply to avoid unstable resolutions if different exit nodes use
> different DNS roots.
>=20
> Put another way, Tor does not use your DNS configuration at all.
>=20

The Tor browser can be used with any DNS configuration by removing
"Proxy DNS when using SOCKS V5" option in the network settings.


> -- Jacob
>> --=20
>>

--
Corl3ss
2042 5D39 E7C1 E657 025E A28F 937D 8A90 FCB0 E24A


--3ZDvgfmcjmMWir3lvXp1bVtVqPi1mIYW8--

--mfrSgV7EX5QWdimf8UHRBrv9gO0QE5vOL
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEIEJdOefB5lcCXqKPk32KkPyw4koFAlzTP58ACgkQk32KkPyw
4krhOQf6Av7MK+xBn5vAmMEkKExH5DY/TFrh609q7aMiluiEZR6xJn3X29uoeGzT
Ka+s3stg+kJtdH7EN98xyuw/s9sN1OEOIGmCgaaQZ7nJQoiDJQWi6N1zZoLriEDv
0XqbKYUVuOnBEDKMfyNGpQ8ZeFCSZDXVkhTR+inuBg5n+5237EFgqeMfKwPt5Sqy
SxAtxElFBUMJ9iILNPOTi78/5VqYlODNmrFMR8pi1I7fuCYhBY1G58YWDFalTVXZ
Zxs2sp9GML4LLsnT9UQgUVbHeqRYU3jVLYculu//596w29/JPI7Forbq2nhs/lUD
Kqudm24BrTSaN6ZfhrHPsRIejiygIQ==
=7EDn
-----END PGP SIGNATURE-----

--mfrSgV7EX5QWdimf8UHRBrv9gO0QE5vOL--