Intercept Unencrypted DNS on Linux

Problem Domain Name System (DNS) is the protocol that computers use to translate domain names like kasad.com into IP addresses like 140.82.7.10. But unlike most protocols on the internet, DNS is not encrypted. This means that anyone can see—or worse, modify—your DNS lookups. Solution DNS over TLS DNS over TLS (a.k.a. DoT) is a way to encrypt DNS traffic using TLS. DoT is to DNS as HTTPS is to HTTP. The solution to the problem above is for everyone to use DNS over TLS....

May 22, 2022 · 7 min · Kian Kasad

SRVUSD-BYOD Network Credentials

If you’re simply looking for a tutorial on how to connect your device to the network securely, go to the Tutorials section. Network info The network uses WPA Enterprise with WPA-PEAP and MSCHAPv2 for authentication. The root CA certificate is provided in the Certificates section. Connection details Name Value Security mode WPA/WPA2 Enterprise Authentication Protected EAP (PEAP) CA certificate see Certificates section Domain srvusd.k12.ca.us (or possibly RADIUS-DC2.srvusd.k12.ca.us) Inner (Phase 2) Authentication MSCHAPv2 Identity (username) STUDENTS\######, where ###### is your student ID number Password Your district password Tutorials The tutorials provided here detail how to connect to the SRVUSD-BYOD network securely (i....

August 31, 2021 · 5 min · Kian Kasad