News for hackers. Stuff that matters.

A comment on Inferring and hijacking VPN-tunneled TCP connections. Parent comment

Re:Inferring and hijacking VPN-tunneled TCP connections by topranks on Friday December 06, 2019 @04:10AM (#21720223)
The DoH protocol is not designed to run “at each stage of the path.”

Same things like DNScurve do that but somehow nobody got excited about that.

[ Parent | on HN ]
Re:Inferring and hijacking VPN-tunneled TCP connections by tgragnato on Friday December 06, 2019 @06:16AM (#21720777)
DoT is already being used [https://engineering.fb.com/security/dns-over-tls/]. The value proposition of DoH is to "blend" in the HTTPS traffic.

Not that DNSSEC is useless, but we should worry about tree validation AFTER having encoded every stage of the path.

[ Parent | on HN ]