2 ms·
If you're using DNSSEC then they can't mess with your DNS either. However, it is very readable by the exit node - just like Host header in HTTP or server_name i
by AstralStorm 8y ago
If you're using DNSSEC then they can't mess with your DNS either. However, it is very readable by the exit node - just like Host header in HTTP or server_name in TLS.
- tptacek 8y agoSure they can. Virtually nothing is DNSSEC-signed. And if you're using someone else's DNSSEC server, and not running your own server on your own machine, the link between you and your DNS server is completely unprotected.