HNHacker News
TopNewBestAskShowJobs

anon892375

10 karma · joined April 3, 2018

submissionscomments
anon892375··on Oblivious DNS: Plugging the Internet’s Biggest Privacy Hole
That would certainly be an improvement, but not the end of the story.

> the .com would just see your NS query for google.com

This would still create chokepoint for countries or generic TLDs where law enforcement could harvest data. For example they might be interested who visits say eff.org or stormfront.org

We still need to either blind or distribute the TLD NS servers to avoid presenting a singular target.

anon892375··on Oblivious DNS: Plugging the Internet’s Biggest Privacy Hole
Resolvers should aggressively cache the root zone. And the traffic shouldn't be any worse than what google or cloudflare resolvers are seeing.