Apple Intelligence now features Image Playground, Genmoji, Writing Tools enhancements, seamless support for ChatGPT, and visual intelligence.

Apple Intelligence has also begun language expansion with localized English support for Australia, Canada, Ireland, New Zealand, South Africa, and the U.K. Learn more >

You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Unecrypted IPv4 DNS server

What does "the IPv4 DNS server 192.168.1.1 is unencrypted" mean? Is it the issue of the insecurity of sending requests to go to a particular website address in text - being thus insecure? Do I address this through my browser's security settings?

Mac Pro

Posted on Mar 5, 2022 7:48 PM

Reply
2 replies

Mar 6, 2022 12:22 AM in response to Insitu22

Read the details about DNS security .. easy to find.

eg. https://blog.cloudflare.com/dns-encryption-explained/


Using unencrypted DNS allows someone (in the middle, ie ISP, coffee shop, home network) to track your web browsing.


Is it the issue of the insecurity of sending requests to go to a particular website address in text - being thus insecure?

Yes.

It is possible to also inject fake addresses to get you browsing fake websites for nefarious purposes.

Or giving you even more ads.. from everyone along the route.


Do I address this through my browser's security settings?

In some cases yes. Or at the OS level.


https://www.cnet.com/tech/computing/safari-gets-new-encryption-option-for-network-privacy-on-iphones-macs/


I would note if you are doing normal web browsing etc.. you are being tracked anyway. Cookies and all the social media and search engines etc are definitely compiling a comprehensive list of your shopping needs.

For most people this is kinda irrelevant but if you visit the dark web.. well tracking is what authorities are doing.. as well as the nasties.

192.168.1.1 is just your DNS cache in the router.. It helps to speed up your regular searches. This is mostly irrelevant today with very high speed low latency broadband.. but if you are stuck on low speed/high latency connections does help.


You can easily switch to more secure DNS server

https://au.pcmag.com/security/62160/how-and-why-to-change-your-dns-server

Mar 6, 2022 10:25 AM in response to Insitu22

By default any DNS requests going outbound from your home network router will first travel to your ISP's DNS servers. For most consumer-grade routers these requests are unencrypted. Pro-consumer or business-grade routers tend to offer some types of DNS encryption for that link. Alternatively, you can employ a DNS proxy, like Pi-hole or AdGuard Home which can be configured to send encrypted DNS requests or even by-passing your ISP's servers altogether. Be aware though, that your ISP's servers are just one step along the path.


FYI, encrypted DNS uses the DNSSEC protocol for submitting requests. However, please be aware that there are no perfect solutions to getting encrypted DNS requests through the Internet and back to your computer that exists today.

Unecrypted IPv4 DNS server

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.