News for hackers. Stuff that matters.
Re:Nine Raspberry Pis powering an office (2016) by kd913 on Tuesday October 26, 2021 @04:02AM (#28997609)
https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Configuratio...

>minisign_key is a public key, used to verify that the content is legitimate. Lists can thus be served from any location, even from an untrusted ISP: dnscrypt-proxy will immediately detect and reject something that has been tampered with.

>https://dnscrypt.info/stamps-specifications/ >https://dnscrypt.info/faq

An ISP will not be able to spoof the sources or these stamps. They wouldn't put the effort in. Even if they did, it is factored and thought about.

More harmful would be a malicious DoH relay but I trust the devs.That I think is fixed by mandating the use of DNSSec too for my relays.

There are no comments on this comment yet.