3 ms·
Im still trying to understand why this is useful or helpful? DNS is pretty reliable and seems to be working well for a decades.
by mtnGoat 8y ago
Im still trying to understand why this is useful or helpful? DNS is pretty reliable and seems to be working well for a decades.
- pas 8y agoprivacy, which is essential for security. currently your DNS requests are sent in the clear. and even if DNSSEC sort of guarantees the integrity and authenticity of the answers, it doesn't provide secrecy. and yes, currently TLS (+SNI) leaks the domain name (server name in TLS parlance), but there's work being done on that and it's very likely that in a few years that leaky hole will be closed too.
- mtnGoat 8y agoprivacy is a valid reason, this makes sense.
- toast0 8y agoThat depends on how close you're looking at the tail. Things like ISP servers that purposefully or not corrupt information, caches that cache things for weeks after the ttl expired, ISP servers that simply don't respond in a timely fashion. It's pretty useful to have an alternative way to resolve hosts.