[dns-operations] Introducing DNSCrypt

[Paul Hoffman]

On Dec 6, 2011, at 8:26 AM, Rubens Kuhl wrote:

> Wouldn't IPSEC, OpenVPN or SSL up to the task without requiring new protocols and new software ? 

One can make an argument for the cost of setting up and tearing down tunnels versus the quasi-persistance of the DNSCurve-like architecture. The OpenDNS folks have made one cost-benefit analysis that works for them as the resolver; others might analyze the same data differently.

--Paul Hoffman