Re: [tor-dev] DNSSEC

2014-09-01 Thread Lunar
merc1...@f-m.fm: > On Mon, Sep 1, 2014, at 11:54, Mike Cardwell wrote: > > The exit nodes do the DNS requests. The client doesn't see an IP address. > > It connects to the Tor SOCKS interface and says, "connect me to hostname > > example.com on port N". It doesn't look up the IP address of > > "exa

Re: [tor-dev] DNSSEC

2014-09-01 Thread merc1984
On Mon, Sep 1, 2014, at 11:54, Mike Cardwell wrote: > The exit nodes do the DNS requests. The client doesn't see an IP address. > It connects to the Tor SOCKS interface and says, "connect me to hostname > example.com on port N". It doesn't look up the IP address of > "example.com" > and *then* conn

Re: [tor-dev] [PATCH] Proposal 236 and voting

2014-09-01 Thread Nick Mathewson
On Sun, Aug 31, 2014 at 9:34 AM, George Kadianakis wrote: > George Kadianakis writes: > >> I inline a patch that specifies how voting should happen in proposal 236. >> >> The changes reflect a discussion I had yesterday with nickm during the >> Tor IRC meeting. >> >> BTW, while I like the simplic

Re: [tor-dev] DNSSEC

2014-09-01 Thread Mike Cardwell
* on the Mon, Sep 01, 2014 at 10:56:30AM -0700, merc1...@f-m.fm wrote: > Lol, first of all Copernicus, I have made no posts in that stackexchange > thread. I do have the same concern though, as it is legitimate. > Second, I believe all the answers there are wrong because an exit node > could not

Re: [tor-dev] DNSSEC

2014-09-01 Thread merc1984
On Mon, Sep 1, 2014, at 10:19, Артур Истомин wrote: > On Mon, Sep 01, 2014 at 04:33:34PM +, David Stainton wrote: > > > > Dear merc1...@f-m.fm, > > > > Is DNSSEC is not evil? To me it seems like the 1984 of domain name > > systems... > > Please take a good look at the political implications

Re: [tor-dev] DNSSEC

2014-09-01 Thread Артур Истомин
On Mon, Sep 01, 2014 at 04:33:34PM +, David Stainton wrote: > > Dear merc1...@f-m.fm, > > Is DNSSEC is not evil? To me it seems like the 1984 of domain name systems... > Please take a good look at the political implications of DNSSEC. > I personally do not understand why this Tor Project spec

Re: [tor-dev] DNSSEC

2014-09-01 Thread David Stainton
Dear merc1...@f-m.fm, Is DNSSEC is not evil? To me it seems like the 1984 of domain name systems... Please take a good look at the political implications of DNSSEC. I personally do not understand why this Tor Project spec includes mention of DNSSEC: https://gitweb.torproject.org/torspec.git/blob

[tor-dev] DNSSEC

2014-09-01 Thread merc1984
I am surprised to find that there is no form of DNSSEC associated with TOR. I am running dnscrypt, but find that I fail the DNSSEC test at http://dnssec.vs.uni-due.de/ when using the TBB. I have unbound chained to dnscrypt which is on a rotary to 5 trusted DNS resolvers. How can you not understa