16 lines
828 B
Plaintext
16 lines
828 B
Plaintext
DNSCrypt-proxy provides a local service which can be used directly as your
|
|
local resolver or as a DNS forwarder, encrypting requests using the DNSCrypt
|
|
protocol and passing them to an upstream server.
|
|
|
|
The DNSCrypt protocol is very similar to DNSCurve, but focuses on securing
|
|
communications between a client and its first-level resolver.
|
|
|
|
DNSCurve improves confidentiality and integrity of DNS requests using
|
|
high-speed, high-security elliptic-curve cryptography. It aims to secure
|
|
the entire chain down to authoritative servers. However, it only works
|
|
with authoritative servers that explicitly support the protocol.
|
|
|
|
While not providing end-to-end security, it protects the local network,
|
|
which is often the weakest point of the chain, against man-in-the-middle
|
|
attacks. It also provides some confidentiality to DNS queries.
|