cubixle/packages
1
0
Fork 0
mirror of https://github.com/novatiq/packages.git synced 2026-07-31 07:43:06 +01:00
Code Issues Packages Projects Releases Wiki Activity
10,644 Commits 8 Branches 1 Tag
fd8505f76021a21b3ab619019622d4d50dbddeb2
Commit Graph
6 Commits
Author SHA1 Message Date
Tony AmbardarandJonathan G. Underwood fd8505f760 stubby: add SPKI pin set for Cloudflare cert 
Add an SPKI pin for Cloudflare to help prevent MITM and downgrade attacks,
as described in RFC7858 (DNS over TLS). The setup of SPKI and the specific
SHA256 certificate hash are taken from Cloudflare's DoT configuration guide
published at https://developers.cloudflare.com/1.1.1.1/dns-over-tls/.

Note that the certificate is valid to March 25th 2020, 13:00 CET, which
provides ample time for issuance of a backup pin to support future key
rollover.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
 2019-01-31 23:41:51 +00:00
Tony AmbardarandJonathan G. Underwood b77053d350 stubby: add Cloudflare 1.0.0.1 and ::1001 servers 
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
 2019-01-31 23:41:51 +00:00
Tony AmbardarandJonathan G. Underwood 3f17c54f26 stubby: use EDNS client-subnet privacy by default 
Retain the upstream value since privacy is usually the key user motivation
for using DNS-over-TLS, and simply note that those encountering sub-optimal
routing may consider disabling the setting.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
 2019-01-31 23:41:51 +00:00
David Mora 8a8e68580f stubby: Bump to 0.2.3 
Update to new upstream version. Also changed to Cloudflare's DNS as default.

Signed-off-by: David Mora <iamperson347+public@gmail.com>
 2018-05-13 07:27:30 -04:00
David Mora dcbeb660dd stubby: Bump to 0.2.2 plus updates to default config 
Bump version plus changes to address concerns regarding default config for stubby provided with this package

Signed-off-by: David Mora <iamperson347+public@gmail.com>
 2018-02-21 22:56:02 -05:00
David MoraandKarl Palsson bbab28385b stubby: Initial commit of openwrt package for stubby daemon 
(This daemon utilizes the getdns library)

Signed-off-by: David Mora <iamperson347+public@gmail.com>
 2018-01-29 10:45:16 +00:00