Re:Universal DNSSEC: Secure DNS for Every Domain
by sarciszewski on Tuesday November 10, 2015 @10:28AM
(#10539866)
> CloudFlare doesn't have either of those things which rather hampers us deploying DNSCrypt.
Behold:
* https://github.com/bitbeans/SimpleDnsCrypt
I'm sure with Filo on your team you could make that happen.
Re:Universal DNSSEC: Secure DNS for Every Domain
by jamespo on Tuesday November 10, 2015 @12:21PM
(#10540684)
How are cloudflare going to distribute this proxy to end users?
Re:Universal DNSSEC: Secure DNS for Every Domain
by sarciszewski on Tuesday November 10, 2015 @04:24PM
(#10542610)
I don't understand your question. I'm asking if they can consider supporting it and help browser vendors (i.e. Firefox) support the client side of DNSCrypt.
What does CloudFlare have to distribute?
Re:Universal DNSSEC: Secure DNS for Every Domain
by tptacek on Tuesday November 10, 2015 @11:27AM
(#10540242)
Can you at least give me credit for not saying "EXTRA! EXTRA! INTERNET'S LARGEST DDOS PROTECTION SERVICE SUPPORTS DEPLOYMENT OF INTERNET'S WORST DDOS AMPLIFIER"? :)
Re:Universal DNSSEC: Secure DNS for Every Domain
by jgrahamc on Wednesday November 11, 2015 @06:08AM
(#10545999)
Just this once.
Re:Universal DNSSEC: Secure DNS for Every Domain
by dsl on Tuesday November 10, 2015 @12:58PM
(#10541003)
OpenDNS will happily send you queries over DNSCrypt. Thats like 3-4% of the internet right there.
They also open sourced client implementations for end boxes to talk to them or any other recursive securely.
jedisct1 is also looking for work right now, he'd happily implement it all for you I'm sure.
Bad reasoning. You think we'll not deploy HTTP/2 because the head of the committee works for Akamai? Cmon.
DNSCrypt needs a secure resolver and client software. CloudFlare doesn't have either of those things which rather hampers us deploying DNSCrypt.