4 ms·
The DoH protocol is not designed to run “at each stage of the path.” Same things like DNScurve do that but somehow nobody got excited about that.
by topranks 7y ago
The DoH protocol is not designed to run “at each stage of the path.”
Same things like DNScurve do that but somehow nobody got excited about that.
- tgragnato 7y agoDoT is already being used [https://engineering.fb.com/security/dns-over-tls/ https://engineering.fb.com/security/dns-over-tls/]. The value proposition of DoH is to "blend" in the HTTPS traffic. Not that DNSSEC is useless, but we should worry about tree validation AFTER having encoded every stage of the path.