Hi. On Mon, Apr 13, 2020 at 11:16:02AM +0300, Andrei POPESCU wrote: > On Lu, 13 apr 20, 08:47:22, Reco wrote: > > On Sun, Apr 12, 2020 at 07:46:38PM -0400, Lee wrote: > > > > > How many people use a dnssec validating resolver? > > > > See above. Besides, DNSSEC is for integrity of zones, not privacy. > > You need DNS-over-TLS if you need last one. > > > > > > > At least Cloudflare resolvers have dnssec enabled. > > > > *And* the ability to see users' DNS queries. Neat, right? > > Whether DoH or DNS-over-TLS, you have to trust the DNS server.
Yup. That's why I have my own, and every Debian user can have their own too, using only free software. Reco
