OpenDNS launches DNSCrypt for Windows

[Paandu]

OpenDNS is an alternative DNS services most used on the network, which has found competition with alternative DNS that Google also offers. Maybe that's why they have decided to launch an additional service called DNSCrypt security, in order to encrypt our traffic passing through the DNS protocol added to the security options that were already present in OpenDNS. According to OpenDNS, protects users DNSCrypt attacks by hackers, especially from the attacks of man-in-the-middle. This encrypting plain text that passes through the DNS servers with open source system is now available. The user only has to activate the service, does the rest DNSCrypt without complications. For now DNSCrypt is available for OS X, Windows and Linux versions.

[LavinaD]

DNSCrypt improves security by encrypting DNS traffic between the user and the DNS servers to OpenDNS, and thus provide protection against prying eyes or attacks of man-in-the-middle (man mid) on what is called the last mile (or last mile). This will clearly expect that the experts think of DNSCrypt after studying the code. For OpenDNS, DNSCrypt is complementary to DNSSEC. An important note for Stéphane Bortzmeyer shows that a priori rather enthusiastic.

[servan$]

There is another solution called DNSSEC, more complete, as well as encrypted the channel, adds authentication and chain of trust to ensure that the DNS record is not manipulated.

Are both solutions, especially if we connect through Internet connections whose safety may shine by their absence, such as open WiFi connections.

[Innocent User]

Many times we are not conscious in particular the average user, the process behind when we started to type a URL in your web browser and just giving as result a web page, which in general will which he had requested but may also be cases of obtaining other pages, especially malicious, if we use open networks such as WiFi access points or have intercepted communication of our system with the DNS server that resolves our requests through a series of exploits. Well, OpenDNS's hand we have a "preview" of DNSCrypt, a test application, available for Mac OS X, and we figure that generates communication between our teams and the DNS servers that resolve our requests so that we gain greater security by putting hard intercept such communications.

[Amma-Watson]

Basically, DNSCrypt consultations encrypted between your computer and OpenDNS, eliminating the vector of attack for the DNS spoofing, and censure well circunveniendo DNS level that implement some ISPs. However, any unencrypted traffic on a network with applications under MITM, specifically ARP spoofing or spoofing the router remains subject to the privacy issues and similarly any censorship based on IP (blackholes, for example) continue to run unless you use proxies or networks such as Tor.

[Rawana]

We talked a lot about the problems with faulty DNS and black holes in Internet security. And while sooner or later something must be done on a larger scale. For that reason OpenDNS has launched a service that encrypts the DNS protocol traffic: DNSCrypt. It is an excellent service which replaces your default DNS assigned by OpenDNS. A free service that uses a large cache to make the connection much faster, while allowing the use of filters to navigate safely. It is for those who do not know, OpenDNS offers DNS resolution to individuals and businesses as an alternative to DNS server of your Internet provider. Their servers are located in strategic places in the world and maintain a huge cache of domain names, allowing DNS queries are generally faster, which in turn accelerates the response speed. Well, the service just implemented a new tool called DNSCrypt that will make our communication in a much more secure by encrypting the text that goes through the DNS servers through a system of open source is now available on Github. Simply activate the service and DNSCrypt does the rest without complications.

[|Gyani|]

DNSCrypt is through encryption of DNS traffic to prevent strangers in public WLANs can see what websites users are clicking. Even spoofing and man-in-the-middle attacks should be prevented by DNSCrypt. DNA belonged historically to the insecure parts of the critical Internet infrastructure, said OpenDNS . And despite improvements such as the DNSSEC protocol itself remains uncertain because the data is transmitted in plain text would. This secure connection to the "last mile" between the client and the DNS resolver is a point of attack, which had been exploited in the past. OpenDNS supports DNSCrypt themselves as part of a technology preview, and it encrypts all DNS requests to its 30 million users to the OpenDNS servers. This encryption can be exploited; providers and governments no longer have access to the DNS queries to determine which sites users visit, praising its technique to OpenDNS. Also, attackers cannot intercept DNS requests and attract more users as to other servers. And providers no longer possible, the DNS requests to alternative DNS server would redirect to their own systems to block access.