Hacker News new | ask | show | jobs
by rahkiin 1405 days ago
It is interesting how this would apply for custom browser engines in the future of iOS.
1 comments
CharlesW 1405 days ago
This class of security problem is also a great reason to never allow custom browser engines.
link
smoldesu 1405 days ago
...why wouldn't it be possible? iOS has application sandboxing, just drop all DNS requests for the webview that's outside a developer-defined namespace. I'm sure someone at Apple could find a better way to implement it, but we shouldn't accept lame excuses like this. Apple has 200 billion dollars in cash, this is not an advanced problem space.
link
happyopossum 1405 days ago
Then the app can use DOH, or tunnel DNS requests over something else - a non-safari browser engine wouldn’t have to use system DNS by any means…
link
jamespo 1405 days ago
I thought non-safari browser engines were banned
link
als0 1405 days ago
They are. This is a hypothetical discussion.
link
postalrat 1405 days ago
How about services like luna, stadia, etc which can render any sort of interactive content (typically games)?
link