Support DoT (DNS-over-TLS) in the app?

[PeterDaveHello]

Currently, there're only three types of DNS supported in the app(Screenshot took from RethinkApp v053g):

• DNS over HTTPS
• DNSCrypt
• DNS Proxy

screenshot

rdns dns config:

Just wondering if there's any plan to support DNS over TLS in the App? Thanks!

[ignoramous]

Hm, we can, but it isn't priority over implementing ODoH and DNS over Tor; unless there are use-cases specifically only DoT can address. Thoughts?

[PeterDaveHello]

I'm no expert of DoT or DoH, didn't know any something only DoT can address yet, DoH might be even harder to be blocked, which is good.

Just one small weakness I think that DoH has but DoT might not: the HTTP user-agent header. I saw that the RethinkDNS app will send the user agent string: Intra, though it doesn't contain any personal information, it'll be part of fingerprinting and user profiling, would be great if you'll like to set it to an empty string, currently, iOS and Firefox seems to do so ;)

[ignoramous]

Makes sense: We should remove the user-agent.

DoT doesn't add anything worthwhile (but does add an overhead for us to then maintain the codebase): Of course, DoT has no metadata of the sort that HTTP clients may add, but that really is made up by, as you point out, its ability to get past firewalls.

[PeterDaveHello]

Cool, I tried to prepare a pull request with that needed change, but didn't find out where to modify the user agent, not familiar with app development, do you have any hints?

Update: looks like the user agent string might come from https://github.com/Jigsaw-Code/Intra/, so either remove it there, or overwrite it here.

[ignoramous]

The code may not build as it is in a midst of a rewrite that I abandoned midway (will resume soon), but feel free to make that change and send a PR (:

https://github.com/celzero/firestack/blob/dd39240f8f176476684a0ffa60c226b05fb4250a/intra/doh/doh.go#L357

[ignoramous]

DoT impl is in firestack: celzero/firestack@d725587

UI pending.

[ignoramous]

UI done impl v055b: https://github.com/celzero/rethink-app/releases/tag/v0.5.5b