Em 31-12-2013 23:19, nixlists escreveu:
> Didn't know that OpenDNS supports DNSCurve. Does anyone else?
>
> With the recent *cough*storm about the certain entities planting
> implants and penetrating our collective mind-orifices through
> backdoors, and, subsequently, obviously, the bad guys (whom the
> entities employ, again, obviously (not the leaker) now having the keys
> to the kingdom of the locks that they themselves have forged, why
> shouldn't the whole kingdom adopt DNSCurve or something like it to
> protect itself? Even DNSSEC adoption has been ridiculously slow, but
> it doesn't offer privacy. Also DNSSEC uses poor by modern standards
> crypto, and suffers from amplification attacks.
>
> One would think that DNSCurve adoption at this point would take over IPv6.
>
> Ahhh, DNS fantasies... :))
>
> Happy New Year! (Although something tells us all we should be worried
> about this one!) The integrity of the 'net is now futile.
>
Conspiracy theories apart (or not), some people (you know who I'm
talking about) strongly advise against using any company that is US
based or use US based servers. On the dnscrypt page,
http://dnscrypt.org/, there are a few options of resolvers that are not
US based. The OpenDNS servers, are.
I dream of an internet where everybody uses ipv6 with security
extensions enabled by default. Where everybody uses tor and
dnscrypt/curve solutions. And also, where everybody would use secure
operating systems and have access to open and cheap hardware. Ah, the
dreams. Let 2014 be a year that some of these dreams come true, hopefully.
Cheers,
--
Giancarlo Razzolini
GPG: 4096R/77B981BC
