3 ms·

Actual DNS servers and clients have supported TLS since the early years of this decade. What's gained by adding HTTP transport overhead?

• est 9y ago
  http is not overhead, http is the only transport that can go through middle boxes.
  • skuzye 9y ago
    if the traffic is encrypted how can you tell whether it's http or plain dns?
    • jedisct1 9y ago
      Because the purpose of middle boxes is to log your traffic no matter what, usually by installing a root certificate on your devices.
• throwaway2048 9y ago
  What dns servers and clients support TLS?
  • bandrami 9y ago
    Unbound does it natively, and BIND and the rest use DNSCrypt's shim
    • LogicX 9y ago
      While we at DNSFilter are working on support of DNSCrypt, just to add some flavor to your note... it should be mentioned that the original author just abandoned the project, removed the repos from his github user, shut down the website, and it's been setup by a few industry players under a new github org: https://github.com/DNSCrypt https://github.com/DNSCrypt Tough to say what direction the project will take. I for one welcome other advancements such as Google's efforts. FWIW, my understanding is if you use Chrome it actually communicates over QUIC