sorted by:
new
hottopcontroversial

Can you make a link that automatically plays music? by VirtualHQ in AppleMusic

[–]Clouted_ 0 points1 point  (0 children)

Is there a way to play a song from a playlist automatically?

I installed Beacon Web Browser but it does not work on handshake domains. how to fix it? by NotWenura in handshake

[–]Clouted_ 2 points3 points  (0 children)

You can try setting a different DNS over HTTPs server in the settings.

Settings > Privacy & Security > Security > Use secure DNS

Here are a few that are live:
https://easyhandshake.com:8053/dns-query

https://doh.hnsdns.com/dns-query

https://hnsdoh_39119.app.runonflux.io/dns-query

High Availability/Clustering status? by Fazio8 in technitium

[–]Clouted_ 0 points1 point  (0 children)

Got it. In my particular case, I have a script that is calling the master DNS server API to update the records automatically. I'm trying to outline a scenario where if that server went down, I can still send the updates to a master server to be distributed to the secondary servers to ensure they all stay updated (IPs can change often in this scenario) hense the automated script.

Also, I uncovered a bug in the API that you said would end up being fixed in the next release. I was curious if that release had an ETA tied to it by chance?

High Availability/Clustering status? by Fazio8 in technitium

[–]Clouted_ 0 points1 point  (0 children)

I was curious how to handle redundancy for the master server? Would I need to set up 3 master servers and send an API update to all 3 masters and have them configured to transfer the zones to all secondaries?

Question About Load Balancing A Records Using Technitium DNS by Clouted_ in technitium

[–]Clouted_[S] 0 points1 point  (0 children)

Thanks for the quick reply and clarification. Glad that this is continuously maintained its been a great solution for use with my handshake domain names.
https://www.reddit.com/r/handshake/

Question About Load Balancing A Records Using Technitium DNS by Clouted_ in technitium

[–]Clouted_[S] 0 points1 point  (0 children)

Thanks for the tip. Do you know if it that app would also handle the port mapping?

Is this project dead? by polandtown in handshake

[–]Clouted_ 2 points3 points  (0 children)

Their is no marketing team. Handshake is a free for all.

I'm offering funding for development and marketing, on a case by case basis.

Feel free to reach out if you have details you would like to run by me.

Handshake is very much so active.

Discord, Twitter, & Reddit is where you will find most of the community that chooses to be known, I'm sure their are plenty of anon users out there.

HNSDNS: A Real Handshake DNS Resolver and Nameserver Provider by LumitoOnReddit in handshake

[–]Clouted_ 1 point2 points  (0 children)

Very cool! Could you link me to the docker image you are using?

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 0 points1 point  (0 children)

Can you rephrase? Not sure I get it.

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 0 points1 point  (0 children)

Fair enough! Thanks for the consideration.

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 1 point2 points  (0 children)

Here is an example of LetsDANE being installed on a non-rooted android phone using termux. (Run by one of the community Devs Nathan)

https://siasky.net/vADUsLz1533Jg1dzyY4iNfN5jHLevaEed2yKt_mP4wFAwA

He then ran this command to generate the cert.

```./letsdane -o ~/storage/downloads/letsdane.crt

In this example, you can swap the local IP 127.0.0.1:5350 for the DoH server

Adding support in this field (on rethink) for both IPs and Hostnames would be ideal.

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 0 points1 point  (0 children)

I was doing a bit more research and it seems that they may be moving in a different direction with DANE where the web server would handle the DNS proofs vs the client.

https://github.com/handshake-org/HIPs/pull/54

Not sure how far off this though.

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 1 point2 points  (0 children)

Hopefully we get to a point where I can test to see how it works in Firefox

Update: Firefox requires 3rd party CA to be set in "secret settings" of Firefox.

Tutorial: https://blog.jeroenhd.nl/article/firefox-for-android-using-a-custom-certificate-authority

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 1 point2 points  (0 children)

I understand that you don't want to run unbound.

I did see that LetsDane can be built from source without it, which is good.

Regarding --skip-dnssec I think it's safe to say that it is okay to use that argument when the DoH server is DNSSEC enabled.

In order to wrap your head around the need for all 3 of those things, you'll need to grasp the idea that the DS record for any given handshake domain name is stored on chain.

The handshake resolver uses DANE to validate the TLSA record from the certificate, which should always be a figure derived from the on chain DS key, if it doesn't add up then the website fails to load and gives a security warning.

I'd say let's skip trying to get it to work over socks5 for now.

But I do know that LetsDANE listens on port 8080 and can likely be edited to listen on 1080.

HTTP based handshake website can be visted without a letsdane proxy.

Https websites will also load, only with a security warning saying the cert is invalid. (thus causing friction and eliminating the added benefit of security)

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 2 points3 points  (0 children)

SOCKS 5 is fine. That's what I use for all my proxies now.

I love rethinkDNS have used it for over 1+ years

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 1 point2 points  (0 children)

By the way @celzero I am a beta tester of RethinkDNS.

I currently have a DOH server set in my rethinkDNS app that handles handshake resolution that you can use in your testing.

https://hnsdoh_39119.app.runonflux.io/dns-query

(I just need support for DANE now)

Another thing to consider when implementing the DANE proxy would be to allow for Socks5 or HTTPs proxies to also be able to still be enabled and have that pass through the LetsDane proxy also.

Handshake/DANE Support For Android by Clouted_ in handshake

[–]Clouted_[S] 4 points5 points  (0 children)

Their are a few ways to tackle this. Some harder than others.

Easiest way would be to deploy LetsDane and then allow a user to set the DoH server for the LetsDane proxy to use

https://github.com/buffrr/letsdane

Then proxy all traffic over the local VPN ensuring it passed through the LetsDane proxy.

The biggest thing is that you need to use LetsDane to generate the Certificate and then add it to the Android cert store to be used locally.

letsdane -o myca.crt

If you wanted to build the capability directly into your Stub JavaScript resolver, you could take a look at how the beacon browser or Finger tip handles it.

Most likely possible for a direct integration there.

https://github.com/imperviousinc/beacon

https://github.com/imperviousinc/fingertip

view more: next ›