Hacker News new | ask | show | jobs
by Reason077 640 days ago
> "To protect (DNS lookups) from prying eyes, Little Snitch 6 offers a new feature: DNS encryption."

Browsers such as Firefox have offered this directly for a while. Of course, that only covers DNS lookups made from the web browser, but it doesn't rely on OS-level hooks that (at least in Apple's case) can break.
1 comments
Mainsail 640 days ago
What am I missing here? Reading the article, it appears that Firefox is the browser that seems to be bypassing.
link
Reason077 640 days ago
They're using Little Snitch as an OS-level DNS proxy, which should intercept all DNS requests from any app and encrypt them. But, depending on what API the app uses for its DNS lookups, some DNS requests do not go via the proxy. Presumably Firefox, in its default configuration with DNS encryption set to OFF ("Use your default DNS resolver"), uses one the affected APIs.
link
Mainsail 640 days ago
Ah, that makes sense. Ty.
link