please integrate dnscrypt

[cubakcabak]

isp in my country tampering its users dns, making internet experience horrible.

we can't just use other dns server by change to its ip, because the isp transparently intercept and redirect those ip to their own isp dns server.

please make dnscrypt as an option for the dns provider.

thank you for your great work.

Sent from my EVERCOSS S50D using FastHub

[PeratX]

How about DNSSEC ?
Have you tried TCP method?
Please feel free to submit any questions or suggestions.

[cubakcabak]

thank you for your response.

my findings so far, all those public dns doesn't support tcp as query method OR my isp blocked access to default dns port (53) for querying directly and only transparently intercept udp to redirect to their own dns server.

i don't know how can i test if dnssec working on them either.

i really like the simpleness but pretty configurable of daedalus, i just wish it has dnscrypt as an option.

i wish my request doesn't sound demanding, because it wasn't.

thank you for your great work.

Sent from my EVERCOSS S50D using FastHub

[PeratX]

dnscrypt require servers support. Have you tried some dns providers have none 53 ports?

[cubakcabak]

i've tried non standard dns port on some dns provider, still no luck.

dnscrypt supported server already available, such as opendns and adguard makes their dns server dnscrypt enable.

what daedalus need to be integrated is dnscrypt client.

lists of available server that support dnscrypt is available from dnscrypt-proxy github project page and their website.

Sent from my EVERCOSS S50D using FastHub

[PeratX]

Yeah, there will be a large modification. Added it to the todo list

[cubakcabak]

thank you so much to considerate it.

hopefully daedalus can be helpful to many, as it is for me.

[PeratX]

@cubakcabak I can find nearly no code about it on Android..

[PeratX]

Tracing in #23

[PeratX]

What about the incoming DNS over TLS? I see the DNSCrypt is not wildly used on servers.

[cubakcabak]

actually yeah, i agreed

implement and be the first to adopt dns over tls is a good idea

that way, dns query result is the same as dnscrypt, encrypted