VPN problem

Vitor

- sniffing your DNS lookups -

Which is why encrypted DNS is so important, not the default offered by DHCP in coffee shops etc

bob2302

Vitor said:

- sniffing your DNS lookups -

Which is why encrypted DNS is so important, not the default offered by DHCP in coffee shops etc

Do you have a specific attack in mind?

Protection against being redirected to a bogus server comes from TLS. Encrypted DNS protects against only one of way of getting your packets to the bogus server - not all.

bob2302

Sicard said:

bob2302 said:

Most people don't need VPNs anymore anyway. 

You do if you want to watch UK tv but live abroad.

That's one of the reasons for the use of the word "Most".

Vitor

-Do you have a specific attack in mind?-

A local DNS spoofing attack, aka "man-in-the-middle DNS injection" or "DNS hijacking" using tools like Ettercap, dsniff, or mitmproxy

-Encrypted DNS protects against only one of way of getting your packets to the bogus server -

Which is why you should use layered protection of Encrypted DNS, TLS and browser policies such as HSTS, certificate pinning etc,

bob2302

Vitor said:

-Do you have a specific attack in mind?-

A local DNS spoofing attack, aka "man-in-the-middle DNS injection" or "DNS hijacking" using tools like Ettercap, dsniff, or mitmproxy

That will cause the TLS connection to fail authentication.