2 ms·

HTTPS can't be trusted due to nation States both being abusive certificate authorities and the source of demand for dns censorship. Herefore, DNS over HTTPS is

by coretx 7y ago

HTTPS can't be trusted due to nation States both being abusive certificate authorities and the source of demand for dns censorship. Herefore, DNS over HTTPS is a bad idea at best. Please think about using dnscrypt or similar solutions instead.

CogitoCogito 7y ago
Is the main difference between dnscrypt vs DoH/DNS over TLS (ignoring layering choices) that dnscrypt uses a web of trust approach whereas the others piggy back on regular PKI? https://en.wikipedia.org/wiki/DNSCrypt#Protocol https://en.wikipedia.org/wiki/DNSCrypt#Protocol
tinus_hn 7y ago
The certificates can be pinned. This is a poor argument against DNS over HTTPS.