On Sun, Jul 26, 2026 at 09:49:38PM +0200, Michael Breuer <[email protected]> wrote a message of 22 lines which said:
> But I have a preference for encrypted transport-only, out of privacy > concerns. Leaking the cache to the networks doesn’t look good to me. Well, the draft was done for closed groups (such as the instances of the anycast network of a big public resolver) so, can we assume that there is already some sort of security (VPN?) between the machines? Or should we write something, in the security considerations, like "if the network between the peers is not secured against snooping, there is a risk of privacy leak. In that case, you should think twice"? DoT is currently not mandatory since the idea is to have an efficient mechanism, as lightweight as possible (the point is to save resources). _______________________________________________ DNSOP mailing list -- [email protected] To unsubscribe send an email to [email protected]
