News for hackers. Stuff that matters.

A comment on Handshake: Decentralizing DNS to Improve the Security of the Internet.

Re:Handshake: Decentralizing DNS to Improve the Security of ... by al_form2000 on Wednesday September 18, 2019 @02:30AM (#21002835)
I find this trend of applications packing their own resolver concerning. If nothing else, it widens greatly the attack surface to name resolution. I also foresee mayhem with perimeter firewalls and stuff. It should be possible to block this at the OS level.
[ Parent | on HN ]
Re:Handshake: Decentralizing DNS to Improve the Security of ... by _squared_ on Wednesday September 18, 2019 @04:30AM (#21003347)
Mainstream OSs are slow to evolve. While I agree that embedded DNS resolvers in browsers and the like should have an off switch, I think embedding in widely adopted software is the only solution to push adoption of these new privacy-focused protocols.

Pushing updates to ever-green browsers is the key to change how millions of people use their computer - since browsing the web is almost all they do!

[ Parent | on HN ]