On 3/20/19 12:59 PM, Jacques Latour wrote:
I'm trying to balance in my mind the requirements to protect the DNS vs. what is happening on the wire, in the end, the browser will connect to an IP address which can be (in most case) mapped to a domain name
I don't think this second assertion is true in 2019. See if you can make even a first-order reasonable guess what I'm accessing at 172.217.1.129 or 23.227.38.32 or 52.40.19.98 or 216.105.38.15 or 104.20.1.85.
(Hint: I took these all from sites I visit frequently, and none are particularly obscure sites)
/a _______________________________________________ DNSOP mailing list [email protected] https://www.ietf.org/mailman/listinfo/dnsop
