Improvement suggestion: DNS over HTTPS

[noglitchyo]

Hello,

First of all, thanks for your work on dns-proxy-server. You made there an amazing tool, which ease my work in many ways :)

I would like to suggest an improvement for it.

What do you think about the idea of implementing DNS over HTTPS protocol into dns-proxy-server?
Please have a look at: https://tools.ietf.org/html/rfc8484

I think it could greatly increase portability for dns-proxy-server and ease its configuration.
Especially on Windows system since browsers start to implement this feature.
This would be really useful when network configuration update is restricted on the system and only the browser configuration can be changed.

Let me know what you think.

[mageddo]

@noglitchyo thanks for the suggestion

At the first place this idea looks great to me

1. I will have to study this feature to understand it's idea better
2. DPS DNS server is based on https://github.com/miekg/dns I will have to check if I would be able to use that or if I will have to implement the HTTP API
3. After all I will have to measure how big is the change to be fully implemented

Regards

[noglitchyo]

@mageddo Thank you for your reply.

I will have to check if I would be able to use that or if I will have to implement the HTTP API

I made some researches on the repository you mentionned.
Seems that some attempts to implement DoH (client) in the library were made and then reverted:

• WIP: DNS-over-HTTP support for Client miekg/dns#649
• WIP: DNS-over-HTTP support for Client using x/net/http2 miekg/dns#651
• WIP: DNS-over-HTTPS support for Client.Exchange API miekg/dns#671
• Revert doh miekg/dns#800

semihalev/dns which is also based on miekg/dns actually made a DoH server implementation (if you want to have a look) and had to implement the HTTP API.

[webaaz]

Is there any update?