Yeah, the figure[1] on the side in the article seems to show something different, because there the response goes over the recursive resolver again. Maybe the text is wrong?
All seems to hinge on the recursive resolver acting as a proxy, so a direct response from ODNS server to the client stub doesn't seem safe.
All seems to hinge on the recursive resolver acting as a proxy, so a direct response from ODNS server to the client stub doesn't seem safe.
[1] https://s3.amazonaws.com/ftt-uploads/wp-content/uploads/2018...