Skip to content

HostShield v6.9.10

Choose a tag to compare

View all tags
@SysAdminDoc SysAdminDoc released this 14 Jun 05:58
v6.9.10
f8841e0

HostShield v6.9.10

Encrypted DNS (DoH) now actually works — and never silently leaks to plaintext.

This release fixes a chain of bugs (reported in #1) where turning on DNS‑over‑HTTPS appeared to do nothing and leak tests still showed a plaintext resolver like Google.

Fixed

  • DoH now connects and resolves. Two stacked bugs made encrypted DNS fail for every provider, so the app quietly fell back to plaintext:
    • The built‑in certificate pins named the wrong certificate authorities, so every provider failed validation. Pins now target each provider's real intermediate + root CA — and won't break on routine certificate rotations.
    • A response‑reading bug discarded every normal DoH reply. Fixed so responses are read correctly.
    • Verified on a physical device: queries now resolve over the encrypted provider, not plaintext.
  • Fail‑closed encrypted DNS. If DoH/DoT/DoQ/WireGuard is enabled and the encrypted resolver can't be reached, resolution now fails safely instead of silently downgrading to plaintext DNS against a public resolver. No more silent leaks.
  • DNS settings apply instantly. Changing your DNS provider or custom upstream now takes effect immediately while protection is running — no need to stop and restart.
  • Hardened the screen‑state receiver (registered NOT_EXPORTED), satisfying Android 13+ requirements and closing an unnecessary IPC surface.

Heads‑up

HostShield uses whichever enabled encrypted provider responds fastest, so your selected provider is the preferred/starting choice rather than a hard lock. Either way, DNS stays encrypted — it will never silently use plaintext again.

Install

Download HostShield-v6.9.10-full-release.apk below and open it on your device (you may need to allow "Install unknown apps" for your browser/file manager). It installs cleanly as an update over any previous HostShield release — same signing key, no uninstall needed.

  • Min Android: 8.0 (API 26)
  • Signed release build (full flavor)
  • versionCode 92

SHA‑256 (HostShield-v6.9.10-full-release.apk):
ae2e403f60711484dbb7ed578e333bf6957df0c9cdc32885bdf2f8d1ee04f3e1

Assets 3
Loading