yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] MrT69:
I totally agree to you!!!

At the moment I have the problem all this annoying "don't use it" was the reason why everything is growing so damn fast. If this will grow with the same speed then I will run in real troubles. From my point of view only guys from the ads industries are hard against keweon because it's incredible working. If there would be even 10.000 people who vote against keweon - I never would shut down. I really give a sh*t on them.

If someone ever has a better idea or a better solution then everything is welcome. I have to admit that I'm not really happy with the certificate either. But as long as nobody has a better solution it works at least. I'm always open for doing it better, stronger or harder and I'm aware I'm not getting any younger. If someone keeps complaining that this or that is bad and doesn't even provide a better solution then I won't take it seriously.

This is the current statistic from August 2019 - more then 450 GB native DNS traffic is really a heavy **** and these are just the physical instances. And by the way none of the current existing DNS Filter provider is actually offering DNSSEC. AdGuard, OpenDNS and who ever provide such a service can't do this and actually I'm working on this to provide DNSSEC even for keweon.

At the moment it's only working for one or 2 hours then the server will stand still. That's my problem at the moment but you can be sure I will fix this.

At this point a million times thanks to all of the users for your trust into me and keweon!​
[Android Software/Hacking General [Developers Only]] MrT69:
keweon Cert change

I have adjusted the certificate because the "old" one have had caused troubles with iOS and MacOS. I reduced the validity period to 2 yrs to be conform with Apple and Google. I also adjusted the key from 1024 to 2048 to be also conform with actuall certificate requirements.

I also adjusted the response speed and in summary I'm happy with it. The actuall Root Certificate is still valid and you don't need to do any changes.

Have fun and enjoy it.
[Android Software/Hacking General [Developers Only]] totalcmdext:
In iOS 13.1 within application there is ads (apple ads). In the past this was block from keweon.
[Android Software/Hacking General [Developers Only]] MrT69:
iOS 13.1?? Seriously?

May be there are new ads providers inside? Can you tell me which App or more details about the App?

I need to take a deeper look at this.
[Android Software/Hacking General [Developers Only]] MrT69:
Adblock Question:

I'm not that music fan but what's about the idea to block RADIO ads too?

Do you think it is necessary to block them or do you think it's OK to leave this as it is?

And don't bother me with "this is not possible". It is ;)
[Android Software/Hacking General [Developers Only]] jyoti.id:
Its already blocked. We use JioSaavn & Gaana app with dns on always, it actually skips the ads very well & gives us a premium member feel ?
[Android Software/Hacking General [Developers Only]] aminmigo88:
install failed help plz
[Android Software/Hacking General [Developers Only]] MrT69:
What fails on your side? Tell me more ;)
[Android Software/Hacking General [Developers Only]] MrT69:
Ohhh... I wasn't aware of this ;) Never tested this :)
[Android Software/Hacking General [Developers Only]] micgeb:
Focus Videos don't work. Have you any changed?
[Android Software/Hacking General [Developers Only]] micgeb:
Sorry for second post. The xda app has not load the screenshot.
[Android Software/Hacking General [Developers Only]] MrT69:
Adblock detection is a NoGo.

As soon as I'm back home I will take a look at this.

Edit:

It's working here in Chrome. Without Ads and Videos are working.

Can you send me the direct link to your broken vide please?

Edit2:

It's not working within the App. Damn...
[Android Software/Hacking General [Developers Only]] jyoti.id:
Links so that you can try & make it better ?

JioSaavn: https://play.google.com/store/apps/details?id=com.jio.media.jiobeats

Gaana: https://play.google.com/store/apps/details?id=com.gaana

2 things: The App Spotify (https://play.google.com/store/apps/details?id=com.spotify.music) doesn't skip ad/get AdBlock with keweon. & Are the adult sites blocked with keweon?
[Android Software/Hacking General [Developers Only]] MrT69:
Thanks a lot!!! I will take a deeper look at them ;)

Spotify should work ads free. On my mobile it's working without ads.

