hansiess
Re:DNS Security: Threat Modeling DNSSEC, DoT, and DoH
on Monday October 21, 2019 @06:06AM (#21310630)
Great discussion. I also think that the more we talk about it, the more and better solutions will start appearing to solve all the problems that come with choosing DNS providers. There is also one issue that we don't discuss too much. I understand that by selecting a private DNS resolver over the ISPs DNS, you still provide your info to that resolver's operator, and they can monetize it. And here I see one crucial thing - choosing the provider that HAS to collect your data over choosing the provider that doesn't do it. Correct me if I'm wrong, but basically, any DNS provider located in the USA is required to collect and store your data by law. So it's not only easy to use that data for monetization, but also they would be required to give all that info to the gov if needed. I was going through a list of most popular DNS providers, and I didn't quite like what I saw. But I found this Trust DNS app (https://surfshark.com/trust-dns) that as a product from Surfshark is also located in the British Virgin Islands. So technically, they are not required to collect any users' data, and they state that they don't. There is also an option to switch between DoH and DoT. The only downside is that it's only for Android right now. Any thoughts about it? Are there more options that are not based in the USA or other 14 eyes countries (or well, China)?
Re:I wrote and published one blog article a day for 365 days. AMA
on Monday October 21, 2019 @05:50AM (#21310578)
Wow, that's inspiring. Would you mind sharing the blog here? I'm very curious! I don't plan myself to write as a way to earn money at some point, or even sharing it with others for that matter, but I started writing morning pages 32 days ago (yes, I count the days, it keeps me going and helps to not skip any). It's a great exercise, but it's not creative writing.