On Thu, 08 Jan 2015 08:38:35 -0800, Paul Syverson <[email protected]> wrote:
The flip side is that, against such an adversary, using a DNS server that supports encryption of
queries and responses is probably more important than it being local.

I like to chain unbound up to dnscrypt-proxy in order to encrypt DNS traffic for this very reason.

dnscrypt-proxy frequently is unable to keep up however, so I currently have unbound configured to make queries directly if dnscrypt-proxy is not responding.
_______________________________________________
tor-relays mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Reply via email to