Frank Denis

Thu Feb 15 16:10:48 2018 daemon.info dnscrypt-proxy[31480]: dnscrypt-proxy Unsupported certificate version: 2.0 The libsodium version this dnscrypt-proxy binary was linked against is very old, and doesn't support the required crypto...

The current stable version of dnscrypt-proxy (2.0.0) doesn't require libsodium any more :)

The precompiled binaries should work out of the box on LEDE. Been running it on a TPLink Archer C7 since the very first version with no changes. Packages for Asus...

You can write a new implementation in a different language. More implementations would be great!

It took about 15 minutes to write the first version of dnscrypt-proxy v2 https://github.com/jedisct1/dnscrypt-proxy/commit/b076e01f7afe6d2f625c00c7ffb78caf813c56ac It took probably about the same time to write this in Python https://github.com/tresni/dnspython-dnscrypt

Version 2 of the protocol is what all (with one exception) resolvers use since 2013. It hasn't changed. dnscrypt-proxy is a client. I don't maintain the legacy version of this...

A quick and ugly way to address this could just be to skip a `::ffff:` prefix from `answer_str` before calling `fpst_str_starts_with_existing_key()`. I don't think anything else starting with `::ffff:` would...

Hi @jaromil I was planning to add support for the old plugin API, mainly for you. But if you think your code could be rewritten in Go, that would make...

`O_NOFOLLOW` was intentional :) We are writing user-controlled data to a file, accessed with root privileges. Replacing that file with a link is all it takes to completely own the...

Can you update the documentation (`README.TLS`) as well as the example configuration file, and explain that this should be only used with internal CAs?