0

CNAME cloaking to bypass DNS tracking protection

https://blog.lukaszolejnik.com/large-scale-analysis-of-dns-based-tracking-evasion-broad-data-leaks-included/

does CNAME flattening help with this?  I’m not smart enough to understand the details.

6 replies

null
    • deimos
    • 3 yrs ago
    • Reported - view

    I think NextDNS own "Block Disguised Third-Party Trackers" option blocks these.

      • Calvin_Hobbes
      • 3 yrs ago
      • Reported - view

      @Olivier Poitrey  are you saying  “Block Disguised Third-Party Trackers“ protects against CNAME cloaking?

      • olivier
      • 3 yrs ago
      • Reported - view

      Calvin Hobbes yes, it's the same thing.

      • Ricardo_M
      • 1 yr ago
      • Reported - view

      Olivier Poitrey Is it possible to check the domains calling these disguised third-party trackers or the disguised third-party tracker itself? I am not able to see it the logs or analytics reports

      • Calvin_Hobbes
      • 1 yr ago
      • Reported - view

      Ricardo M the logs do show it when you click the red information dot next to a blocked entry.   If it’s a disguised tracker it displays an arrow pointing to the actual host.

Content aside

  • 1 yr agoLast active
  • 6Replies
  • 420Views
  • 5 Following