Hacker News Reader

> While sophisticated users can turn to cloud-based “open resolvers”

Sophisticated users run their own resolvers instead of relying on unverifiable promises from for-profit entities.

And how do these sophisticated users populate their own revolvers if not plain DNS, DNS over TLS, or DNS over HTTPS? There is no such thing as hosting a globally distributed database from your house.

The point is that they are not a single central entity easily siphoned off by an org that'll sell the information for profit.

This doesn't solve the problem. Those resolvers are also unencrypted.

Reply on news.ycombinator.com