4 ms·

AFAIK DNSCrypt (as the name suggests) encrypts transfer of DNS data between client & server whereas DNSSEC authenticates (to some level) the validity of DNS dat

by _jomo 11y ago

AFAIK DNSCrypt (as the name suggests) encrypts transfer of DNS data between client & server whereas DNSSEC authenticates (to some level) the validity of DNS data, but does not encrypt it. How do both compare ("far better")?

akerro 11y ago
DNSCrypt is to secure your connection client-server and server-client. DNSSEC is for server-server, to propagate existing addressbook.
- tptacek 11y ago
  That's not entirely true. DNSCrypt also aims for end-to-end security. The real difference is that DNSSEC is a top-down protocol that doesn't work until every link between your browser and the DNS roots agree, and DNSCrypt is a bottom-up protocol that provides value even if just a few people use it.
- FullyFunctional 11y ago
  It's far from the only difference, but it worth calling out: Only DNSCrypt protects your privacy!