Re:DNSCrypt – A protocol to improve DNS security
by tptacek on Thursday March 30, 2017 @04:03PM
(#13998442)
There isn't one DNSCrypt graph. It's a forest of graphs that, in the event DNSCrypt became mainstream, would effectively converge. But, unlike DNSSEC, DNSCrypt doesn't require universal adoption to provide value.
DNSSEC provides no value at all until graph coverage is reached, and even then provides absolutely no privacy.
I still see DNSSec as providing value before the entire graph of DNSCrypt or DNSoverTLS exists.