Stories
Slash Boxes
Comments

SoylentNews is people

Android to Add 'DNS Over TLS' to Keep ISPs From Spying on You

posted by Fnord666 on Thursday October 26 2017, @04:28AM   Printer-friendly
from the DNS=Do-Not-Share dept.

MrPlow writes:

Submitted via IRC for SoyGuest31999

Android, the world's most popular mobile operating system, will soon enable a security protocol that helps keep internet service providers (ISPs) from spying on users. "DNS over TLS" adds a level of encryption to your DNS requests that are (mostly) inaccessible by your ISP.

[...] Using current methods, the requests happen through UDP or TCP protocols, not the more secure TLS. When Android makes the switch, you'll get the same results, only now with HTTPS-level security. That is to say, snoops now know when you've connected to a website, but not which one. Pornhub, for example, is the same as Gmail. Or, it is for the person spying on you. You'll still have to live with the fact you're watching Pokemon Go porn (safe-ish for work).

Source: https://thenextweb.com/mobile/2017/10/23/android-to-add-dns-over-tls-to-keep-isps-from-spying-on-you/

Original Submission

 
This discussion has been archived. No new comments can be posted.
Android to Add 'DNS Over TLS' to Keep ISPs From Spying on You | Log In/Create an Account | Top | 38 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 1, Funny) by Anonymous Coward on Thursday October 26 2017, @06:34AM (1 child)

    by Anonymous Coward on Thursday October 26 2017, @06:34AM (#587727)

    Level 3 and Google impose onerous rate limits on their public DNS.

    In contrast, Sprint demonstrates dedication to providing consistent query execution time.

    The Cache Only servers can be used by customer host machines to perform general DNS. You can put the IP addresses in the client machines on your network if you do not have your own Internet nameserver. These servers are replicated around the world and your connection will be taken to the closest server.

    CACHE-ONLY SERVERS - IPv4
    NS1.SPRINTLINK.NET 204.117.214.10 USA, Europe, Asia
    NS2.SPRINTLINK.NET 199.2.252.10 USA, Europe, Asia

    CACHE-ONLY SERVERS - IPv6
    NS1.SPRINTLINK.NET 2600::1 USA, Europe, Asia
    NS2.SPRINTLINK.NET 2600::2 USA, Europe, Asia

    Starting Score:    0  points
    Moderation   +1  
       Funny=1, Total=1
    Extra 'Funny' Modifier   0  
    Total Score:   1  

  • (Score: 0) by Anonymous Coward on Thursday October 26 2017, @04:46PM

    by Anonymous Coward on Thursday October 26 2017, @04:46PM (#587874)

    I don't get how this is "Funny" at all.

    From where I sit, 8.8.8.8 is throttled to about 25 answers per second.

    About the only advantage 8.8.8.8 has is a memorable IP address which is only useful to lookup the IP address of a better DNS server.

    In fact I would say 4.2.2.4 is pretty much the same deal except 4.2.2.4 is still popular among old people.

    NS3.SPRINTLINK.NET is also a thing.