[dns-operations] DNSCrypt.

[Dobbins, Roland]

On May 31, 2013, at 10:45 PM, Paul Wouters wrote:

> And again, you can already connect over TLS to various DNS resolvers,
> such as unbound.

I didn't know that had been implemented - thanks for the clue!

> It's a feature mostly used to bypass UDP/TCP 53 filters, but it can bring you your query privacy if you (mistakenly) believe that to be an asset:

Again, I don't think DNSCrypt is an unalloyed good.  By the same token, I think it's interesting, and I think it's great that the OpenDNS folks and other contributors are at least experimenting in this general space.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton