Skip to content

HNS DANE Browser 0.3.16

Choose a tag to compare

@denuoweb denuoweb released this 14 Jul 17:57

HNS-name authoritative DoH

  • Adds generic proof-pinned RFC 8484 authoritative DoH for single-label HNS endpoints such as https://denuoweb:8443/dns-query, using verified HNS GLUE and proof TLSA pins without requiring an ICANN domain or WebPKI.
  • Uses the availability order owner ADoH, authoritative UDP/TCP 53, then the configured third-party HNS DoH resolver in Compatibility mode; Strict mode omits only the last fallback.
  • Shows the successful transport explicitly: DANE via ADoH, DANE via DNS53, DANE via 3rd DoH, Stateless DANE, or DANE via ICANN DoH, with equivalent HTTP labels.
  • Hardens resolver provenance and trace accuracy and prevents the internal security-path header from reaching Chromium or page content, including WebSocket upgrades.

Signed APK SHA-256: bcc4c5cc892ef16dbe565013c58cc104384c61bb001b99f8aec9c4da3a501ae1.