rethink-app

I'm going by the bugreports I see for a FOSS app I develop: https://github.com/celzero/rethink-app/issues/962 See: https://source.android.com/docs/security/test/memory-safety/...

I'll point you to the FOSS work I do [0] so that serves your point #3. As for #1, that's an inherent limitation with the APIs. As for #2, it depends on the economics. Most such tools (NetGuard, TrackerControl) are available free of cost with an option to sponsor the project. From experience, I can tell that no one really sponsors or donates. [0] https://github.com/celzero/rethink-app

> The only regret with rdns is that it’s either using that, or a VPN—from how I understand it. This is an unforunate limitation imposed by Android (for good reasons I must add). We're fixing up our network stack to shoulder in WireGuard; should land in a month or two. With that, one would be able to upstream connections to any WireGuard endpoint: https://github.com/celzero/rethink-app/issues/52 > rdns is an awesome app, I am unsure why it’s not more widespread Thanks for your kind words. There may be other reasons, but the surprising one is (going from what we see on other forums and emails that we get), folks are reluctant to trust a security / privacy product that's made by Indians.

DoT is DNS over TLS: https://techdocs.akamai.com/etp/docs/configure-dot-doh, https://www.cloudflare.com/learning/dns/dns-over-tls/, https://developers.google.com/speed/public-dns/docs/dns-over..., https://en.wikipedia.org/wiki/DNS_over_TLS Android ≥ 9 natively supports DNS over TLS: https://android-developers.googleblog.com/2018/04/dns-over-t... So does iOS ≥ 14: https://developer.apple.com/documentation/networkextension/d..., https://support.quad9.net/hc/en-us/articles/360057889591-Set... The link you’re referring to, https://github.com/celzero/rethink-app, supports DNS over Tor, but does not call it “DoT”. It does not support DNS over TLS (https://github.com/celzero/rethink-app/issues/441), and it is not something that phones have built-in.

For folks looking to bypass these rudimentary DPI blocks, you don't really need a VPN. DoH + one of these should be enough On Windows: - GoodbyeDPI: https://github.com/ValdikSS/GoodbyeDPI (https://ntc.party/c/community-software/goodbyedpi/8) On Mac / Linux: - GreenTunnel: https://github.com/SadeghHayeri/GreenTunnel (https://www.npmjs.com/package/green-tunnel) On Android: - Intra: https://github.com/jigsaw-code/intra (https://play.google.com/store/apps/details?id=app.intra) - (I co-maintain this) Rethink DNS + Firewall: https://github.com/celzero/rethink-app (https://play.google.com/store/apps/details?id=com.celzero.br...)