Encrypted DNS Can Now Be Tested in Windows 10 Preview -- Redmondmag.com

Encrypted DNS Can Now Be Tested in Windows 10 Preview

By Kurt Mackie
05/14/2020

Microsoft is now enabling people to test Domain Name System (DNS) over HTTPS encryption, known as "DoH," via a recently released preview version of Windows 10.

DoH can be tested by Windows Insider Program participants using Windows 10 build 19628 or higher. That build is already released to so-called "Fast Ring" (early release) Windows Insider Program testers, according to this Thursday Microsoft announcement.

Prospective DoH on Windows 10 testers will have to make specific Registry Editor changes and other configuration changes, as well as point their clients toward certain DNS servers that are participating in this pilot test program. The details are spelled out in this announcement, attributed to Tommy Jenson of the Windows Core Networking team.

Jensen had originally publicized Microsoft's DoH Windows efforts back in November, when he contended he was just describing Microsoft's future plans. Now, DoH on Windows 10 can actually be tested.

DoH is a proposed standard of the Internet Engineering Task Force that adds encryption when clients transmit URL requests over the Internet to servers. DNS Servers resolve these URLs into numerical strings, which are used to reach Web sites. For instance, the plain text "microsoft.com" URL resolves into "13.77.161.179."

Currently, when users request a URL without DoH, it's transmitted in plain text, and it can be seen by Internet Service Providers. The plain-text URLs possibly can be tampered with, too, when attackers carry out so-called "man-in-the-middle" attacks. DoH would encrypt those URLs, adding privacy protections for users, according to the concept.

Since the DoH capability is appearing in a Fast Release build of Windows 10, it's not yet clear if and when DoH will see the light of day in a production-grade release of Windows 10. It's just a work in progress right now.

"While features in the Active Development Branch may be slated for a future Windows 10 release, they are no longer matched to a specific Windows 10 release," Microsoft explained, in its Windows Insider "Flight Hub" document. "This means that builds from the active development branch simply reflect the latest work in progress code from our engineers."

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

Using Configuration Files to Control PowerShell Scripts, Part 2: Building Blocks

Learn how to use PowerShell's GUI capabilities to dynamically create configuration files that enhance script flexibility and usability.
U.S. House Leaders Unveil Bipartisan Strategy for AI Governance and Innovation

On Tuesday, U.S. House Speaker Mike Johnson and Democratic Leader Hakeem Jeffries received the final report from the bipartisan House Task Force on Artificial Intelligence, which outlines essential principles and recommendations to bolster American leadership in AI.
Using Configuration Files to Control PowerShell Scripts, Part 1: The Basics

Learn how to use JSON configuration files to make PowerShell scripts more dynamic, flexible and user-friendly.
Exchange Online Receiving Enhanced Message Trace

Microsoft has announced the public preview of its enhanced Message Trace feature in the Exchange admin center (EAC) for Exchange Online.
Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.