Re:Comcast Is Lobbying Against DNS Encryption
by zrm on Wednesday October 23, 2019 @03:25PM
(#21337948)
There is a solution for that -- install a local resolver that makes queries using DoT/DoH/DNSCurve/DNS-over-WireGuard/whatever but answers them using ordinary UDP DNS, then make that your DNS server in /etc/resolv.conf.
[ Parent
| on HN ]
Re:Comcast Is Lobbying Against DNS Encryption
by Skunkleton on Wednesday October 23, 2019 @07:31PM
(#21340147)
The default configuration for most linux distros is to set 127.0.0.1 as the resolver in /etc/resolv.conf, and then something like systemd-resolved takes care of doing the "right thing".