News for hackers. Stuff that matters.

A comment on DNS over HTTPS. Parent comment

Re:DNS over HTTPS by pilif on Wednesday January 17, 2018 @04:10AM (#16166551)
> Every response is return asynchronously, we can achieve nonblocking.

same goes for UDP which DNS runs over normally.

Like the original commenter, I fail to see how stacking DNS over HTTP over TLS over TCP over IP is going to be faster than running DNS over UDP over IP.

Also, you still need to resolve the address of your DNS-over-HTTP server, which you'd probably still do over traditional DNS-over-UDP.

This feels like doing nothing but adding complexity for zero gain.

[ Parent | on HN ]
Re:DNS over HTTPS by IshKebab on Wednesday January 17, 2018 @04:23AM (#16166602)
Zero gain except going from easy eavesdropping, blocking, censoring, etc. to effectively unblockable, private and secure? Ok.

Also you would probably need to put in the IP of the DNS server manually, exactly like you have to with DNS now.

[ Parent | on HN ]
Re:DNS over HTTPS by yeukhon on Wednesday January 17, 2018 @04:27AM (#16166619)
I would love to know how widely used UDP over TLS is in the wild.
[ Parent | on HN ]
Re:DNS over HTTPS by bruce_one on Wednesday January 17, 2018 @04:42AM (#16166677)
Not quite the same, but QUIC is close to this description description, so it might be higher than initially expected?

From 2016: https://www.bizety.com/2016/01/26/half-of-chrome-to-google-t...

[ Parent | on HN ]