HNS DANE Browser 0.3.16
HNS-name authoritative DoH
- Adds generic proof-pinned RFC 8484 authoritative DoH for single-label HNS endpoints such as
https://denuoweb:8443/dns-query, using verified HNS GLUE and proof TLSA pins without requiring an ICANN domain or WebPKI. - Uses the availability order owner ADoH, authoritative UDP/TCP 53, then the configured third-party HNS DoH resolver in Compatibility mode; Strict mode omits only the last fallback.
- Shows the successful transport explicitly:
DANE via ADoH,DANE via DNS53,DANE via 3rd DoH,Stateless DANE, orDANE via ICANN DoH, with equivalent HTTP labels. - Hardens resolver provenance and trace accuracy and prevents the internal security-path header from reaching Chromium or page content, including WebSocket upgrades.
Signed APK SHA-256: bcc4c5cc892ef16dbe565013c58cc104384c61bb001b99f8aec9c4da3a501ae1.