moparisthebest
Joined 9 years ago
Karma
54
Submissions
7
Member since
Apr 10
Joined 9 years ago
Also, XMPP has e2e extensions, at least one of which supports encrypting/verifying arbitrary XML[1], so if the resolver supported it, you could only trust the resolver. (also don't forget about DNSSEC which can be used to verify DNS responses too)
DoH is DNS-over-HTTP
DoT is DNS-over-TLS
1. performance: since the TCP+TLS handshake is only performed once and the connection is kept open forever
2. privacy: the resolver doesn't get the requesting party's IP address