0

CNAME cloaking to bypass DNS tracking protection

https://blog.lukaszolejnik.com/large-scale-analysis-of-dns-based-tracking-evasion-broad-data-leaks-included/

does CNAME flattening help with this?  I’m not smart enough to understand the details.

6replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
  • I think NextDNS own "Block Disguised Third-Party Trackers" option blocks these.

    Like 1
    • @Olivier Poitrey  are you saying  “Block Disguised Third-Party Trackers“ protects against CNAME cloaking?

      Like
    • Calvin Hobbes yes, it's the same thing.

      Like
      • Ricardo M
      • Ricardo_M
      • 6 mths ago
      • Reported - view

      Olivier Poitrey Is it possible to check the domains calling these disguised third-party trackers or the disguised third-party tracker itself? I am not able to see it the logs or analytics reports

      Like
    • Ricardo M the logs do show it when you click the red information dot next to a blocked entry.   If it’s a disguised tracker it displays an arrow pointing to the actual host.

      Like 1
Like Follow
  • 6 mths agoLast active
  • 6Replies
  • 298Views
  • 5 Following