Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

DNSSEC anyone? Or DNSCurve, or DNSCrypt.


DNSSEC does nothing to provide DNS privacy, nor does it address MITM attacks between endpoints (your phone and laptop) and DNS servers; it's a server-to-server protocol. DNSSEC is moribund; practically no important sites run it.

DNSCurve/DNSCrypt are directly competitive with DoH, but in a post-DoH world, both are probably dead-letter standards.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: