>DNS isn't exactly designed to withstand that kind of abuse (You can't block someone, you can't ratelimit someone, etc).
It's hard to take out somebody's nameservers, since there's no single point of failure (unlike with most web setups). But even then there's still (hopefully) some resolvers with cached records :)
Perhaps this is a dumb question: How does that solve the problem? Either its readable by all or by none.
It's hard to take out somebody's nameservers, since there's no single point of failure (unlike with most web setups). But even then there's still (hopefully) some resolvers with cached records :)
I think you may have missed the point. He's not worried about the data being unavailable, quite the opposite.
There's a service called TelFriends that brokers keys between you and your friends.
Ordinary people don't have to care about that - typically their username/password is used in whatever app they're using to transparently decrypt records on the fly.
And since we're talking about privacy, you own your domain and its data - not Telnic, Google, or Facebook.