4 ms·
Just pointing out, there's now a standardized way to do encrypted DNS via TLS: https://tools.ietf.org/html/rfc7858 https://tools.ietf.org/html/rfc7858 Probabl
by hannob 10y ago
Just pointing out, there's now a standardized way to do encrypted DNS via TLS:
https://tools.ietf.org/html/rfc7858 https://tools.ietf.org/html/rfc7858
Probably more likely that that one will succeed. DNScrypt has been around for a long time and hasn't really seen any significant adoption.
- INTPenis 10y agoWhy are you being downvoted? https://kb.isc.org/article/AA-01386/30/DNS-over-TLS.html https://kb.isc.org/article/AA-01386/30/DNS-over-TLS.html This article shows how to set it up according to ISC with stunnel. I was hoping for a native implementation in Bind but maybe it's coming.
- Tepix 10y agoBind is still a mess after all these years. It seems to me like I get an update every other week that fixes a trivial DoS that hits an unchecked assertion. bind is a software that is only 80% finished. The missing 20% that take 80% of the time will only be implemented via CVEs.
- INTPenis 10y agoWhat's a good alternative open source DNS that supports views and DDNS updates?
- _jal 10y agoTake a look at PowerDNS. I use it for my day job and it causes very little trouble. I can only recall one annoying bug and one security issue in about the last two years. It also has an OK, if not great, API for integrating with, e.g., your provisioning system, inventory system, etc.
- 72deluxe 10y agoDo they need help? Or a more rigorous test suite? Or pushing more errors to the compiler to trap these kind of things?