Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You are not mistaken; DNSSEC doesn't encrypt records, and DoH does. DoH also authenticates the channel between you and your name server. It's likely that DoH will ultimately obviate the need for DNSSEC anywhere.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: