Re:A cartoon intro to DNS over HTTPS (2018)
by imhoguy on Sunday October 20, 2019 @04:05AM
(#21302814)
> it will protect against ISP and state level observations of DNS
It won't if it defaults to centralized on-profit business like Cloudflare. They can tap for govts or sell aggregated data to ISPs someday. They aready own a lot of unencrypted traffic from TLS-termination.
Wouldn't it be better to use public/private key signing and onion-like infrastructure for DNS resolving and still keep it distributed?
It won't if it defaults to centralized on-profit business like Cloudflare. They can tap for govts or sell aggregated data to ISPs someday. They aready own a lot of unencrypted traffic from TLS-termination.
Wouldn't it be better to use public/private key signing and onion-like infrastructure for DNS resolving and still keep it distributed?