3 ms·
> Basically, what does this enable that generic Tor does not? End-to-end encryption. If you query 1.1.1.1 over Tor then exit nodes can diddle with your traffic
by nly 8y ago
> Basically, what does this enable that generic Tor does not?
End-to-end encryption. If you query 1.1.1.1 over Tor then exit nodes can diddle with your traffic.
- AstralStorm 8y agoIf you're using DNSSEC then they can't mess with your DNS either. However, it is very readable by the exit node - just like Host header in HTTP or server_name in TLS.
- tptacek 8y agoSure they can. Virtually nothing is DNSSEC-signed. And if you're using someone else's DNSSEC server, and not running your own server on your own machine, the link between you and your DNS server is completely unprotected.
- ajross 8y agoBut DNS over TLS already provides that even without Tor.