[jitsi-dev] Jitsi leaks DNS when using a proxy


#1

Hi!
Sniffing my local network traffic, I discovered that Jitsi leaks DNS
when using a proxy. This is -not- desirable.
Please force Jitsi to use remote DNS lookups when using a proxy!

With parallel resolving disabled, I tried an HTTP and a SOCKS5 proxy. I
had DNS leaks every time, regardless of which DNS settings (absolute
domain names, DNSSEC) I chose.

I only tested this with an XMPP account. But even if it is not an issue
with other types, it is still a serious privacy flaw.

This should be easy to reproduce.

For reference or if you do not see my point, Pidgin/libpurple had the
same issue a while ago, and they fixed it. See:

http://developer.pidgin.im/ticket/11110

http://developer.pidgin.im/viewmtn/revision/info/f9ed9968030c167eb2a7d562c69b04efbe00ca5d

http://developer.pidgin.im/viewmtn/revision/info/545dd3386c0c8b1556984514b859317f7ec392d8

I think this should be filed as a bug. Thank you!


#2

Could you please open an issue?

Thanks,
Emil

ยทยทยท

On Sunday, July 15, 2012, wrote:

Hi!
Sniffing my local network traffic, I discovered that Jitsi leaks DNS
when using a proxy. This is -not- desirable.
Please force Jitsi to use remote DNS lookups when using a proxy!

With parallel resolving disabled, I tried an HTTP and a SOCKS5 proxy. I
had DNS leaks every time, regardless of which DNS settings (absolute
domain names, DNSSEC) I chose.

I only tested this with an XMPP account. But even if it is not an issue
with other types, it is still a serious privacy flaw.

This should be easy to reproduce.

For reference or if you do not see my point, Pidgin/libpurple had the
same issue a while ago, and they fixed it. See:

http://developer.pidgin.im/ticket/11110

http://developer.pidgin.im/viewmtn/revision/info/f9ed9968030c167eb2a7d562c69b04efbe00ca5d

http://developer.pidgin.im/viewmtn/revision/info/545dd3386c0c8b1556984514b859317f7ec392d8

I think this should be filed as a bug. Thank you!

--
--sent from my mobile