3 ms·
The idea in the paper is not to encrypt every packet, but every DNS packet. Something like a (better) substitute to DNSSEC... Good read.
by sucuri2 17y ago
The idea in the paper is not to encrypt every packet, but every DNS packet. Something like a (better) substitute to DNSSEC... Good read.
- timf 17y agoTrue but if you look at the DNSCurve website ( http://dnscurve.org/ http://dnscurve.org/ ) he does state that it "is part of a larger project to encrypt and authenticate all Internet packets."
- neilc 17y agoEncrypting and authenticating all Internet packets by adding application-level crypto to each and every protocol in use seems like a Sisyphean task to me. IPSec is more ambitious because it is lower in the protocol stack, but if you really want to encrypt all the traffic on the Internet, that seems like a more plausible approach to me.
- enneff 17y agoThe question is, though, do we trust the host (IPsec) or the application (application-level crypto)? It would be great if there were an easy-to-use crypto API that one could just plug into ones apps. Sadly, it is not the case, yet.