News for hackers. Stuff that matters.

A comment on Cloudflare, Mozilla, Fastly, and Apple Working on Encrypted SNI. Parent comment

Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by blattimwind on Monday July 16, 2018 @06:47AM (#17540214)
> So the recursive resolver (your ISP, google, cloudflare)

Why not yourself? Your ISP can still see the RR working, of course.

> We also need encrypted DNS for the recursive lookup itself so you can run your own resolver somewhere.

This would indeed be optimal but would require upgrading a significant portion of authoritative name servers, sooo... might take a while.

[ Parent | on HN ]
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by Ienuur4i on Monday July 16, 2018 @06:53AM (#17540239)
> Why not yourself?

Well, then what attacker do you defend against if your laptop asks your router via DoT but then the router does an unencrypted recursive lookup anyway?

[ Parent | on HN ]
Re:Cloudflare, Mozilla, Fastly, and Apple Working on Encrypt... by ajnin on Monday July 16, 2018 @10:45AM (#17541649)
Who said laptop ? You can have a DNS resolver on a server somewhere you own, that way it can remain encrypted on your ISP's network.
[ Parent | on HN ]