Security News > 2022 > July > Google Adds Support for DNS-over-HTTP/3 in Android to Keep DNS Queries Private
Google on Tuesday officially announced support for DNS-over-HTTP/3 for Android devices as part of a Google Play system update designed to keep DNS queries private.
To that end, Android smartphones running Android 11 and higher are expected to use DoH3 instead of DNS-over-TLS, which was incorporated into the mobile operating system with Android 9.0.
HTTP/3, the first major upgrade to the hypertext transfer protocol since HTTP/2 was introduced in May 2015, is designed to use a new transport layer protocol called QUIC that's already supported by major browsers such as Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari.
The low-latency protocol, developed by Google in 2012, relies on the User Datagram Protocol rather than the Transmission Control Protocol to make HTTP traffic more secure and efficient, not to mention reduce the time it takes to establish connections between two endpoints.
"While using HTTPS alone will not reduce the overhead significantly, HTTP/3 uses QUIC, a transport that efficiently multiplexes multiple streams over UDP using a single TLS session with session resumption," Matthew Maurer and Mike Yu from the Android team said in a post.
It's worth pointing out that Google added Rust support to Android in April 2021.
News URL
https://thehackernews.com/2022/07/google-adds-support-for-dns-over-http3.html
Related news
- Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection (source)
- Google brings better bricking to Androids, to curtail crims (source)
- Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale (source)
- How to enable Safe Browsing in Google Chrome on Android (source)
- Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System (source)
- Google patches actively exploited Android vulnerability (CVE-2024-43093) (source)
- Google fixes two Android zero-days used in targeted attacks (source)
- Google's mysterious 'search.app' links leave Android users concerned (source)
- Week in review: Zero-click flaw in Synology NAS devices, Google fixes exploited Android vulnerability (source)
- Google launches on-device AI to alert Android users of scam calls in real-time (source)