Microsoft was released today a new version of Windows 10 on channel Windows Insider Dev. The new build brings several improvements as well as settings for encrypted DNS.
The DNS-over-HTTPS is a relatively new one feature ασφαλείας που στοχεύει στην προστασία της κίνησης DNS από τρίτους. Κρυπτογραφεί την κίνηση DNS χρησιμοποιώντας το πρωτόκολλο HTTPS. Για όσους δεν γνωρίζουν το DNS χρησιμοποιείται για τη “μετάφραση” domain names (iguru.gr), σε αριθμητικές διευθύνσεις IP.
Η μη κρυπτογραφημένη κίνηση DNS επιτρέπει στον πάροχο δικτύου, π.χ. τον ISP και άλλους τρίτους που έχουν πρόσβαση στο ίδιο δίκτυο, να ελέγξουν ποιες σελίδες επισκέπτεστε. Επιπλέον είναι δυνατό για τους ISP να αλλάξουν requests, π.χ. αποκλείοντας τα ή ανακατευθύνοντάς τα (όπως είδαμε με το ban του Subs4free).
Microsoft recently announced that the Windows operating system will support encrypted DNS. Browser developers (Mozilla ή Google) have added functionality support to their programs.
But the new version of Windows 10 brings its support operation DNS-over-HTTPS in OS Settings for ethernet and Wi-Fi connections.
For ethernet:
Follow the path Settings - Network & Internet - Status.
Click Properties.
Select Edit IP or Edit DNS Server (Edit IP assignment or Edit DNS server assignment).
For Wi-Fi:
Follow the path Settings - Network & Internet - Wi-Fi.
Click Properties.
Select Edit IP or Edit DNS Server (Edit IP assignment or Edit DNS server assignment).
The current version only recognizes some DNS-over-HTTPS providers by default, namely Cloudflare, Google, and Quad9.
Select the DNS you want from the following table:
| Server Owner | Server IP addresses |
| Cloudflare | 1.1.1.11.0.0.1
2606: 4700: 4700 :: 1111 2606: 4700: 4700 :: 1001 |
| 8.8.8.88.8.4.4
2001: 4860: 4860 :: 8888 2001: 4860: 4860 :: 8844 |
|
| Quad9 | 9.9.9.9149.112.112.112
2620: fe :: fe 2620: fe :: fe: 9 |
Enter or paste an IP address into the page, then select one of the available DNS encryption options.
The options are:
No encryption.
Encrypted only (DNS-over-HTTPS).
Encryption against priority, the unencrypted connection is also allowed.
Confirm your choice and check if it works by looking at the DNS servers in the network properties. They must show (encrypted).
Microsoft states that Windows 10 administrators may also try custom DNS-over-HTTPS servers, but this requires the following netsh command:
netsh dns add encryption server=dohtemplate=