And adult sites are with the current system not blocked. This will be a part of a different solution. keweon kidSafe - a violence and porn free Internet ;) Everything else would be censorship. That's not my way.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Ok. I will try Spotify again. & About the Porn site, there are lots of sites that are not opening, even with dns on.
[Android Software/Hacking General [Developers Only]] MrT69:
I have a huge table which contains "unknown threats" and I guess they are part of it. If you see such a false positive site then copy this to a TXT file and send this to

whitelist@keweon.de

Would be great if you add a #porn tag at the end of the URL. This would be really helpfull.

Keep in mind that only the TXT file will arrive. The rest of the mail will be automatically dropped and also any additional text.
[Android Software/Hacking General [Developers Only]] NightFox029:
Hey bro I didn't install the Keweon certificate on my android,im only using keweon DoT on android pie secure dns,but im getting security error on some websites,when i check,it shows keweon certificate how is this possible? I thought keweon certificate only be used,if I install root certificate?whats going on?
[Android Software/Hacking General [Developers Only]] micgeb:
Quizduell is no longer running. Yesterday there are running.

https://play.google.com/store/apps/details?id=se.feomedia.quizkampen.de.lite
[Android Software/Hacking General [Developers Only]] MrT69:
No worry, the Cert can only be installed in this different ways:

1. By yourself

2. If I would have Mobile Device Management and your device is connected to

3. By using X-Browser because the DEV (whoever this is) has this embeded into the Browser

Via remote it's not possible to install a certificate within any way.
[Android Software/Hacking General [Developers Only]] NightFox029:
Then why its showing keweon on the screenshot?
[Android Software/Hacking General [Developers Only]] MrT69:
I don't know because airtel.in is not on my blacklist.
[Android Software/Hacking General [Developers Only]] MrT69:
I was running a huge update and in 15 to 30 minutes also your game should run again. ;)
[Android Software/Hacking General [Developers Only]] MrT69:
OK, first at all I need to say sorry because it was on the blacklist. Change this IP Addresses to 127.0.0.1, add it to the HOSTS files and airtel.in will not work.

52.198.75.0 ins-104.inscname.net VIP01-BOM02-tata.inscname.net

35.154.254.227 ins-104.inscname.net nlb-7a705fdae204e424.elb.ap-south-1.amazonaws.com

Via DNS it was not possible to see but I was able to log it out on my server. The domain was not working and after doing an update I have had now the chance to take a deeper look.

That's incredible how they are doing this.

But what I don't understand is the certificate. If you have installed it then this error and a blank page is the confirmation that the Site is blocked. What I really don't understand is why it is active allthough you don't have it installed.

I really have no clue about this because there is never ever a thing which will force the installation. I always want that user will do it by there own because the should be aware of this.
[Android Software/Hacking General [Developers Only]] NightFox029:
That's my question as well,coz I don't have any memory of downloading and installing any certificate in my device,that's why I got little scared.BTW now suddenly airtel.in website working without any error,now its showing "digicert" as CA instead of "keweon CA",so I guess problem is solved??
[Android Software/Hacking General [Developers Only]] MrT69:
Yes. That airtel problem is now solved. Regarding the certificate it must be installed by you because there is actually no way to install this via remote. If it's a custom ROM then ask the Dev if he had embedded the cert.

The keweon Cert anyway do nothing more then giving a blank page for sites which are on the black list and you do a HTTPS call.
[Android Software/Hacking General [Developers Only]] NightFox029:
Thanks for your efforts,I trust your service 100%,its just that seeing keweon cert without me installing it kinda spooked me,yes i'm using custom ROM,I will ask the rom dev if he did something. :)
[Android Software/Hacking General [Developers Only]] MrT69:
Million time thanks for this word.

And there must be an explanation because it's technically impossible to add a cert by just visiting a website for example. :)
[Android Software/Hacking General [Developers Only]] jyoti.id:
Done it. ?
[Android Software/Hacking General [Developers Only]] MrT69:
Already done ;)
[Android Software/Hacking General [Developers Only]] jyoti.id:
It's stuck on loading. Not showing error & not even opening the page, stuck in between loading.
[Android Software/Hacking General [Developers Only]] aminmigo88:
it said that's not a magisk module.
[Android Software/Hacking General [Developers Only]] MrT69:
Can you send me an example link? But do this please either by TG, PM or Mail.

