• @Lem453@lemmy.ca
    link
    fedilink
    English
    113 days ago

    You do not need anything else. DNS requests are all sent over Wireguard with encryption

    • @DynamoSunshirtSandals@possumpat.io
      link
      fedilink
      English
      112 days ago

      Excellent to have confirmation, thanks. What about the VPN connection handshake? I always assumed it was OK over non-SSL, because the exchange should use signed keys. But that is quite an assumption on my part.

      • @Lem453@lemmy.ca
        link
        fedilink
        English
        212 days ago

        Wireguard uses public and private keys which are designed from the ground up to be used over plain text to establish the handshake so it isn’t an issue. Same idea with ssh keys and ssl keys