Through the two major DNS privacy talks on FOSDEM I felt a bit at odd that so much effort is being put into the idea that giving all information to google will give best privacy. In basic security theory we talk about assets that need to be defended, and attackers we need to defend against. Why give everything to a company which revenue is based on breaking privacy? It sound completely incompatible with the idea of privacy.
Running your own resolver will give the authoritative servers the ip address of the request, but does this leak any assets to any potential attacker? The owner behind the authoritative servers already get the web logs so what additional information is being leaked. It seems to me that in order to get higher level of privacy you would need to run a VPN or Tor, in which case the DNS traffic can just go through the same path.
Running your own resolver will give the authoritative servers the ip address of the request, but does this leak any assets to any potential attacker? The owner behind the authoritative servers already get the web logs so what additional information is being leaked. It seems to me that in order to get higher level of privacy you would need to run a VPN or Tor, in which case the DNS traffic can just go through the same path.