Hello, ports! One notable feature new version of DNSCrypt proxy brings is something called post-quantum DNSCrypt. It's turned on by default so you don't have to do anything to use it. I've been running it on my router for a couple of days without any regressions. Another build and quick test successfully done on today's amd64 snap.
I'm also assuming MAINTAINER as that position is now available for taking. QP-encoded diff below the changelogs. Someone please commit if OK. Changelog (2.1.17): - Added support for PQDNSCrypt (DNSCrypt 2026), using post-quantum cryptography with compatible DNSCrypt servers to protect query confidentiality against future quantum computers. It is enabled by default and can be disabled with the new 'pqdnscrypt' setting. - Key material is now rotated when the local network changes, reducing linkability across network changes. - Fixed a cache issue that could corrupt cached responses or cause data races under concurrent use. - The 'netprobe_timeout' configuration setting is now honored instead of being silently overridden by its command-line default. - Forwarded queries now correctly fall back to TCP after a truncated UDP response, and SOCKS-proxied anonymized DNS exchanges are sent to the relay. - HTTP/3 connections now retry after transient failures, and bootstrap resolution succeeds when at least one address was obtained. - Cloaking rules that resolve through a rule ending in an IP address are no longer incorrectly rejected as recursive. Actual loops are still rejected. - The monitoring dashboard now resolves API paths against the page origin, allowing it to work correctly when hosted under a path. Changelog (2.1.18): - Forwarding rules now support the '$PROXY:' prefix to send selected plain DNS upstreams over DNS-over-TCP through the proxy configured by the main 'proxy' setting. - PQDNSCrypt certificate retrieval is more reliable on paths where fragmented UDP packets are blocked, including when certificates are fetched through Anonymized DNSCrypt relays. - Resolver latency measurements no longer include setup or certificate-transfer time, so startup benchmarks and server selection better reflect actual query response time. Detailed changelog is available at https://github.com/DNSCrypt/dnscrypt-proxy/releases/tag/2.1.17 and https://github.com/DNSCrypt/dnscrypt-proxy/releases/tag/2.1.18 Index: Makefile =================================================================== RCS file: /cvs/ports/net/dnscrypt-proxy/Makefile,v retrieving revision 1.74 diff -u -p -u -p -r1.74 Makefile --- Makefile 6 Jul 2026 09:25:09 -0000 1.74 +++ Makefile 21 Jul 2026 15:38:47 -0000 @@ -2,11 +2,13 @@ COMMENT = flexible DNS proxy with suppor GH_ACCOUNT = DNSCrypt GH_PROJECT = dnscrypt-proxy -GH_TAGNAME = 2.1.16 +GH_TAGNAME = 2.1.18 CATEGORIES = net HOMEPAGE = https://dnscrypt.info/ + +MAINTAINER = Igor Zornik <[email protected]> # ISC PERMIT_PACKAGE = Yes Index: distinfo =================================================================== RCS file: /cvs/ports/net/dnscrypt-proxy/distinfo,v retrieving revision 1.43 diff -u -p -u -p -r1.43 distinfo --- distinfo 6 Jul 2026 09:25:09 -0000 1.43 +++ distinfo 21 Jul 2026 15:38:47 -0000 @@ -1,2 +1,2 @@ -SHA256 (dnscrypt-proxy-2.1.16.tar.gz) = e6WqdtP9xvu2Z2iboT2Kw+Zr4nZVaVqdQS5a1K/jT40= -SIZE (dnscrypt-proxy-2.1.16.tar.gz) = 3595664 +SHA256 (dnscrypt-proxy-2.1.18.tar.gz) = m4ENhiugfDg8wLj59/Hyyo90oC+EnYGMTE03zCGn36Y= +SIZE (dnscrypt-proxy-2.1.18.tar.gz) = 3474338 Index: pkg/DESCR =================================================================== RCS file: /cvs/ports/net/dnscrypt-proxy/pkg/DESCR,v retrieving revision 1.4 diff -u -p -u -p -r1.4 DESCR --- pkg/DESCR 3 Sep 2025 07:57:36 -0000 1.4 +++ pkg/DESCR 21 Jul 2026 15:38:47 -0000 @@ -1,9 +1,11 @@ dnscrypt-proxy is a flexible DNS proxy, with support for modern -encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS, Anonymized -DNSCrypt and ODoH (Oblivious DoH), and features: +encrypted DNS protocols such as DNSCrypt v2 including Post-Quantum +DNSCrypt (DNSCrypt 2026), DNS-over-HTTPS, Anonymized DNSCrypt and ODoH +(Oblivious DoH), and features: - DNS traffic encryption and authentication. Supports DNS-over-HTTPS - (DoH) using TLS 1.3 and QUIC, DNSCrypt, Anonymized DNS and ODoH + (DoH) using TLS 1.3 and QUIC, PQDNSCrypt, DNSCrypt, Anonymized DNS and + ODoH - Client IP addresses can be hidden using Tor, SOCKS proxies or Anonymized DNS relays - DNS query monitoring, with separate log files for regular and
