3 ms·
Obligatory post when this comes up of a presentation by Paul Vixie, who was responsible for BIND from 1989 to 1999 and very involved in forming dns protocols s
by darwingr 6y ago
Obligatory post when this comes up of a presentation by Paul Vixie, who was responsible for BIND from 1989 to 1999 and very involved in forming dns protocols since then.
Paul Vixie talks about DNS over HTTPS (EuroBSDCon, Oct 27, 2019)
https://www.youtube.com/watch?v=ZxTdEEuyxHU https://www.youtube.com/watch?v=ZxTdEEuyxHU
The way he approaches this I think is fundamentally correct, it is both a technical and political subject.
- tptacek 6y agoPaul Vixie is deeply wrong about DoH, and the logic he uses to describe the control he demands over his local network (which he runs with apparently the same rigor that Allstate runs their corp net) isn't coherent: he's required to concede that he doesn't have control over all his machines (else he could just do what serious security teams do and manage his machines centrally, and wouldn't have control problems with DoH), but he's giving them all access to his network anyways (else DoH wouldn't matter to begin with). Consider carefully why you think his approach is fundamentally correct. His talk opens with multiple slides talking about how improved performance is relevant only for serving advertisements. That's an alarming thing for an influential standards person to say out loud.