3 ms·
DNS to the root servers is about as private as it gets, until such a day they could scale out to support TLS. Hybrid models that allow TLS or VPN to a tier-1 n
by LinuxBender 8y ago
DNS to the root servers is about as private as it gets, until such a day they could scale out to support TLS.
Hybrid models that allow TLS or VPN to a tier-1 network ring not monitored by FANG or CF that forward to the root servers are also adequate. Unbound DNS can deterministic prefetch queries that approach 0 TTL.