3 ms·
Who can we trust to operate an ODNS server? If the organization that runs it also runs a recursive DNS server (or has ties to one, or has been compromised by th
by eat_veggies 6y ago
Who can we trust to operate an ODNS server? If the organization that runs it also runs a recursive DNS server (or has ties to one, or has been compromised by the same gov agency), then the privacy guarantees go away.
- musicale 6y agoThe design seems to depend on the recursive resolver and ODNS resolver maintaining secrecy from each other and third parties. It also depends on the private key of the ODNS resolver not being compromised. With DoH you are trusting a single DNS service (e.g. cloudflare or nextdns) entirely; with ODNS can could split that trust between two services: a recursive resolver (cloudflare) and an ODNS resolver (nextdns.) Privacy-focused web browsers could implement a local ODNS stub that requires that the two services be run by independent organizations (to the best of its knowledge at least.)