3 ms·
Of course that combined host/path winds up leaking not just what hosts you are interested in but what specific resources you are after to your DNS resolver - wo
by jameshart 10y ago
Of course that combined host/path winds up leaking not just what hosts you are interested in but what specific resources you are after to your DNS resolver - would be quite damaging to Privacy and security of https
- digi_owl 10y agoI guess rather than handing every resolver the full path, you could go "give me example" and then respond depending on it giving a address or a directory listing in return.
- wtbob 10y agoTrue; as digi_owl indicates, you could only ask for the next element in the path, too. Also, you are implicitly trusting each level in the tree to be honest, anyway: even if you say, 'hey com, give me example,' he could always give you the address of a computer he controls instead of the real com.example, and thus get the next item in the path from you when you ask him to resolve it. You can't get away from trust: whether it's trust in DNS, or trust in CAs, or evne trust in the great masses reporting public keys seen in the wild, you can't get away from trust.