3 ms·
Answer: "Yes, standard DNS queries are unencrypted. The threat model relies on MPIC - querying from multiple vantage points - not transport encryption. DNSSEC a
by 1vuio0pswjnm7 9mo ago
Answer: "Yes, standard DNS queries are unencrypted. The threat model relies on MPIC - querying from multiple vantage points - not transport encryption. DNSSEC adds an integrity layer where available."
https://news.ycombinator.com/item?id=47073054 https://news.ycombinator.com/item?id=47073054