On Aug 24, 2017, at 2:16 AM, Jan Dušátko <jan@dusatko.org> wrote:

Time for migration to DNSSEC and eventually DNS-over-TLS. Any kind of censorship will be soo hard there.

DNSSEC still requires the top level registrar to put the DS (delegation of signing) records for your zone in place. It's really just a nice way to prevent dns spoofing attacks... I'm not sure why it isn't used everywhere.

Jan

Dne 23. 8. 2017 v 19:44 juan napsal(a):

...

may be useful to deal with DNS censorship?

-- Jan Dušátko

Phone: +420 602 427 840 e-mail: jan@dusatko.org SkypeID: darmodej GPG: http://www.dusatko.org/downloads/jdusatko.asc

<jan.vcf>