On Lu, 13 apr 20, 08:47:22, Reco wrote: > On Sun, Apr 12, 2020 at 07:46:38PM -0400, Lee wrote: > > > How many people use a dnssec validating resolver? > > See above. Besides, DNSSEC is for integrity of zones, not privacy. > You need DNS-over-TLS if you need last one. > > > > At least Cloudflare resolvers have dnssec enabled. > > *And* the ability to see users' DNS queries. Neat, right?
Whether DoH or DNS-over-TLS, you have to trust the DNS server. Kind regards, Andrei -- http://wiki.debian.org/FAQsFromDebianUser
signature.asc
Description: PGP signature
