Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on A cartoon intro to DNS over HTTPS (2018).
> Avoid untrustworthy resolvers by using Trusted Recursive Resolver.
If it's to trust a resolver just 1.1.1.1 (or whatever)
> Protect against on-path eavesdropping and tampering using DNS over HTTPS.
This is the only real change but it is useless for everything outside a CDN Whit is basically everything that matters for users
> Transmit as little data as possible to protect users from deanonymization.
QNAME minimization can be done already, it is not a DoH thing
There are no comments on this comment yet.
> Avoid untrustworthy resolvers by using Trusted Recursive Resolver.
If it's to trust a resolver just 1.1.1.1 (or whatever)
> Protect against on-path eavesdropping and tampering using DNS over HTTPS.
This is the only real change but it is useless for everything outside a CDN Whit is basically everything that matters for users
> Transmit as little data as possible to protect users from deanonymization.
QNAME minimization can be done already, it is not a DoH thing