3 ms·
> So how do we fix these? > Avoid untrustworthy resolvers by using Trusted Recursive Resolver. If it's to trust a resolver just 1.1.1.1 (or whatever) >
by user827272 7y ago
> So how do we fix these?
> Avoid untrustworthy resolvers by using Trusted Recursive Resolver.
If it's to trust a resolver just 1.1.1.1 (or whatever)
> Protect against on-path eavesdropping and tampering using DNS over HTTPS.
This is the only real change but it is useless for everything outside a CDN Whit is basically everything that matters for users
> Transmit as little data as possible to protect users from deanonymization.
QNAME minimization can be done already, it is not a DoH thing