Hacker News Reader

Comcast is the one sending you the (unsigned, unencrypted) response packets from 8.8.8.8.

You might as well use the Comcast ones.

Politically it's a lot easier to stop Comcast from altering through-traffic DNS than it is to stop them from lying in DNS responses and calling it pro-user.

And if you use DNS-over-HTTPS to get your answers from Google, Comcast can't modify them.

Reply on news.ycombinator.com