Google Adds Support for DNS-over-HTTP/3 in Android to Keep DNS Queries Private

guest · Jul 21, 2022

July 20, 2022

Google on Tuesday officially announced support for DNS-over-HTTP/3 (DoH3) for Android devices as part of a Google Play system update designed to keep DNS queries private.

To that end, Android smartphones running Android 11 and higher are expected to use DoH3 instead of DNS-over-TLS (DoT), which was incorporated into the mobile operating system with Android 9.0.
Click to expand...

DoH3 is also an alternative to DNS-over-HTTPS (DoH), a mechanism for carrying out remote Domain Name System (DNS) resolution through an encrypted connection, effectively preventing third parties from snooping on users' browsing activities.

HTTP/3, the first major upgrade to the hypertext transfer protocol since HTTP/2 was introduced in May 2015, is designed to use a new transport layer protocol called QUIC that's already supported by major browsers such as Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari.

"While using HTTPS alone will not reduce the overhead significantly, HTTP/3 uses QUIC, a transport that efficiently multiplexes multiple streams over UDP using a single TLS session with session resumption," Matthew Maurer and Mike Yu from the Android team said in a post.
Click to expand...

Google: DNS-over-HTTP/3 in Android

To help keep Android users’ DNS queries private, Android supports encrypted DNS. In addition to existing support for DNS-over-TLS, Android now supports DNS-over-HTTP/3 which has a number of improvements over DNS-over-TLS.
Click to expand...

Memory Safety
The DNS resolver processes input that could potentially be controlled by an attacker, both from the network and from apps on the device. To reduce the risk of security vulnerabilities, we chose to use a memory safe language for the implementation.

Fortunately, we’ve been adding Rust support to the Android platform. This effort is intended exactly for cases like this — system level features which need to be performant or low level (both in this case) and which would carry risk to implement in C++. While we’ve previously launched Keystore 2.0, this represents our first foray into Rust in Mainline Modules.
Click to expand...

Log in or Sign up

Google Adds Support for DNS-over-HTTP/3 in Android to Keep DNS Queries Private

guest Guest

Log in or Sign up

Google Adds Support for DNS-over-HTTP/3 in Android to Keep DNS Queries Private

guest Guest

Useful Searches