Page MenuHomePhabricator

Integrate Wikimedia DNS into Android apps
Open, Needs TriagePublicFeature

Description

Feature summary (what you would like to be able to do and where):

Currently all Android apps by Wikimedia use OkHttp which has builtin DNS over HTTPS client.

https://github.com/square/okhttp/tree/master/okhttp-dnsoverhttps

It would take less than 50 lines to integrate Wikimedia DNS (T252132) into the current OkHttp clients.

Use case(s) (list the steps that you performed to discover that problem, and describe the actual underlying problem which you want to solve. Do not describe only a solution):

Protect users from ISP or government DPI middleboxes logging or analyzing of UDP DNS.

Benefits (why should this be implemented?): Privacy enhancement.

Event Timeline

Naruse_shiroha updated the task description. (Show Details)
Naruse_shiroha updated the task description. (Show Details)

Is this different from T327286?

That would require more efforts. Let me quote the metawiki page...

Does this project solve all internet censorship issues?
No. While DNS protocols such as DoH and DoT encrypt DNS queries between your client (like Firefox) and a resolver (Wikimedia DNS), an on-path observer (such as your ISP/government) can still identify which websites you are connecting to either through the Server Name Indication (SNI) field in the ClientHello message (currently unencrypted) or through the IP address of the website. Nevertheless, given that DNS-based censorship and surveillance is often the easiest to implement, securing your DNS is a good first step towards improving your privacy and resisting censorship.