I need to see what's going wrong.
[Android Software/Hacking General [Developers Only]] MrT69:
Which ZIP you try to install? I have to pass with magisk because I can't support it.

I need to stay on stock ROM. :(

Do you have Android9? Can you use private DNS? It's a lot more easier than magisk.
[Android Software/Hacking General [Developers Only]] jyoti.id:
Tg!? Id
[Android Software/Hacking General [Developers Only]] MrT69:
I have already seen the problem during lunchtime outside the office ;)

Should be not a big problem to solve this. :good:
[Android Software/Hacking General [Developers Only]] jyoti.id:
? Ok. Thank you
[Android Software/Hacking General [Developers Only]] MrT69:
OK, this "yespornplease" sites causes 2 troubles. Ads and ads within the videos. ;)

You need to press the play button 2times. The first hit will play the ads (normaly) the second one plays the videos.

I also disabled all the Popup crap and redirectors as far as I have found them. There might be additional but first at all check it if the site will better work now.

I'm doing a new "trick" and let's see if this will work. ;) Actually I'm still working on an update but I guess within 1 hour from now it's done.

EDIT:

Done! Feedback please ;)

EDIT 2:

Videos wasn't working but the entire ads are gone. Fix in upload... ;)
[Android Software/Hacking General [Developers Only]] jyoti.id:
Right now its not opening. It was before.
[Android Software/Hacking General [Developers Only]] aminmigo88:
im in stock mm samsung note 4 , i used the in the link you gave me.

can it be flashed via twrp?
[Android Software/Hacking General [Developers Only]] MrT69:
If you have a Stock ROM then I recommend it to do it via DNS Changer App or via Nebulo. That's much more easy then Magisk.
[Android Software/Hacking General [Developers Only]] Blackeyedangel:
I tried using Dns.keweon.center on Android 10 beta private dns option but still see ads, is there another server that i sould be using or am I doing something wrong?

Adguard dns works fine but still loyal to keweon :)

Edit: seems that the wifi at work is blocking keweon or something, when i switch to 4g no ads, wifi: yes ads

So not keweon problem It seems
[Android Software/Hacking General [Developers Only]] Shadow337:
MrT69

Do You know any way to speed up page loading? I have 100 Mb/s of fiber and i think one of most stable browser, Brave.

My pages load like 3-6 seconds

Im using keweon dns on redmi note 5 pro (whyred)
[Android Software/Hacking General [Developers Only]] MrT69:
First at all, thanks a lot for this.

I can't believe this.

That means someone is afraid of me.

If Adguard works it means that my addresses are on some kind of blacklists.

And that tells me someone is really heavy afraid of me. This entire project is just a fu*king "Proof of concept and technologie". I just want to proof a safer Internet for all is possible but therefore they need to think about security within a complete different way then now.

What the hell will happens when I ever have a real infrastructure??

I really can't believe this but I'm feeling honored about this. This shows to me everything is working. And it seems it's working better then I ever have had expected this.

Thanks a lot. Million times thanks again!!!
[Android Software/Hacking General [Developers Only]] MrT69:
The entire project is just a Proof of concept. That means it should demonstrate everything is working.

Slow DNS Server will also slow down the speed of the Internet and this will cause this effect. I know that my DNS Servers are almost the slowest within the world.

They are just VPS, they are low end Hardware and also the Line is just a normal Data Center (Hetzner). This is was the reason why I'm searching for an Investor to provide a better performance.

40 HP G10 Server, Cisco Switches, a Firewall with a package delay below 2 micro seconds and a redundant 10GBit carrier connect. I already have everything planned and I also know the prices but I'm still missing the money.

As I have had this within the Equinix Data Center in Munich in 2016 the public DNS Server was even faster then my DNS Server within my home network. A friend of mine give up his company and so he handed me over his old infrastructure for 10 months because it was already paid.

I know to do it much more faster but my problem is just the money. I'm spending round about 700 euro per month and if I would have the Budget of Google or Cloudflare then this would be a complete different performance.

In summary I know it how to do it faster but at the moment I can't do it just because of financial reasons.
[Android Software/Hacking General [Developers Only]] jawz101:
This sounds frightening.

