security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

document DNS leak prevention improvements

Browse Source
This commit is contained in:
Daniel Micay 2024-10-24 13:24:19 -04:00
parent a61447a17b
commit 1e06a018d0
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
static/features.html
View File

@ -1150,9 +1150,11 @@
without VPN" toggle enabled.</p>
<p>Android allows DNS queries from the system resolver to leak to the network
provided DNS servers when a VPN app goes down due to a race condition. This is
fully prevented by GrapheneOS through extending the leak blocking to this part
of the system resolver.</p>
provided DNS servers when a VPN app goes down due to a race condition. It also
similarly allows connections to the VPN DNS servers to happen outside of the VPN
tunnel. Both of these are fully prevented by GrapheneOS through extending the
leak blocking to this part of the system resolver, fully preventing unicast DNS
leaks.</p>
<p>Android allows processes including apps to bypass the VPN entirely whether
it's up or down by sending multicast packets either directly or by causing the