News for hackers. Stuff that matters.

A comment on DNSCrypt – A protocol to improve DNS security. Parent comment

Re:DNSCrypt – A protocol to improve DNS security by _jal on Thursday March 30, 2017 @10:26AM (#13995583)
It is intentional. There are creepy providers out there that really want you to use their DNS so they can surveil/gaslight you, so they block or redirect traffic to well-known DNS ports.

Putting it on 443 forces a choice between letting people manage their own DNS or blocking every store on the planet.

[ Parent | on HN ]
Re:DNSCrypt – A protocol to improve DNS security by tresni on Sunday April 02, 2017 @01:17AM (#14015916)
Definitely this. Also lots of weird hardware/software out there that tends to discard packets it can't understand (i.e. this doesn't look like a DNS packet going to port 53, let's drop it.) 443 generally works as it is expected to be encrypted by most middleware.

I would also say that most DNSCrypt-capable providers I know of can also do it on port 53.

[ Parent | on HN ]