3 ms·
DNSCrypt is to secure your connection client-server and server-client. DNSSEC is for server-server, to propagate existing addressbook.
by akerro 11y ago
DNSCrypt is to secure your connection client-server and server-client.
DNSSEC is for server-server, to propagate existing addressbook.
- tptacek 11y agoThat's not entirely true. DNSCrypt also aims for end-to-end security. The real difference is that DNSSEC is a top-down protocol that doesn't work until every link between your browser and the DNS roots agree, and DNSCrypt is a bottom-up protocol that provides value even if just a few people use it.
- FullyFunctional 11y agoIt's far from the only difference, but it worth calling out: Only DNSCrypt protects your privacy!