Is there a way to make encrypted DNS resolutions? [closed]
Is there a way to make encrypted DNS resolutions, so that a packet sniffer in the same network still can't guess what DNS has been requested?
Maybe, just thinking, by tunneling DNS requests through an HTTPS connection?
Sure. Use a VPN. Preferably one with good hard encryption. I'm thinking IPSEC using AES/SHA.
But then all your traffic gets tunneled. Not sure if that's a good thing or not, for you.
Check out DNSCurve by Daniel J. Bernstein. It's stated main point:
Confidentiality: DNS requests and responses today are completely unencrypted
and are broadcast to any attacker who cares to look. DNSCurve encrypts
all DNS packets.
I'd use a VPN to a trusted host/network, or maybe tor.