This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests.
The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the-middle attacks.
The tool covers a range of secure resolution capabilities, including TLS-handshake authentication and stateless query resolution. It handles binary packet parsing and utilizes an asynchronous request pipeline to process multiple DNS queries concurrently.
