[dns-operations] Introducing DNSCrypt

[Dobbins, Roland]

On Dec 6, 2011, at 10:17 PM, David Ulevitch wrote:

> The goal of DNSCrypt is to provide encryption of all DNS traffic between stubs and resolvers

There's a very large opsec downside to this - namely, the loss of visibility into botnet C&C queries and DNS DDoS traffic.

Folks who wish to encrypt their DNS queries can make use of existing encrypted VPN technologies.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

		The basis of optimism is sheer terror.

			  -- Oscar Wilde