4 ms·
Absolutely agree, ideally we’d all be using DNS-over-TLS, however I think but DoH(S) is a ‘good enough’ alternative /if/ you trust the company running the serve
by mrmondo 8y ago
Absolutely agree, ideally we’d all be using DNS-over-TLS, however I think but DoH(S) is a ‘good enough’ alternative /if/ you trust the company running the servers.
Google I have essentially no trust in at all anymore (or maybe ever), Cloudflare I trust to a ‘reasonable’ degree; by that I mean I don’t believe they would (at the and leading up to the time of writing this comment) sell identifiable user data from their 1.1.1.1 DNS service and they have a very high technical skill level when it comes to internet security especially with regards to routing and network metadata. However it’s still not ideal or even slightly close to perfect security and while I’d trust Cloudflare over Google in a heartbeat - like anything that could change and better options that are also easy to use may (will likely) pop up.
- jdietrich 8y ago1.1.1.1 also supports DNS-over-TLS. DNS-over-HTTPS is clearly an ugly hack, but it's probably a necessary hack for the time being. https://developers.cloudflare.com/1.1.1.1/dns-over-tls/ https://developers.cloudflare.com/1.1.1.1/dns-over-tls/
- mrmondo 8y agoOh I didn’t know that, thanks for the link!
- JdeBP 8y agoIf we are talking ideals, then ideally we would be using something a lot better than the DNS protocol, which has been hammered out of shape in order to achieve things pretty hard nowadays, and not DNS-over-something at all.