728670 - Detect DNS hijack redirection, and allow users to block it

Status: NEW

(Core :: Networking, enhancement, P5)

Description

[dindog]

My ISP DNS will redirect me to a page full of ADs when wrong domain query was requested.
For speed concern, I have to stick with them instead of using OpenDNS or Google's DNS.

Chrome won't. And it achieves that very simple: raises some non-exist domain request in background when Chrome starts, then record the DNS reaction.( mostly 302 redirect) Next time it meets that, block it.

Would love to see this on Firefox too.

Comment 1

[dindog]

Source:

Chrome Connecting To Random Domains On Start? Here Is Why!
http://www.ghacks.net/2012/02/18/chrome-connecting-to-random-domains-on-start-here-is-why/

Comment 2

[Patrick McManus [:mcmanus]]

this is a reasonable feature for the lame-network project, although it has arms-race written all over it.

some philosophical overlap with captive portal detection too.

Comment 3

[Boris Zbarsky [:bzbarsky]]

Note that Chrome's behavior causes serious problems on some networks because it looks exactly like a botnet node looking for a command&control node....

Comment 4

[Stewart Gordon]

Is DNS hijacking also what public wi-fi providers (such as The Cloud) use to redirect all URLs to their websites until you log in?  This is something to consider if we're going to implement such a feature.

Comment 5

[Ben Bucksch (:BenB)]

Depends on the implementation - could be a transparent HTTP proxy, too -, but I think generally yes.

Comment 6

[David Bruant]

I just wanted to CC myself, but it looks like I canceled a needinfo. It wasn't my intention, though. I don't know who it was directed to, so I don't know how to set it back.
Apologies for this issue beyond my control.

Comment 7

[Ben Bucksch (:BenB)]

That must be a bugzilla bug. I removed the needinfo in my comment 5.

Comment 8

[Firefox Bug Husbandry Bot]

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258