0e2d78d21b
Warn is DoH is requested but HTTP/2 is not supported
2019-05-12 09:55:13 +02:00
50a2018633
Keep holding the read lock in the cloaking load-balancing code
...
Maybe
fixes #807
2019-05-02 23:53:47 +02:00
02d07df43f
Cloaking example: yandex.ru to familysearch.yandex.ru
2019-04-29 14:35:24 +02:00
a8045e0a7a
Bump
2019-04-28 23:26:33 +02:00
71858bfc98
Update deps
2019-04-28 23:19:52 +02:00
587a09b306
Add freebsd/armv7 target
...
Fixes #792
Fixes #682
2019-04-15 08:48:08 +02:00
5c9edfccfe
Ignore onion servers if Tor is not being used
2019-04-14 14:19:12 +02:00
4940b34c76
Improve caching of server addresses, especially when using proxies
2019-04-14 13:46:07 +02:00
d143ae5279
Set the main protocol to TCP when using a SOCKS proxy
2019-04-14 13:41:43 +02:00
4b001e3b8e
Skip DNS resolution on Tor services
2019-04-14 11:18:14 +02:00
0a535e28ab
Stop printing "crypto v1/v2", as both are equally secure
2019-04-08 08:30:43 +02:00
25ac94e7b2
Revert "Add Stretch-Hash-and-Truncate option for extreme DNS privacy"
...
This reverts commit 2d1dd7eaab
2019-04-02 01:57:48 +02:00
2d1dd7eaab
Add Stretch-Hash-and-Truncate option for extreme DNS privacy
...
This works over DNSCrypt and DoH, but requires a specifically configured
server.
Instead of sending the actual DNS queries, the SH-T system works as follows:
Step 1: the client query is evaluated through Argon2id, a military-grade,
memory-hard, CPU-hard stretching function. This makes it very expensive
for an attacker to find the original query, even using GPUs and ASICs.
For post-quantum resistance, we use it to generate a 1024-bit key.
Step 2: in case the Argon2id algorithm has a vulnerability, or, since this
is a popular function used for hashing passwords and for cryptocurrencices,
and people may have built rainbow tables already, we use a hash function over
the result of the previous function. This immediately defeats rainbow tables.
Step 3: the output of the hash function is truncated to 64-bit.
Due to a property of this operation known as collision-misresistance, and even
if the previous steps fail due to a nation-state actor, it is impossible for a
server operator to prove what exact query was originally sent by a client.
This feature is experimental.
2019-04-01 09:36:56 +02:00
f744110d38
Bump
2019-04-01 08:24:58 +02:00
674bd30d45
Update dependencies
2019-04-01 08:21:17 +02:00
8b608403b1
Do not cache truncated messages
...
Fixes #774
2019-04-01 08:19:26 +02:00
a389067d29
Replace “find” with “findstr” in batches ( #764 )
...
* Update service-install.bat
* Update service-restart.bat
* Update service-uninstall.bat
2019-03-21 14:23:01 +01:00
85abbeac61
Bump
2019-03-14 20:21:26 +01:00
8076e206e0
Revert "Install the windows service as "NT AUTHORITY\NetworkService""
...
This reverts commit 17db0a658f
2019-03-14 20:10:53 +01:00
707098a922
Bump
2019-03-14 02:18:20 +01:00
c16016b112
Update deps
2019-03-14 02:17:58 +01:00
47853e73d0
Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
...
* 'master' of github.com:jedisct1/dnscrypt-proxy:
Re-add a big download link in addition to the badge
Fix Matrix badge and replace the latest release notice with a badge (#749 )
Add Matrix Chat Badge (#747 )
2019-03-14 02:00:19 +01:00
26cc68b748
Make startup *way* faster, especially when using DoH
2019-03-14 01:59:57 +01:00
7688059cfb
Re-add a big download link in addition to the badge
...
Pretty sure many people won't think about clicking on the badge.
2019-03-06 18:14:16 +01:00
e9b4df38be
Fix Matrix badge and replace the latest release notice with a badge ( #749 )
...
* The shiels.io page seems to generate wrong links (sorry for that!) I reported it to the shields.io project to fix this ASAP.
* Replaced the "latest release" notice information with a badge which automatically fetches the latest "Release" which means no one has to manually edit the readme each time a new release was introduced.
2019-03-06 18:10:01 +01:00
935c1dd9f8
Add Matrix Chat Badge ( #747 )
...
* Add Matrix.org Chat badge
* Place the Travis build status badge together with the matrix chat badge under the main logo
2019-03-06 02:15:20 +01:00
b624f8ef58
Accept sdns: scheme without a namespace
2019-03-03 18:20:39 +01:00
864476b835
Update Quidsup URLs
...
Fixes #743
2019-03-03 17:43:25 +01:00
d1a337f64b
logging enhancement CLOAK ( #742 )
2019-03-02 18:01:21 +01:00
c3e29c2a60
Switch to Go modules
2019-03-01 18:44:37 +01:00
0a65a658b6
Back to stable Go
2019-02-26 08:51:25 +01:00
8899389d8b
Store IP addresses, not references
2019-02-25 18:25:35 +01:00
734483226b
Support multiple IPs for a single cloaking rule
...
Fixes #617
2019-02-23 15:51:30 +01:00
5dc66adaa9
Move disabled_server_names down
2019-02-23 14:55:23 +01:00
c10fbb2aa7
+ disabled_server_names
...
Fixes #735
2019-02-23 14:54:22 +01:00
d0ca608cb7
Update deps
2019-02-23 13:44:05 +01:00
2aa0b7d6a7
Add `refused_code_in_responses` to the example.
...
Fixes #738
2019-02-23 12:34:59 +01:00
a726a40dc5
Add refused_code_in_responses
...
Fixes #737
2019-02-23 00:58:25 +01:00
cb022ece82
Set GODEBUG to enable TLS 1.3
...
Fixes #731
2019-02-17 23:56:02 +01:00
5ee3512460
generate-domains-blacklist.py: properly handle time restrictions
...
Fixes #710
2019-02-15 00:03:02 +01:00
c142923b46
Add a dedicated function for trusted lists
2019-02-14 23:27:19 +01:00
8377d491f6
Whitelist revinate.com
2019-01-29 20:03:04 +01:00
1871690832
polyfill.io is not a tracker
2019-01-29 19:14:30 +01:00
c8156829c5
Minor domains-blacklist fixes ( #697 )
...
* Removed unnecessary characters from hosts-file URLs
* Added HTTPS to various URLs that were missing it
2019-01-16 10:17:44 +01:00
1877ca83de
Merge branch 'master' of github.com:jedisct1/dnscrypt-proxy
...
* 'master' of github.com:jedisct1/dnscrypt-proxy:
Install the windows service as "NT AUTHORITY\NetworkService"
2019-01-10 22:45:38 +01:00
17db0a658f
Install the windows service as "NT AUTHORITY\NetworkService"
...
Untested
Maybe
Fixes #686
2019-01-10 22:44:58 +01:00
7ff2501201
Install the windows service as "NT AUTHORITY\NetworkService"
...
Untested
Maybe
Fixes #686
2019-01-10 22:43:43 +01:00
b886585486
Remove unused var
2019-01-02 22:59:16 +01:00
30da550307
domains-blacklist.conf: change one URL to https ( #674 )
2018-12-28 15:42:31 +01:00
3ccc989be5
Improve error logging, not only on Linux
2018-12-23 18:11:55 +01:00
Frank Denis
Aleksandr Sergeev
CHEF-KOCH
corsmith
losuler
joonas.fi