> > Do a little threat modeling here please > Yes, lets do some threat modeling. In the first model we have the ISP that host a DNS resolver. The traffic goes

> > Do a little threat modeling here please > Yes, lets do some threat modeling. In the first model we have the ISP that host a DNS resolver. The traffic goes from the client to the server hosted by the ISP. > In the second model we have a CDN that host a DNS resolver. Where is the CDN hosted? At the ISP. The traffic goes from the client to the server hosted by the ISP. hosts : files,dns Damn it. When the bloody browser bypasses the OS then it is really a big problem.