Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#1

Post by HelenePhisher » Tue, Sep 17, 2024, 7:46 PM UTC

Warning: DNS encryption in Little Snitch 6.1 may occasionally fail
obdev.at

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#2

Post by skrrtww » Tue, Sep 17, 2024, 8:01 PM UTC

The title sort of implies this is intentional or privileged to Apple, while it rather seems more like just a bug.

I also wish people would post the FB numbers and the details of their report when they say they've reported things like this.

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#3

Post by asplake » Tue, Sep 17, 2024, 8:03 PM UTC

> Update 2024-09-17, 7:10 p.m.

> After further investigation, we found that this bug has already existed at least since macOS 14.5 Sonoma (maybe even earlier, but we currently don’t have access to an older 14.x system for testing).

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#4

Post by hypeatei » Tue, Sep 17, 2024, 8:05 PM UTC

> After further investigation, we found that this bug has already existed at least since macOS 14.5 Sonoma

Isn't this an inherent risk when attempting to do network stuff in userspace? You're at a very high level so hoping that lower level things comply seems risky if DNS encryption is critical to your use case.

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#5

Post by xyst » Tue, Sep 17, 2024, 8:06 PM UTC

If I recall, Apple deprecated use of certain network apis for third party developers. But Apple’s own apps (App Store) do not have these same restrictions. Thus, when trying to filter network traffic via app firewall via new APIs. It would fail since App Store uses legacy APIs.

Maybe part of this old bug (that I thought was fixed)

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#6

Post by unluckier » Tue, Sep 17, 2024, 8:12 PM UTC

Sequoia also breaks an application's ability to use DNS (or presumably anything UDP-based) if the macOS firewall is enabled, and an app is listed as "Block incoming connections". https://waclaw.blog/macos-firewall-blocking-web-browsing-aft...

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#7

Post by bradgessler » Tue, Sep 17, 2024, 8:16 PM UTC

I’ve had issues using the Resolv library in Ruby when I’m connecting to the internet via a tethered iPhone. Never ran into that until Sequoia. I wonder if that’s related?

TBH I’m too lazy to dig in and find out. Has anybody else run into this issue?

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#8

Post by unluckier » Tue, Sep 17, 2024, 8:18 PM UTC

bradgessler wrote: post #7

I’ve had issues using the Resolv library in Ruby when I’m connecting to the internet via a tethered iPhone. Never ran into that until Sequoia. I wonder if that’s related? TBH I’m too lazy to dig in and find out. Has anybody else run into this issue?

See: https://waclaw.blog/macos-firewall-blocking-web-browsing-aft...

If disabling the firewall (for testing) solves this problem, this is likely your issue.

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#9

Post by elashri » Tue, Sep 17, 2024, 8:20 PM UTC

I maybe imagining but I feel like deja vu that there will be a problem with DNS that would affect Little snitch., Mullvad and others with new releases of iOS and Mac. If true I would really question what apple is doing during their months long developer and beta testing.

Re: Warning: DNS encryption in Little Snitch 6.1 may occasionally fail

#10

Post by pkulak » Tue, Sep 17, 2024, 8:22 PM UTC

skrrtww wrote: post #2

The title sort of implies this is intentional or privileged to Apple, while it rather seems more like just a bug. I also wish people would post the FB numbers and the details of their report when they say they've reported things like this.

Yeah, if it was intentional, it would probably be a hard-coded, encrypted URL. Some devices are starting to do that to get around ad blocking.