QUIC Protocol

[gcpmusic]

Hi
I just learned about the Google QUIC Protocol and wander if DNSCrypt-Proxy is able to filter and block the connections.

Anyone ?

Thank you in advance.

[jedisct1]

Before using QUIC or any other protocol, a DNS query is made.

And dnscrypt-proxy handles DNS. So if a name is blocked, it will be blocked before the application decides to use HTTP, QUIC or something else.

[ignoramous]

How about DNSCrypt over QUIC?

Curious if QUIC's encryption layer would it make DNSCrypt more expensive? May be Anonymized Relays could be used as a QUIC "tunnel" that proxies traffic to actual resolver. Relays know the Client but not the contents (since encrypted by the DNSCrypt protocol) and Resolvers know the contents but not the Client.