> Canada has a different approach, where institutions can sign up to using a federal DNS service It seems far more invasive to route all your DNS traffic throu

> Canada has a different approach, where institutions can sign up to using a federal DNS service It seems far more invasive to route all your DNS traffic through a untrusted source than having that same source use the exact types of scans attackers are using every day already and report problems they find to you. I can learn a hell of a lot more about you by your DNS history than I can from knowing what ports you have open and what vulnerable services you're running.