This only works as long as DNS is both unauthenticated and unencrypted. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		Spivak on Dec 9, 2020 \| parent \| context \| favorite \| on: Improving DNS Privacy with Oblivious DoH This only works as long as DNS is both unauthenticated and unencrypted.

vetinari on Dec 9, 2020 [–]

Which, at port 53, it is.

Obviously, it would work with DoT (853) only with cert verification disabled.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact