diff options
| author | Linus Färnstrand <linus@mullvad.net> | 2019-12-11 11:39:11 +0100 |
|---|---|---|
| committer | Linus Färnstrand <linus@mullvad.net> | 2020-01-07 21:50:38 +0100 |
| commit | 23734950a7b5daeda73d62b6bb4d26951382e458 (patch) | |
| tree | d9f6289e6ebc9f018128863880003b37048e28de /docs/security.md | |
| parent | 8e9486437e97549df10f21485e1a979c83379783 (diff) | |
| download | mullvadvpn-23734950a7b5daeda73d62b6bb4d26951382e458.tar.xz mullvadvpn-23734950a7b5daeda73d62b6bb4d26951382e458.zip | |
Slightly clarify on DNS
Diffstat (limited to 'docs/security.md')
| -rw-r--r-- | docs/security.md | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/docs/security.md b/docs/security.md index 64e423a1ff..852df5a08d 100644 --- a/docs/security.md +++ b/docs/security.md @@ -208,10 +208,10 @@ with the internet outside of a VPN tunnel. ## DNS DNS is treated a bit differently from other protocols. Since a user's DNS history can give a -detailed view of what they are doing, it is important to not leak it. And since invalid or no DNS -responses prevent the user from going where they want to go, it is important that it works and -gives correct replies, from an anti-censorship point of view. Poisoned DNS replies is a very -common way of censoring the network in many places. +detailed view of what they are doing, it is important to not leak it. +Since an invalid or missing DNS response prevents the user from going where they want to go, +it is important that it works and gives correct replies, from an anti-censorship point of view. +Poisoned DNS replies is a very common way of censoring the network in many places. With the above as background, the app makes sure that every DNS request from the device goes inside the VPN tunnel and to exactly one place, the VPN relay server the device is currently |