4 ms·
"""A key component of ODoH working properly is ensuring that the proxy and the DNS resolver never “collude,” in that the two are never controlled by the same en
by eeZah7Ux 6y ago
"""A key component of ODoH working properly is ensuring that the proxy and the DNS resolver never “collude,” in that the two are never controlled by the same entity, otherwise the “separation of knowledge is broken"""
Essentially this is no better than using an HTTP proxy or a VPN.
- t0mas88 6y agoA HTTP proxy (or VPN) know exactly who you connect to, even with SSL they know the target name since SNI isn't encrypted. In this proposal the DNS-proxy doesn't know what you've sent to the DNS resolver.