DNSSEC is an authentication mechanism. It does not encrypt queries or responses.... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

xenophonf on Sept 18, 2024 | parent | context | favorite | on: Is Tor still safe to use?

DNSSEC is an authentication mechanism. It does not encrypt queries or responses.

You might be thinking of DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT).

There's also DNSCurve.

https://en.wikipedia.org/wiki/DNSCurve

no-dr-onboard on Sept 18, 2024 [–]

DoH and DNSSEC don't use ECH (encrypted client hello)

From what I remember, only DoT uses ECH

https://media.ccc.de/v/chaoscolloquium-1-dns-privacy-securit...

_rdvw on Sept 18, 2024 | [–]

ECH can be used regardless of DoT, DoH, dnscrypt, or plain as long as your resolver passes HTTPS queries.

You can easily test this: dig @8.8.8.8 https pq.cloudflareresearch.com

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact