2 ms·
> The solution is to remove DNS from your ISP and run it yourself This doesn't work because if you run your own recursive DNS server, it will make insecure req
by josephcsible 3y ago
> The solution is to remove DNS from your ISP and run it yourself
This doesn't work because if you run your own recursive DNS server, it will make insecure requests to all of the authoritative servers, and so your ISP can hijack them all. And DNSSEC will keep you from getting sent to the wrong domain, but won't help you figure out the right domain.