3 ms·
The most important thing this prevents are DNS based MITM attacks where they intercept your request and send you an IP address they control.
by drummer 7y ago
The most important thing this prevents are DNS based MITM attacks where they intercept your request and send you an IP address they control.
- datenwolf 7y agoDNSSEC anyone? Or DNSCurve, or DNSCrypt.
- tptacek 7y agoDNSSEC does nothing to provide DNS privacy, nor does it address MITM attacks between endpoints (your phone and laptop) and DNS servers; it's a server-to-server protocol. DNSSEC is moribund; practically no important sites run it. DNSCurve/DNSCrypt are directly competitive with DoH, but in a post-DoH world, both are probably dead-letter standards.