Skip to content
Frank Denis edited this page Jan 31, 2018 · 30 revisions

Server stamps encode all the parameters required to connect to a secure DNS server as a single string. Think about stamps as QR code, but for DNS.

DNSCrypt stamps

Format:

base64url(0x01 || props || len(addr) || addr || len(pk) || pk || len(providerName) || providerName)

props is a small-endian 64 bit value that represents informal properties about the resolver. It is a logical OR combination of the following values:

1: server supports DNSSEC 2: server doesn't keep logs 4: server doesn't intentionally block domains

For example, a server that supports DNSSEC, stores logs, but doesn't block anything on its own should set props as the following 8 bytes sequence: { 0x05, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }.

len(x) is the length of x, as a single byte. Strings do not have to be zero-terminated.

Clone this wiki locally