Safety of DNS Resolver that makes requests over Tor?
How safe from snooping would a DNS Resolver run by yourself be if it makes requests over Tor for the information (requests by your network would be directly to the server, say it's on the LAN).
Posted Feb 27, 2013, 4:19 AM UTC
64
In theory, a malicious exit node on Tor could:
However, sending your DNS requests over LAN would:
I guess it depends who you trust more. For crazy sensitive DNS lookups, you could always change your Tor exit node several times, doing a DNS lookup on each circuit to verify accuracy. Once you've got that, you could keep the IP in a local resolver. I think it would be reasonable to assume that an attacker cannot later obtain the true IP of a service you are trying to access, it's more likely that they will attack with a static route to a preconfigured host responding there.
"Safety" is relative. What are you after? Privacy, or security?
Anyone know if google tracks DNS requests?
[deleted]
Good stuff, thanks!
Privacy. Can some of the security issues be mitigated with DNSSEC?