Get people to point to your DNS servers. Check.

Have them install an SSL cert. Check

Then you can see what DNS lookups they do and if you see one for a site with a login screen, create a copy of that login screen where they just type in their credentials and when they click login you collect their credentials and remove the redirect, and send them back to the legit page. It comes off looking as a glitch but you've got their login.

That's how I see this playing out. And the more chatty the person is just raises that red flag even more.
[Android Software/Hacking General [Developers Only]] MrT69:
And don't forget that I'm responsible for the clima problem just because of the certificate.
[Android Software/Hacking General [Developers Only]] MrT69:
If someone still complains about me or keweon - do it, because it's OK for me. But my goal is to protect and it's not longer possible to do it within the all the known common way.

Exactly this Story is one of the reason why I'm so hard against any data collection. This is the reason why I never would do it and why I never accept any kind or way of data collection.

The US DoJ forced Apple and Google for Data collection about an App. I'm not a friend about a free sale of weapons and you can discuss it for hours. Weapons lead to fear, fear to hate and hate will finally lead to the dark side of the force.

The question is who decide what is interesting to collect, where do they start and where to they stop? This is not my understanding of privacy or freedom.

This is a giant "f*ck all users".

This must be stopped. And I give a huge sh*t if this is ordered by the POTUS or by the DoJ. This is nothing more then a huge f*ck you to democracy and freedom.

Read this:

https://www.engadget.com/2019/09/06/doj-apple-google-demand-user-data/
[Android Software/Hacking General [Developers Only]] jyoti.id:
It's opening via Opera Beta but not with Google Chrome.
[Android Software/Hacking General [Developers Only]] MrT69:
I can't confirm this. It's working within my Mobile, my Laptop and I have installed there also my certificate.

I was also testing it with Andyroid and it's also working. The problem is as long as I don't see any issues I can't fix it.

Do me a favor and clear the entire cache from Chrome and give it a try again.
[Android Software/Hacking General [Developers Only]] jyoti.id:
??☹️ did, but Still no help
[Android Software/Hacking General [Developers Only]] jawz101:
Tell me- what does the SSL certificate do with a Domain Name System server? And why is your DNS server the only one in the world that would suggest installing one?

If it's just resolving a domain name to an IP address and handing that IP address off to me so I can get to my destination, the green padlock in my browser should be for the certificate of the site I'm visiting. The whole point of the SSL certificate validation is to tell me I'm where I intended to go.

What DNS server software is this that requires the SSL certificate?
[Android Software/Hacking General [Developers Only]] NightFox029:
I think it require if you want to remove the empty space of ad after the dns blocking ad server,dns server cant get into https traffic they need root certificate to get into https traffic and remove empty spaces and https ads,Adguard dns also have CA for this purpose,if you trust the provider you can install CA or you could just use dns only,but one should be carful when installing unknown certificate in their devices bcoz if the CA provider is bad person or some kind of spying agency,they will know exactly what are you doing on the internet.
[Android Software/Hacking General [Developers Only]] MrT69:
The Cert has nothing to do with the DNS Service and both are working complete independent.

Because of Adblocking HTTPS calls create errors within the Browser, causes ugly holes and it slows down the speed because of errors.

To get rid of all the errors and clean up websites just only for this the certificate will work.

A few ads provider working also with HTTPS error detection to see if you will do ad block or not.

A former company in Germany went bankrupt because they wasn't able to provide a clean HTTPS support.

https://eblocker.com

I also don't force anyone to use it. If you are fine just by adblock then use the DNS only. If you want to clean up everything and have a faster page load then use the Cert.

I'm aware that using a Cert requires trust but it's nothing different compared to a VPN. You will only use it if you trust the provider.

The entire Project is still within a Test and if you have a better solution or a better Idea then everything is welcome. I just want to demonstrate protection within the Internet is possible. It's not just about ads blocking. It's also privacy, Data spying and a lot of other evil things.

Whatever you see or whatever is possible it's always up to you to decide.
[Android Software/Hacking General [Developers Only]] MrT69:
Can't believe this... strange thing.

Let me do some tests.

