Hi, Anders wrote (28 Jul 2011 21:02:24 GMT) : > Another option, one that I'm considering for the Haven OS, is to use > the unbound dns server with a patch that forces it to only send tcp > traffic. That way all dns requests are sent over tor and since we > are doing the name resolution our selves, there is no need to rely > on any one open dns server. This way we can also resolve every type > of query (even DNSSEC stuff).
It means doing the recursive resolution process ourselves (I mean, from inside the Live system itself), right? > I'm not quite sure what the anonymity implications are of doing it > like this, so it will need some more thought. But this might be > something to consider for the future. Sure. Thanks for your input! Bye, -- intrigeri <[email protected]> | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc | Then we'll come from the shadows. _______________________________________________ tails-dev mailing list [email protected] https://boum.org/mailman/listinfo/tails-dev
