53 lines
1.9 KiB
HTML
53 lines
1.9 KiB
HTML
<!DOCTYPE html>
|
|
<html lang='en'>
|
|
<head>
|
|
<meta charset='utf-8' />
|
|
<title>About DNSCrypt</title>
|
|
<style type='text/css'>
|
|
body {
|
|
font-family: arial, helvetica, sans-serif;
|
|
margin: 0; }
|
|
|
|
h1 {
|
|
margin: 0; }
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<h1>About DNSCrypt</h1>
|
|
<p>
|
|
This software encrypts and authenticates DNS packets between your computer
|
|
and OpenDNS. This prevents man-in-the-middle attacks and snooping of DNS
|
|
traffic by ISPs or others.
|
|
</p>
|
|
<p>
|
|
Tips:
|
|
<ul>
|
|
<li>If you have a firewall, open TCP and UDP ports 53 and 443.</li>
|
|
<li>
|
|
The "Fallback to insecure" feature automatically disables
|
|
DNSCrypt when DNS queries are not able to reach OpenDNS. This usually
|
|
happens on public WiFi networks that require going through a captive
|
|
portal before you can access external networks.
|
|
This function is only provided for conveniency.
|
|
When enabled, the protocol can be easily downgraded by
|
|
third-parties. In other words, when the "Fallback to
|
|
insecure" feature is enabled, this software doesn't
|
|
provide any security at all against active attackers, but it can
|
|
still be useful against passive attackers and in order to bypass
|
|
DNS censorship. Don't enable it unless you are frequently
|
|
roaming and you don't want to manually disable/enable DNSCrypt.
|
|
</li>
|
|
<li>
|
|
The FamilyShield service blocks pornographic content,
|
|
including OpenDNS "Pornography", "Tasteless" and "Sexuality"
|
|
categories, in addition to proxies and anonymizers (which can render
|
|
filtering useless). It also blocks phishing and some malware.
|
|
</li>
|
|
</ul>
|
|
</p>
|
|
<p>
|
|
Please help by providing feedback!
|
|
</p>
|
|
</body>
|
|
</html>
|