Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's similar to Anonymized DNS.

The relay doesn't learn the content because it's not encrypted for it. The target receives the payload from the relay, so it doesn't know its IP, and everything the relayed removed.



Correct, we developed Oblivious DNS (first as a research paper and then as a service) to do this. Here's a quick writeup we did about our alpha service that we're planning to roll out globally:

https://invisv.com/articles/dns.html


There's some similarity to Oblivious DNS over HTTPS (ODoH): https://datatracker.ietf.org/doc/html/rfc9230

Separately from this OHTTP product, we're working on that as well.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: