Android To Have A Feature Encrypting Website Name Requests

By Nathaniel Artosilla, Christian Post Contributor Tuesday, October 24, 2017

In an effort to improve the security of its Android mobile operating system, Google is testing a feature called DNS (Domain Name Server) over TLS (Transport Layer Security). The new feature protects users from hackers who might be spying on a site's traffic and is currently fielding comments at the Internet Engineering Task Force (IETF), an Internet standards group.

Recently, Google revealed that HTTPS use on its own products is at 89 percent overall compared to just 50 percent three years ago. Now, the search giant is adding an extra layer of security to its mobile OS by adding DNS over TLS support to the android.

DNS often referred to as the Internet's phone book translates domain names into machine-readable IP addresses. Users cannot see this process take place but essentially applies to every website they visit.

While TLS hides users' DNS requests, it does not give full privacy protection as Internet service providers (ISP) can still see the IP address they are communicating with. With DNS over TLS protocol, DNS inquiries are protected on the same level as HTTPS effectively blocking any would be a hacker from logging or otherwise seeing the websites that users visit.

Still, the feature is not a substitute for the privacy protection offered by Virtual Private Network (VPN) apps as ISPs can still access the IP addresses. Also, most DNS don't support this feature and Android users will still need to change the mobile DNS on their phone, which requires root access.

If privacy is of utmost importance, then doing the extra work necessary to facilitate DNS over TLS will probably be worth it. Otherwise, users can just stick to their unrooted device and browse as usual.

Google is also improving the security of third-party apps with a new program that rewards people for discovering vulnerabilities and bugs. So far 13 of Android's most popular apps are in the program with Google offering $1,000 for every bug.

Interested parties can find out more from the program page on Google's website.