> I don't know anyone who believes DNS is suitably decentralized to resist censorship. Technically DNS-the-protocol is suitably decentralized to resist censors

> I don't know anyone who believes DNS is suitably decentralized to resist censorship. Technically DNS-the-protocol is suitably decentralized to resist censorship[0]; it's the particular canonical infrastructure of the main DNS system that's the weak link there. (Edit: by which I mean I think emacdona was talking about the protocol in general, and if you meant to object to that admittedly-debateable choice of focus, you should probably explicitly point out the distinction between the protocol (that anyone can use) and the canonical system (that is run by (tautologically) malicious corporations).) 0: Although it could use some cryptographic additions for better security, and it has problems with global uniqueness in the face of malicious actors pushing records to the effect of "sci-hub.org IN A some.fbi.ip.addr". But if you can find a trustworthy (possibly-suffix-indexed collection of) root server to start from, the protocol itself works fine.