News for hackers. Stuff that matters.

A comment on Big ISPs aren’t happy about Google’s plans for encrypted DNS. Parent comment

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by _Understated_ on Wednesday October 02, 2019 @05:26AM (#21134648)
An NSLOOKUP will tell you the DNS server that your query went to.
[ Parent | on HN ]
Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by dspillett on Wednesday October 02, 2019 @06:02AM (#21134801)
Unfortunately that will not help: if the requests to other servers are NATed when they hit the router it will look like your request went elsewhere when in fact to went to Sky. nslookup is reporting what it tried to connect to for an answer, not what actually answered.
[ Parent | on HN ]
Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by cies on Wednesday October 02, 2019 @05:52AM (#21134764)
ISPs can man-in-the-middle spoof that too, right?
[ Parent | on HN ]
Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by isostatic on Wednesday October 02, 2019 @05:52AM (#21134765)
Even if you intercept and nat traffic going to UDP/53?
[ Parent | on HN ]