Metadata is the real data

Re:Metadata is the real data by cryptonector on Friday June 02, 2017 @10:55AM (#14470330)

And yet that's not how it works. Many systems are happy to use whatever resolver DHCP tells them to -- usually their ISP's or their router's. If it is close enough to the user, then all queries might as well go in the clear, and once again you're subject to metadata gathering that way.

[ Parent | on HN ]

Re:Metadata is the real data by super-io on Tuesday June 06, 2017 @08:56PM (#14502907)

I do not use DHCP. (Nor do I use ARP.) For a small home network I do not need it.

I run a private root and a private nameserver that serves encrypted DNS packets from a datacenter. "Pseudo authoritative": the zone contains the third party addresses I need. All DNS queries are encrypted. Sent from localhost resolver to private nameserver. Nothing in the clear. That is how it works.

There will always be metadata gathering on the internet (access logs). But there does not have to be unencrypted (DNS) packets or third party DNS resolvers.

[ Parent | on HN ]