[dns-operations] Introducing DNSCrypt

[Stephane Bortzmeyer]

On Wed, Dec 07, 2011 at 01:35:29AM +0000,
 Dobbins, Roland <rdobbins at arbor.net> wrote 
 a message of 22 lines which said:

> > The goal of DNSCrypt is to provide encryption of all DNS traffic
> > between stubs and resolvers
> 
> There's a very large opsec downside to this - namely, the loss of
> visibility 

"In Kazakhstan, we ban DNScrypt because too secure, our glorious
police can not watch inside DNS queries." (with apologies to
DNS_BORAT on Twitter...)