3 ms·
Stupid question: What do I need to do to use DNS-over-TLS? I am running a recursive resolver in my home network (BIND9), so if that is a requirement, it is not
by krylon 9y ago
Stupid question: What do I need to do to use DNS-over-TLS?
I am running a recursive resolver in my home network (BIND9), so if that is a requirement, it is not a problem.
EDIT: I misunderstood; I though this would encrypt communication between resolvers and authoritative nameservers, too. :(
- swiley 9y agoIf you run your own recursive resolver that kind of defeats the point doesn't it?
- dbkaplun 9y agoI found this guide (with slight modifications) helpful for setting up stubby as a localhost DNS resolver to proxy through 1.1.1.1 with DNS-over-TLS on macOS: https://medium.com/nlnetlabs/privacy-using-dns-over-tls-with-the-new-quad9-dns-service-1ff2d2b687c5 https://medium.com/nlnetlabs/privacy-using-dns-over-tls-with...
- BuildTheRobots 9y agoYour recursive resolver is still going off over the internet and querying (root) DNS entries in clear text. My understanding is that this would wrap it in TLS to stop your ISP (or coffee shop) either spying on what sites you're resolving (read visiting) or even man-in-the-middling and re-writing your DNS responses.