Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Regarding censorship, that works only if there's no network side blocking, otherwise the unencrypted requests to root servers also get intercepted. That's why some people use DoH as the upstream for their resolver.

Not all countries or ISPs do this, but some do.



True, DNSSEC should tell you if requests are being rewritten or blocked, but it will not help you circumvent this.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: