{"repo":"junkurihara/doh-auth-proxy","free":true,"listed":false,"github":"https://github.com/junkurihara/doh-auth-proxy","clone":"git clone https://github.com/junkurihara/doh-auth-proxy.git","description":"Local DNS proxy for DNS over HTTPS (DoH), Oblivious DoH (ODoH) and Multiple-relay-based ODoH extension (Mutualized ODoH; MODoH), which additionally supports domain-based filtering and proxy/resolver authentication","language":"Rust","stars":38,"topics":["dns","rust","doh","odoh","dns-over-https","oblivious-doh","mutualized-odoh","ad-blocking","domain-blocker","domain-filtering"],"license":"MIT","category":"networking-infra","readme_excerpt":"doh-auth-proxy Local proxy for DoH, Oblivious DoH and ODoH-based Mutualized Oblivious DNS (ODoH-based &mu;ODNS; &mu;ODoH) supporting super-fast domain-based blocking and authenticated connection, written in Rust. For the detailed information on &mu;ODNS, please also refer to https://junkurihara.github.io/dns/. Introduction DNS over HTTPS (DoH) is an encrypted DNS protocol in which DNS queries and responses are exchanged with the target full-service resolver via HTTPS, i.e., over an encrypted-secure channel (RFC8484). To enhance the privacy of DoH, Oblivious DNS over HTTPS (ODoH) has been developed (RFC9230). ODoH leverages an intermediate relay (or proxy ) and an end-to-end encryption (HPKE) in order to decouple the client's IP address and content of his queries. Mutualized Oblivious DNS over HTTPS (&mu;ODoH) is an extension of ODoH, which has been (is still being) developed from the concern of the collusion between the relay and the target resolver and corruption of the client's privacy (Resource). To this end, &mu;ODNS leverages multiple relays towards the target resolver, where relays are selected in a random fashion and employed in a distributed manner. doh-auth-proxy is client software that translates the standard DNS over port 53 (Do53) protocol to these three encrypted and privacy-enhanced DNS protocols. In other words, doh-auth-proxy protects the plaintext Do53 queries from being eavesdropped by encryption. Network structure of &mu;ODoH Here is an example of the netwo","default_branch":null,"files":null,"tree":[],"storefront":"/r/junkurihara","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/junkurihara/doh-auth-proxy/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}