3 ms·
What is your opinion on DNScrypt? As far as I've seen it is somewhat the Yin to DNSSEC's Yang.
by jevinskie 11y ago
What is your opinion on DNScrypt? As far as I've seen it is somewhat the Yin to DNSSEC's Yang.
- tptacek 11y agoDNSSEC is top-down. DNSCrypt is bottom-up. DNSSEC provides no value until the whole system works. DNSCrypt adds value even if just two systems use it. DNSSEC uses 1990s crypto. DNSCrypt uses 2010+ crypto. DNSSEC doesn't protect name resolution queries. DNSCrypt only protects name resolution queries.
- axaxs 11y agoThis wasn't directed at me and I'm not the crypto expert Mr. Ptacek is, but DNScrypt and DNSSEC really aren't related as they serve different functions. DNScrypt encrypts you the user, and your lookups. DNSSEC is meant to protect site owners by authenticated the answers given to resolvers.