Am 05.02.2014 um 20:19 schrieb Lonnie Abelbeck <[email protected]>:

> Please comment,
> 
> Is there any interest in AstLinux supporting DNSCrypt ?

I think this is a great idea, definitely a first step in the right direction. 
Interesting that again DJB is involved, as well in the server-side 
implementation "DNScurve".

> As you may or may not know, DNSCrypt offers encrypted privacy for DNS, while 
> DNSSEC provides zone authentication.  Complimentary, each solving different 
> issues.

It looks as there some ongoing work for dnsmasq to implement DNSSEC, so maybe 
it could be combined sometime in the future.

> More Info:
> --
> DNSCrypt | OpenDNS
> http://www.opendns.com/about/innovations/dnscrypt/
> 
> DNSCrypt
> http://dnscrypt.org/
> --
> 
> At this point we are just looking into it, the dnscrypt-proxy 1.3.3 and 
> libsodium 0.4.5 packages would need to be added to our Buildroot which could 
> be a problem until it is tried.
> 
> Would you use DNSCrypt ?  Do we / customers really care ?
> 
> Is DNSCrypt the longterm standard for encrypted privacy for DNS ?
> 
> This is mostly an OpenDNS thing now, though a few other DNS prividers around 
> the world also support DNSCrypt.

I use OpenDNS and I would definitely use it, and I also have some 
"security-minded" customers, who would use it as well. I would appreciate if we 
would include it into AstLinux.

There is no official OpenWRT package yet, but I found this: 
http://wiki.openwrt.org/inbox/dnscrypt. 

> The dnscrypt-proxy package seems fairly lightweight, implementation would be 
> a simple checkbox and automatically configuring dnsmasq to use the defined 
> static DNS entries directly or via dnscrypt-proxy listening on 127.0.0.2 .
> 
> Thanks for any feedback.
> 
> Lonnie


Michael

http://www.mksolutions.info




Attachment: smime.p7s
Description: S/MIME cryptographic signature

------------------------------------------------------------------------------
Managing the Performance of Cloud-Based Applications
Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
Read the Whitepaper.
http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
_______________________________________________
Astlinux-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
[email protected].

Reply via email to