CNAME cloaking to bypass DNS tracking protection

does CNAME flattening help with this? I’m not smart enough to understand the details.

- deimos
- 3 yrs ago
- Reported - view
I think NextDNS own "Block Disguised Third-Party Trackers" option blocks these.
- olivier
- 3 yrs ago
- Reported - view
https://medium.com/nextdns/cname-cloaking-the-dangerous-disguise-of-third-party-trackers-195205dc522a
- Calvin_Hobbes
  
  3 yrs ago
  
  Reported - view
  @Olivier Poitrey are you saying “Block Disguised Third-Party Trackers“ protects against CNAME cloaking?
- olivier
  
  3 yrs ago
  
  Reported - view
  Calvin Hobbes yes, it's the same thing.
- Ricardo_M
  
  2 yrs ago
  
  Reported - view
  Olivier Poitrey Is it possible to check the domains calling these disguised third-party trackers or the disguised third-party tracker itself? I am not able to see it the logs or analytics reports
- Calvin_Hobbes
  
  2 yrs ago
  
  Reported - view
  Ricardo M the logs do show it when you click the red information dot next to a blocked entry. If it’s a disguised tracker it displays an arrow pointing to the actual host.

Content aside