Skip to content

Commit

Permalink
update text & rename file
Browse files Browse the repository at this point in the history
  • Loading branch information
grumaxxx committed Aug 4, 2023
1 parent dbe9ec2 commit d2e3e13
Showing 1 changed file with 12 additions and 8 deletions.
Original file line number Diff line number Diff line change
@@ -1,14 +1,18 @@
# How to Create Your Own DNS Stamp for Secure DNS

In this guide, you'll learn how to create your own DNS stamp for Secure DNS. Secure DNS is a service that enhances your internet security and privacy by encrypting your DNS queries. This prevents the possibility of your queries being intercepted or manipulated by malicious actors.
This guide will help you learn how to create your own DNS stamp for Secure DNS. Secure DNS is a service that enhances your internet security and privacy by encrypting your DNS queries. This prevents the possibility of your queries being intercepted or manipulated by malicious actors.

By creating and using your own DNS stamp, you're taking an important step towards a more secure and private internet experience. This guide should equip you with the knowledge you need to generate your own DNS stamp confidently, whether for use in AdGuard, AdGuard VPN, or any other application that supports DNS stamps.

## Introduction to DNS Stamps

DNS Stamps are short strings that include all the information needed to connect to a secure DNS server. They simplify the process of setting up Secure DNS as the user does not need to manually enter all this data.

DNS stamps allow you to customize secure DNS settings beyond the usual URLs. In particular, they allow you to specify hard-coded server addresses, use certificate hashing, and so on. These features make DNS stamps a more robust and versatile option for configuring secure DNS settings.

## Choosing the Protocol

Types of secure DNS include DNS-over-HTTPS (DoH), DNS-over-QUIC (DoQ), and DNS-over-TLS (DoT). You need to choose one of these protocols based on your preferences and usage conditions.
Types of secure DNS include DNS-over-HTTPS (DoH), DNS-over-QUIC (DoQ), and DNS-over-TLS (DoT) and others, and we will be looking at these three since they are the only ones that allow you to set the hash of the server's public certificate. Choosing one of these protocols depends on your preferences and usage conditions.

## Creating a DNS Stamp

Expand All @@ -17,16 +21,16 @@ Types of secure DNS include DNS-over-HTTPS (DoH), DNS-over-QUIC (DoQ), and DNS-o
2. Depending on the chosen protocol, select the corresponding protocol from the dropdown menu (DoH, DoT, or DoQ).

3. Fill in the necessary fields:
- **Resolver address**: Enter the DNS server's IP address. If you are using the DoT or DoQ protocol, ensure you have also specified the corresponding port.
- **Hashes of the server's certificate**: Insert the SHA256 hash of the server's certificate. If the DNS server you are using provides a ready-made Ed25519 public key, find and copy it. Otherwise, you can obtain it by following the instructions in the ["Obtaining the Certificate Hash"](###obtaining-the-certificate-hash) section.
- **IP address**: Enter the DNS server's IP address. If you are using the DoT or DoQ protocol, ensure you have also specified the corresponding port.
- **Hashes**: Insert the SHA256 hash of the server's certificate. If the DNS server you are using provides a ready-made Ed25519 public key, find and copy it. Otherwise, you can obtain it by following the instructions in the ["Obtaining the Certificate Hash"](###obtaining-the-certificate-hash) section.
- **Host name**: Enter the DNS server's hostname. This field is used for server name verification in DoT and DoQ protocols.
- For **DoH**:
- **Path**: Enter the path for performing DoH requests. This is usually "/dns-query", but your provider may provide a different path.
- For **DoT and DoQ**:
- There are usually no specific fields for these protocols in this tool. Just make sure the port specified in the resolver address is the correct port.
- In the "Properties" section, you can check the relevant properties if they are known and applicable to your DNS server.

4. Click the "Generate stamp" button. Your stamp will be displayed in the "Your stamp" field.
4. Your stamp will be automatically generated and you will see it in the "Stamp" field.

### Obtaining the Certificate Hash

Expand All @@ -52,9 +56,9 @@ Let's walk through an example of creating a stamp for AdGuard DNS using DoT:

3. Fill in the following fields:

- **Resolver address**: Enter the DNS server's IP address and port. In this case, it's `94.140.14.14:853`.
- **IP address**: Enter the DNS server's IP address and port. In this case, it's `94.140.14.14:853`.

- **Resolver name**: Enter the host name of the DNS server. In this case, it's `dns.adguard-dns.com`.
- **Host name**: Enter the host name of the DNS server. In this case, it's `dns.adguard-dns.com`.

- **Hashes**:
Execute the command
Expand All @@ -66,4 +70,4 @@ Let's walk through an example of creating a stamp for AdGuard DNS using DoT:
4. Leave the Properties section blank.
5. Click on the "Generate stamp" button. Your stamp will be displayed in the "Your stamp" field and is now ready to use.
5. Your stamp will be automatically generated and you will see it in the "Stamp" field.

0 comments on commit d2e3e13

Please sign in to comment.