Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

hahaha no. You have to go out of your way to use DNS-over-HTTPs or DNSSEC.


DNSSEC only provides signatures, it doesn't encrypt your queries.

How much you need to go out if your way depends. Firefox enables DoH by default in some areas, for example. Windows and Chrome will try to use it if your DNS server of choice supports it (i.e. if you've set up 1.1.1.1 or 8.8.8.8).

Android has Private DNS enabled by default, I believe. Some manufacturers may turn it off, I don't remember the setting my devices shipped with.


Oh! I always thought DNSSEC was encrypted, thanks for the correction




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: