Re:Encrypted Client Hello – the last puzzle piece to privacy
by josephcsible on Friday September 29, 2023 @07:32PM
(#37711343)
> The solution is to remove DNS from your ISP and run it yourself
This doesn't work because if you run your own recursive DNS server, it will make insecure requests to all of the authoritative servers, and so your ISP can hijack them all. And DNSSEC will keep you from getting sent to the wrong domain, but won't help you figure out the right domain.
This doesn't work because if you run your own recursive DNS server, it will make insecure requests to all of the authoritative servers, and so your ISP can hijack them all. And DNSSEC will keep you from getting sent to the wrong domain, but won't help you figure out the right domain.