dns-worker 1.1.0 → 1.1.1-canary.0b671ea
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -18
- package/dist/serverfull.mjs +110 -16002
- package/dist/serverfull.mjs.map +7 -0
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
<img src="https://raw.githubusercontent.com/Obein/DNS-Worker/main/web/src/assets/obex_cat_eye_logo-256.webp" alt="DNS Worker Logo" width="128">
|
|
3
3
|
<h1>DNS Worker</h1>
|
|
4
4
|
<p>Privacy-First Protective DNS Resolver & DoH / DoT Server</p>
|
|
5
|
-
<p>Protect your first hop on the internet
|
|
5
|
+
<p>Protect your first hop on the internet</p>
|
|
6
6
|
<p align="center">
|
|
7
7
|
English | <a href="README_zh-CN.md">中文 (简体)</a> | <a href="README_zh-TW.md">中文 (正體)</a>
|
|
8
8
|
</p>
|
|
@@ -51,23 +51,6 @@
|
|
|
51
51
|
|
|
52
52
|
---
|
|
53
53
|
|
|
54
|
-
## 🔐 Advanced Privacy: Local-First & Post-Quantum E2EE
|
|
55
|
-
|
|
56
|
-
DNS Worker redefines personal DNS observability by combining local-first browser computation with cutting-edge post-quantum cryptography:
|
|
57
|
-
|
|
58
|
-
### ⚡ Local-First Browser SQLite (OPFS + WASM)
|
|
59
|
-
* **Instantaneous 0ms Queries**: Resolution logs and analytical charts render immediately from an in-browser SQLite database powered by Origin Private File System (OPFS) and Dedicated Web Workers.
|
|
60
|
-
* **Quota Preservation & Offline Analytics**: High-frequency filtering, pagination, and multi-dimensional analytics run locally without issuing remote D1 read queries, drastically reducing Cloudflare D1 quota consumption and enabling full offline inspection.
|
|
61
|
-
* **Smart Bidirectional Sync**: Automatically reconciles local storage with remote D1 in the background with zero UI freeze.
|
|
62
|
-
|
|
63
|
-
### 🛡️ Post-Quantum End-to-End Encryption (P256-MLKEM768)
|
|
64
|
-
* **Zero-Knowledge Cloud Storage**: Sensitive log fields (domains, client IPs, answers, geo locations, and upstream servers) are encrypted before reaching persistent cloud storage. Cloudflare Workers and D1 database store only ciphertexts.
|
|
65
|
-
* **Quantum-Resistant Hybrid Lattice KEM**: Adopts the NIST FIPS 203 standardized **P256-MLKEM768** (ML-KEM-768 + ECDH P-256) hybrid algorithm, defending user query logs against future "Harvest Now, Decrypt Later" quantum attacks.
|
|
66
|
-
* **Decoupled Hourly Envelope Encryption**: Automatically encapsulates and provisions hourly Data Encryption Keys (DEK), compressing KEM database overhead by ~80% while sustaining hot-path pipeline encryption throughput of **20,000+ queries/second**.
|
|
67
|
-
* **Hardware Passkey Protection**: The private key seed is wrapped with hardware Passkeys (WebAuthn PRF) and single-use self-rotating Recovery Keys; no plaintext secret ever touches the server.
|
|
68
|
-
|
|
69
|
-
---
|
|
70
|
-
|
|
71
54
|
## 🖼️ Quick Look
|
|
72
55
|
|
|
73
56
|
| User Login |
|