[tor-talk] Tales from the DNSCrypt: Linux Rising

[miniBill]

Il 21 febbraio 2012 15:41, Jaromil <jaromil at dyne.org> ha scritto:
>
> re all,
>
> what is the difference between DNSCrypt and a simple compination of
> ssh and socat? something like:
>
>  Iclient$ ssh -L 5353:127.0.0.1:5353 server
>  Iserver$ socat tcp4-listen:5353,reuseaddr,fork UDP:dns.server:53
>  Iclient# socat -T15 udp4-recvfrom:53,reuseaddr,fork tcp:127.0.0.1:5353
>  Iclient# echo "nameserver 127.0.0.1" > /etc/resolv.conf
>
> works well to encrypt DNS queries to a dns server of choice.
>
> ciao
>

The difference is that to use socat you need a server with trusted dns