<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Friends --<div><br></div><div>Today we introduced a preview of DNSCrypt (<a href="http://www.opendns.com/technology/dnscrypt">http://www.opendns.com/technology/dnscrypt</a>). The goal of DNSCrypt is to provide encryption of all DNS traffic between stubs and resolvers, a growing and often overlooked problem that has bugged us for some time. TSIG was one consideration, but ultimately, we went for a simpler route for now. Our design follows much of the design outlined here: <a href="http://dnscurve.org/out-implement.html">http://dnscurve.org/out-implement.html</a></div><div><br></div><div>It's lightweight, strives for UDP, and the code is being pushed to Github today so others can check it out.</div><div><br></div><div>It's complementary to DNSSEC, doesn't attempt to address verification or validation, but it does provide encryption which helps prevent snooping, replay, filtering and man-in-the-middle attacks. This is the first in a number of releases we have planned around security in the coming year and we're interested in feedback.</div><div><br></div><div>Check it out! </div><div><br></div><div>Thanks,</div><div>David</div><div><br></div><div><br></div></body></html>