Re:DNS over HTTPS–What Is It and Why Do People Care? [pdf]
by marcosdumay on Monday October 21, 2019 @11:40AM
(#21313531)
It's the consequence of a design flaw on IP, because every information for consumption only of the final host should have been encrypted.
Nobody knew better at the time, but this time we know. Fortunately, it will end at HTTPS, and it's just a matter of optimizing it well enough (in HTTPS4, or 5, or how many it takes) to make it behave like an internet-level protocol and replace IP.
In the end we will have a virtualized Internet 100% encrypted and tunneled over port 443, rendering the physical IP header worthless legacy baggage.
To IT admins: the more you tighten your grip, the more protocols will slip through your fingers.