6kntv
My feedback
9 results found
-
513 votes6kntv
supported this idea
·
-
455 votes6kntv
supported this idea
·
-
903 votes6kntv
supported this idea
·
-
2,513 votes
As mentioned in the previous update on this feature, it is now being edited to be a request for slides.
Please feel free to undo your vote if this is not something you want included in Proton Drive.
6kntv
supported this idea
·
-
1,623 votes6kntv
supported this idea
·
-
1,575 votes6kntv
supported this idea
·
-
193 votes
An error occurred while saving the comment 6kntv
supported this idea
·
-
116 votes6kntv
supported this idea
·
-
791 votes6kntv
supported this idea
·
I'm excited to see that ProtonVPN iOS now supports custom DNS functionality.
However, I noticed that it currently only supports plaintext UDP DNS queries.
As a privacy-conscious user who chose Proton specifically for its commitment to privacy, I would like to request support for encrypted DNS protocols, specifically DNS-over-HTTPS (DoH) and DNS-over-QUIC.
Privacy Concerns with Plaintext UDP DNS:
Even when using a VPN, plaintext UDP DNS poses several privacy risks:
1. DNS Query Visibility: While the VPN encrypts the connection between my device and the VPN server, DNS queries from the VPN server to the DNS resolver remain unencrypted and can be monitored by the VPN server's ISP, network intermediaries between the VPN server and DNS resolver, and the DNS resolver itself if not trustworthy.
2. DNS Hijacking and Manipulation: Plaintext DNS is vulnerable to man-in-the-middle attacks where malicious actors can intercept and modify DNS responses, potentially redirecting users to malicious websites.
3. Metadata Leakage: Even with VPN protection, plaintext DNS queries reveal browsing patterns and website visits to anyone monitoring the DNS traffic, undermining the privacy protection that VPN users expect.
4. ISP DNS Cache Poisoning: Unencrypted DNS queries are susceptible to cache poisoning attacks, where false DNS records can be injected into DNS caches.
Why This Matters for Proton:
As a company that positions itself as "Privacy by Default," supporting only plaintext DNS seems inconsistent with Proton's core values.
Your users choose ProtonVPN specifically because they trust you to provide the highest level of privacy protection.
Encrypted DNS protocols like DoH and DNS-over-QUIC would ensure end-to-end encryption of DNS queries, prevent DNS-based tracking and profiling, protect against DNS manipulation and censorship, and align with Proton's mission of making privacy accessible to everyone.
Feature Request:
Please consider adding support for DNS-over-HTTPS (DoH) - RFC 8484 and DNS-over-QUIC (DoQ) - RFC 9250.
This would allow users to configure custom encrypted DNS resolvers, ensuring that their DNS queries remain private even beyond the VPN tunnel.