-2

I plan to use a DNS service, I'm just wondering what sort of information gets sent. Will my passwords, browsing activity flow through the DNS servers? I kind of know what a DNS is, but I'm not sure about the security risks from my point of view, I don't want my passwords compromised.

1
  • 1
    If you were able to access this site to post this question, you've used a DNS service.
    – mricon
    Aug 3 '14 at 13:02
1

A good way may be to learn how DNS works. When you connect to a machine, you actually connect to its IP address (say, 1.1.1.1). Instead of you remembering all these numbers, DNS facilitates translating names (such as google.com) to these IP addresses.

A "normal" DNS query is, is basically:

"What's the IP address for www.google.com?"

Its response is

"The IP is 1.2.3.4".

So, in short - and under normal circumstances - no, they won't see your passwords, but yes, they will see your DNS traffic (and hence, figure out what websites you visit and services that you use).

However: a rogue DNS administrator can forward you to the wrong server. Instead of accessing server1.com (which is at 1.2.3.4), the malicious response will say that it's at 1.3.3.7, a server controller by an attacker. This malicious machine has the exact same look and feel as the original server, so it may (SSL errors aside) look normal to you. You, as an unknowing user, will just log in using your credentials. They can see these credentials, and hijack your account. So, in short - yes, DNS is a dangerous service that is often blindly trusted.

Why not use OpenDNS or google's DNS servers?

2
  • I couldn't find how to use it to access Netflix. Currently looking at unblock-us.com
    – user53159
    Aug 3 '14 at 13:20
  • Your ISP may be blocking Netflix, they may prevent the DNS from resolving, or could be dropping traffic towards it. Anyhow, that's trying to access a blocked service, not necessarily how DNS works
    – ndrix
    Aug 4 '14 at 4:57
0

You're using a DNS if you can access "www.Google.com".

DNS converts that human-readable name to the machine-readable IP address of the website (in Google's case, to this for example: http://74.125.224.72/ (< copy and paste in your address bar, and you'll access Google.com)

Only addresses are sent through DNS servers NOT your passwords/data.

Resources:

Google Public DNS: 8.8.8.8 and 8.8.4.4

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.