3 ms·
Are you sure you're not thinking of DNSCurve? It doesn't provide confidentiality, but AFAICT DNSCrypt does.
by ryan-c 8y ago
Are you sure you're not thinking of DNSCurve? It doesn't provide confidentiality, but AFAICT DNSCrypt does.
- js2 8y agoYou’re right. I went of the Wikipedia page for it which says: DNSCrypt wraps unmodified DNS traffic between a client and a DNS resolver in a cryptographic construction in order to detect forgery. Though it doesn't provide end-to-end security, it protects the local network against man-in-the-middle attacks. https://en.wikipedia.org/wiki/DNSCrypt https://en.wikipedia.org/wiki/DNSCrypt But according to dnscrypt.info it’s encrypted.
- zrm 8y agoDNSCrypt and DNSCurve both provide confidentiality (and are very similar to each other). The thing that doesn't provide confidentiality is DNSSEC.
- Panino 8y agoDNSCurve does provide confidentiality, using x25519-xsalsa20poly1305.