5 ms·
A great example of why you should be running your own validating recursor instead of relying on a third party
by bastien2 2y ago
A great example of why you should be running your own validating recursor instead of relying on a third party
- OptionOfT 2y agoCan you elaborate on the validating part?
- betaby 2y agohttps://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en https://www.icann.org/resources/pages/dnssec-what-is-it-why-... And how to enable it on `unbound` https://www.howtoforge.com/how-to-set-up-local-dns-with-unbound-on-debian/ https://www.howtoforge.com/how-to-set-up-local-dns-with-unbo...
- Aissen 2y agoThe problem is that if everyone does that, DNS no longer scales; or it should be done smartly with only recursing censored answers. And then it will escalate with IP-level blocking of root servers or NS servers of censored websites.