News for hackers. Stuff that matters.

A comment on Open Wi-Fi Security. Parent comment

Re:Open Wi-Fi Security by tptacek on Sunday January 26, 2020 @06:35PM (#22155646)
Against a network-level adversary, DNSSEC does exactly nothing: it's a server-to-server protocol, and the interaction between the resolver on your desktop and the DNS server remains unprotected. And, of course, as you mention, even if you ran a recursive validating resolver on your desktop, DNSSEC still doesn't encrypt anything.

People should simply not bother with DNSSEC.

[ Parent | on HN ]
Re:Open Wi-Fi Security by badrabbit on Sunday January 26, 2020 @07:03PM (#22155782)
What do you recommend then? I think DNSCrypt is nice for client-to-server.

Edit: nvm, forgot DoH and DoT were a thing

[ Parent | on HN ]