EDIT:

Whatever I do it's working. Is it possible for you to connect to my server at home? I just want to see what's going wrong.

If yes then PM me pls.
[Android Software/Hacking General [Developers Only]] rmn.br:
Hi, I'm getting problems with Reddit app on Android when using keweonDNS trough Blokada, as soon as I swich to AdGuard DNS, Reddit is working again. Reddit can be opened but topics didn't load. Somebody know where can be problem? Problem is also with certificate.
[Android Software/Hacking General [Developers Only]] GamaShani:
Hey brother, can you please tell me how to use KeweonDNS with Blockada? :)
[Android Software/Hacking General [Developers Only]] rmn.br:
Have look on screenshot, keep on mind u need download Blokada from XDA Labs, on Play Store is different version...
[Android Software/Hacking General [Developers Only]] MrT69:
Can you please explain why the Cert causes problems?

It's only working with the blacklists. Everything on the blacklist is using this so it's not a problem with the cert. It's a problem with the blacklists.

And reddit is definitely working because I'm also some time on reddit. I have no idea about the Blokada App but from my experience it's almost a problem with additional blacklists.

When I'm using DoH or DoT then everything on reddit is working.
[Android Software/Hacking General [Developers Only]] SparkyKitty:
USA / Dallas (vServer)

k1ns-tx-001.keweon.center

45.76.57.41

2001:19f0:6401:9ed::41

USA / New Jersey (vServer)

k1ns-ny-001.keweon.center

45.77.144.132

2001:19f0:5:2962::132

these 2 servers work the best for me, keep up the good work and keep up the speeds of the DNS.
[Android Software/Hacking General [Developers Only]] DenyDarko:
Hey [MENTION=304818]MrT69[/MENTION]

Your dns are blocking sync for colornote:

https://play.google.com/store/apps/details?id=com.socialnmobile.dictapps.notepad.color.note

Install it and enable sync with a Google account. You'll get an ssl error (if certificate is not installed)

Haven't used the email for whitelist as I'm not sure which is the offending hostname.
[Android Software/Hacking General [Developers Only]] MrT69:
The cert is not working anyway within the Apps. It's just for clean up browser.

I will take a look tomorrow at the App and fix this.

Thanks a lot.

EDIT:

Done and it seems it's syncs. Can you explain to me what you have done for get this error?
[Android Software/Hacking General [Developers Only]] jawz101:
Thank you for the response. There are browser settings that can reduce the number of tries attempted on a failed connection.
[Android Software/Hacking General [Developers Only]] MrT69:
Wow... didn't know this. Can you tell me more or do you have the settings for some browsers?

This would be awesome when it's possible to disable the HTTPS error nags via Browser settings.

EDIT:

Is this the right setting within Chrome?

chrome://flags/#enable-mark-http-as (change to disable)
[Android Software/Hacking General [Developers Only]] jawz101:
I'm more familiar with Firefox. There are about:config flags I'm it such as

network.http.connection-retry-timeout

network.http.request.max-attempts

network.websocket.timeout.open

network.trr.request-timeout

network.tcp.tcp_fastopen_http_stalls_timeout

network.http.tls-handshake-timeout

network.http.spdy.timeout

network.http.spdy.ping-timeout

network.http.response.timeout

network.http.fallback-connection-timeout

network.http.connection-retry-timeout

network.http.connection-timeout

network.dns.resolver_shutdown_timeout_ms

network.tcp.tcp_fastopen_consecutive_failure_limit

network.trr.max-fails

network.dns.resolver-thread-extra-idle-time-seconds

It got me experimenting yesterday by setting timeout intervals for various things to 1 on my phone and trying on both WiFi and cellular but I didn't know if I could tell if there was a performance difference. It would be interesting to see if a blocked hostname caused an app to continuously retry to connect and, consequently, take longer to load a page and if just tightening the amount of failures before saying "stop trying to connect" would improve page load speed. The problem is both Chrome and Firefox kinda suck at documentation of their advanced flags so it's hard to know what each does and if they even use them any more. Firefox is bad at deprecating config flags without telling anyone they don't do anything anymore and Chrome doesn't tell you which option Default implies. It's annoying.