5 ms·
> just like they can do with any of the ISPs There is a 3rd option: Operating your own recursive resolver.
by the8472 7y ago
> just like they can do with any of the ISPs
There is a 3rd option: Operating your own recursive resolver.
- kadoban 7y agoDoesn't that just move the problem one step away?
- the8472 7y agoIt removes a 3rd party that is a juicy target for TLAs. There is only you and the remote hosts that you're talking to. But yes, it would be really nice if we also had encryption between recursive resolvers and authoritative servers to remove the last place where they could harvest data.
- kyuudou 7y agoI've found this harder and harder over the years. My usual MOD was installing and configuring the caching-nameserver BIND package in rpm-based RHEL-downstream distros and MaraDNS in everything else. I've just kind of given up because reasons but I'm still very supportive of any of these kinds of efforts.
- the8472 7y agounbound is much easier to configure than BIND in my experience