3 ms·
Isn’t this a chicken vs egg problem?
by tzahola 9y ago
Isn’t this a chicken vs egg problem?
- jlgaddis 9y agoApparently: > "The DOH server is given with a host name that itself needs to be resolved. This initial resolve needs to be done by the native resolver before DOH kicks in."
- jayflux 9y agoYes and no, I think Google’s DNS over HTTPS service is run on 8.8.8.8 the same IP for their main dns service, so you should always know where it is. Edit: Looks like it’s changed and it’s now a url, so you’re right it is a bit chicken and egg
- dyu 9y agoYou can remember a small set of resolved hosts for this purpose, not unlike remembering DNS servers or CAs to trust. A quick search online also says it's possible to issue a cert to a public IP address, so you can also do HTTPS to a numbered IP instead of a host name.
- tzahola 9y agoI haven't heard of any respectable CAs that would issue certs for IP addresses...
- tialaramex 9y agoThey're rare but they do exist. The CA needs to ensure you really have long term control over the address. Most people would never need one, but a few people have a real use for them.
- Asooka 9y agoJust stick the address of the DNS resolver in /etc/hosts.