News for hackers. Stuff that matters.

A comment on Ask HN: Neutral DNS servers?. Parent comment

Re:Ask HN: Neutral DNS servers? by 0xbadcafebee on Friday March 11, 2022 @04:50PM (#30646451)
In theory if you got a resolver which could disable UDP queries, it would then default to TCP, and the ISP couldn't manipulate those. Don't know if any resolver supports disabling UDP though.
[ Parent | on HN ]
Re:Ask HN: Neutral DNS servers? by viraptor on Friday March 11, 2022 @08:33PM (#30648156)
> would then default to TCP, and the ISP couldn't manipulate those

They can easily manipulate TCP as well. Unless you establish an authenticated session like TLS, TCP can be mitm-ed easily.

[ Parent | on HN ]
Re:Ask HN: Neutral DNS servers? by cyounkins on Friday March 11, 2022 @05:44PM (#30646997)
Unbound as a client will fall back to TCP automatically if the UDP response is too big. I'm uncertain if there is widespread support for TCP servers though.
[ Parent | on HN ]
Re:Ask HN: Neutral DNS servers? by justsomehnguy on Friday March 11, 2022 @05:27PM (#30646815)
Unbound
[ Parent | on HN ]