3 ms·
Along this line, it might be fun to set up an encrypted text chat server that uses this method. What records would work best, rrsig, txt?
by LinuxBender 6y ago
Along this line, it might be fun to set up an encrypted text chat server that uses this method. What records would work best, rrsig, txt?
- ampdepolymerase 6y agoOnly if you are using DNS over https.
- nilsb 6y agoOne could probably do DTLS over DNS.
- m463 6y agodig hi.001.mydomain.com dig how.002.mydomain.com dig are.003.mydomain.com dig you.004.mydomain.com
- cookiengineer 6y agoYou don't need that. TTL zero and dns query header IDs are enough. You could even implement a threaded chat, using the id as a responded-to sorting mechanism. Also, TXT can contain binary data, and when using DNS over TCP is pretty much unlimited in frame size.
- zamadatix 6y agoWhy not https over DNS :)
- yardstick 6y agoIf you are using https/TLS it doesn’t really matter what inner protocol you use, because it’s encrypted so third parties can’t validate it.
- toast0 6y agoIf you're using DNS over TLS (or HTTPS, whatever) to the origin, sure third parties are limited. If you're doing DNS over TLS to a public resolver that then transmits to an origin, that resolver is a third party that can see requests and responses.
- silon42 6y agoI guess this is reason enough to block that (DNS over TLS)