HN2new | past | comments | ask | show | jobs | submitlogin

Through what mechanism is it possible for them do bypass custom DNS servers? Does DNS over other protocols prevent this tampering?


DNS traffic is plaintext. MITM is all that's needed to be able to bypass custom DNS servers. An ISP, obviously, has to be in an MITM position to be able to provide internet service.

Here's an example: https://jeff.vtkellers.com/posts/technology/force-all-dns-qu...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: