Re:DNSCrypt – A protocol to improve DNS security
by MichaelGG on Thursday March 30, 2017 @11:26AM
(#13996183)
It's to return local DNS records so you resolve to a nearby server.
[ Parent
| on HN ]
Re:DNSCrypt – A protocol to improve DNS security
by GTP on Friday March 31, 2017 @07:16AM
(#14002670)
I have one more question. DNS requests are carried by the IP protocol, so when someone makes a DNS interrogation the DNS server already gets the client's full IP address in the IP header. Isn't redundant to place (a portion of) the IP address in a DNS packet? Or maybe for some reason the DNS server is quicker to get this information from the DNS packet rather than from the IP packet's header?
Re:DNSCrypt – A protocol to improve DNS security
by MichaelGG on Friday March 31, 2017 @08:50AM
(#14003143)
I use e.g. 8.8.8.8 as my DNS server. When that server needs to request a record for me, the other servers it connects to will only see 8.8.8.8. With this extension, the 8. server will embed my subnet into the request and allow upstream servers to see part of my IP.