News for hackers. Stuff that matters.

A comment on DNSCrypt: A tool for securing communications between a client and a DNS resolver. Parent comment

Re:DNSCrypt: A tool for securing communications between a cl... by apendleton on Wednesday June 19, 2013 @12:14PM (#5906404)
Depends on what you're trying to do. If you're trying to avoid logging, then sure, this doesn't get you much. If you're trying to secure yourself against local-network DNS attacks, this could be useful.

There's also nothing to stop you from using a caching DNS server with DNScrypt (in fact, they give you instructions to do so).

[ Parent | on HN ]
Re:DNSCrypt: A tool for securing communications between a cl... by jedisct1 on Wednesday June 19, 2013 @07:33PM (#5909189)
Run dnscrypt-wrapper or unbound on your router. Then run dnscrypt-proxy or dnssec-trigger on your clients. You get secured against local-network DNS attacks, and this let you use any upstream resolvers (or none).
[ Parent | on HN ]