You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Imagine you've set 2-3 different upstream DNS-servers, and you resolve some domains by one of them, others by the second and the rest by the third.
If some of them (or all of them) are spying and collecting your browsing history, creating your behavioral identity, they won't get your true history and identity. Only a part of it.
But how to decide which domain to resolve by which upstream?
I propose hashing domains, getting first byte mod number of upstreams.
And for some randomization for different clients - adding some salt for hash.
Then the formula of chosen upstream index becomes: index = hash(salt + domain)[0] mod upstreams.length
The salt variable can be a simple integer, it doesn't need to be big.
Salt can change after some period of inactivity. It will imitate of client change. Like dynamic IP address.
Hash function does need to be cryptographically strong. It can be even some CRC32 or similar function. And if we use simple integer function like CRC32 we can mod it without getting first byte. Like this: index = crc32(salt + domain) mod upstreams.length.
The text was updated successfully, but these errors were encountered:
Imagine you've set 2-3 different upstream DNS-servers, and you resolve some domains by one of them, others by the second and the rest by the third.
If some of them (or all of them) are spying and collecting your browsing history, creating your behavioral identity, they won't get your true history and identity. Only a part of it.
But how to decide which domain to resolve by which upstream?
I propose hashing domains, getting first byte mod number of upstreams.
And for some randomization for different clients - adding some salt for hash.
Then the formula of chosen upstream index becomes:
index = hash(salt + domain)[0] mod upstreams.length
Hash function does need to be cryptographically strong. It can be even some CRC32 or similar function. And if we use simple integer function like CRC32 we can mod it without getting first byte. Like this:
index = crc32(salt + domain) mod upstreams.length
.The text was updated successfully, but these errors were encountered: