Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-03 Thread tincanteksup

Thanks .. this appears clarify my mis-understanding.

On 03/07/2020 08:46, Marc SCHAEFER wrote:

On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote:

DNSSec would put an end to this sort of snooping .. lol


As Gert said, no, it won't.

What you may want is DNS over HTTPS or over TLS. However, in that case, it's
the DNS provider that can snoop on you, but no longer your ISP. If your ISP
does not spy on you, the mixing with all of its customers and the caching it
offers are valuable.

Google and CloudFare offer DNS over HTTPS, bypassing your local DNS,
the latter seem to less spy on its users.

https://en.wikipedia.org/wiki/DNS_over_HTTPS


___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users




___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-03 Thread tincanteksup
Thanks .. it would seem that I have been mis-informed about this for 
quite some time ..


Today I learnt something !

On 03/07/2020 07:13, Gert Doering wrote:

Hi,

On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote:

DNSSec would put an end to this sort of snooping .. lol


Actually, it won't.  DNSSec guarantees authencity, but does not encrypt.

gert




___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-03 Thread Marc SCHAEFER
On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote:
> DNSSec would put an end to this sort of snooping .. lol

As Gert said, no, it won't.

What you may want is DNS over HTTPS or over TLS. However, in that case, it's
the DNS provider that can snoop on you, but no longer your ISP. If your ISP
does not spy on you, the mixing with all of its customers and the caching it
offers are valuable.

Google and CloudFare offer DNS over HTTPS, bypassing your local DNS,
the latter seem to less spy on its users.

   https://en.wikipedia.org/wiki/DNS_over_HTTPS


___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users


Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-03 Thread Gert Doering
Hi,

On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote:
> DNSSec would put an end to this sort of snooping .. lol

Actually, it won't.  DNSSec guarantees authencity, but does not encrypt.

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
 Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany g...@greenie.muc.de


signature.asc
Description: PGP signature
___
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users