security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

clarification about DHCP

Browse Source
This commit is contained in:
Daniel Micay 2020-02-28 21:47:22 -05:00
parent 17ed0acd26
commit bd93da0d47
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
static/faq.html
View File

@ -368,11 +368,11 @@
<p>By default, in the automatic mode, the Private DNS feature provides opportunistic
encryption by using DNS-over-TLS when supported by the DNS server IP addresses
provided by the network or the static IP configuration. Opportunistic encryption
provides protection against a passive listener, not an active attacker, since they can
force falling back to unencrypted DNS by blocking DNS-over-TLS. In the automatic mode,
certificate validation is not enforced, as it would provide no additional security and
would reduce the availability of opportunistic encryption.</p>
provided by the network (DHCP) or the static IP configuration. Opportunistic
encryption provides protection against a passive listener, not an active attacker,
since they can force falling back to unencrypted DNS by blocking DNS-over-TLS. In the
automatic mode, certificate validation is not enforced, as it would provide no
additional security and would reduce the availability of opportunistic encryption.</p>
<p>When Private DNS is explicitly enabled, it uses authenticated encryption without a
fallback. The authentication is performed based on the hostname of the server, so it