Shulou(Shulou.com)06/01 Report--

This article mainly explains "how to enable 1.1.1.1 private DNS on Android 9 Pie". The content in the article is simple, clear and easy to learn and understand. Please follow the editor's train of thought to study and learn "how to enable 1.1.1.1 private DNS on Android 9 Pie".

So 1.1.1.1 how should I set it up?

Android Pie currently supports only TLS-based DNS. The following steps can quickly help you enable it on your device:

● enter Settings-> connections-> more connection Settings-> Private DNS

● chooses private DNS vendor hostname

● enter 1dot1dot1dot1.cloudflare-dns.com and save

● browsing 1.1.1/help (or 1.0.0.1/help) verifies that "use TLS-based DNS (DoT)" is "Yes"

So someone must be wondering, why use private DNS?

How do TLS-based HTTPS and DNS adapt to the current state of Internet privacy?

TLS is a protocol that encrypts traffic through untrusted communication channels, such as browsing your email on the wireless network of a cafe. Even with TLS, we still don't know if your connection to the DNS server has been hijacked or snooped by a third party. Especially if you accidentally connect to an open hotspot, criminals can hijack email servers or online banking connections by falsifying your device's DNS records. Although DNS SEC solves the problem of authenticity by signing the response so that tampering can be detected, anyone else on the line can read the message body.

HTTPS/TLS-based DNS solves this problem. These new protocols ensure that communication between your device and the parser is encrypted, just as we expect for HTTPS traffic.

However, the last link in this series of operations may be insecure, that is, the server name indication is displayed during the initial TLS negotiation between the device and a specific hostname on the server. The hostname that sent the request is not encrypted, and a third party can still view your access record. Therefore, under the condition that there are still technical omissions, it is necessary to use a trusted network.

IPv6 and DNS

You may have noticed that the private DNS field does not accept an IP address like 1.1.1.1, but rather wants a hostname, such as 1dot1dot1dot1.cloudflare-dns.com.

Google requires hostnames rather than IP addresses because mobile operators need a "dual stack world" in which IPv4 and IPv6 co-exist. More and more organizations are using IPv6, and all major mobile operators in the United States support IPv6. In a world where about 26 billion Internet-connected devices far exceed 4.3 billion IPv4 addresses, this is good news. In a forward-looking move, Apple requires that all new iOS applications must support single-stack IPv6 networks.

However, we still live in a world with IPv4 addresses, so handset manufacturers and operators must consider backward compatibility to build their systems. Currently, iOS and Android request both An and AAAA DNS records, which contain IP addresses corresponding to the domain in version 4 and version 6 format, respectively.

To communicate with devices with only IPv4 addresses over an IPv6-only network, the DNS parser must use DNS64 to translate IPv4 addresses into IPv6 addresses. Requests for those translated IP addresses will then go through the NAT64 translation service provided by the network operator. This process is completely transparent to the device and the Web server.

Thank you for reading, the above is the content of "how to enable 1.1.1.1 private DNS on Android 9 Pie". After the study of this article, I believe you have a deeper understanding of how to enable 1.1.1.1 private DNS on Android 9 Pie, and the specific use needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.