Wishlist

Config-Mode

Use status page design

It is much cleaner and modern and we could offer a more streamlined experience that way.

DNS-Resolver

Caching Resolver with DNSSEC-Support

https://github.com/freifunk-gluon/gluon/issues/1362

DNS-over-TLS Support

Android 9 adds built-in support for DNS over TLS, automatically upgrading DNS queries to TLS if a network's DNS server supports it.

https://android-developers.googleblog.com/2018/08/introducing-android-9-pie.html

• offer TLS (using which pki?) on port 853
• encrypt communication with forwarding resolvers (trusted root?)

Examples

unbound + odhcpd (https://blog.cloudflare.com/dns-over-tls-for-openwrt/)

WiFi

Opportunistic Wireless Encryption

Mitigate client exposure to simple sniffing attacks.

• Requires another VAP during the transitional period.