Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included in Firefox 62, which is what the most rent Tor Browser is based off of. A user only needs to configure the browser to use this resolver by changing 2 settings in about:config. I tested it, and it seems to work OK.

See: https://blog.nightly.mozilla.org/2018/06/01/improving-dns-privacy-in-firefox/

Cloudflare now offer a Tor hidden DNS resolver with the TRR capability. Users can configure it in the above Firefox TRR settings. In my testing it works faster than clearnet resolvers, most likely because the traffic doesn't leave the Tor Network.

See: https://blog.cloudflare.com/welcome-hidden-resolver/

This method would seem to offer some additional protections against rogue exit nodes in two ways, ie. encrypting DNS queries, and preventing them from going through an exit node, altogether.

See: https://wiki.mozilla.org/Trusted_Recursive_Resolver

Since it's using HTTPS, and gets routed through the Tor socks proxy, I don't see any reason why this shouldn't be enabled by default. Is there any reason why this hasn't been added to Tor Browser Bundle?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.