this post was submitted on 30 Jan 2024
1119 points (97.1% liked)

Memes

45730 readers
628 users here now

Rules:

  1. Be civil and nice.
  2. Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.

founded 5 years ago
MODERATORS
gary_host_laptop@lemmy.ml
sexy_peach@feddit.de
cyclohexane@lemmy.ml
cypherpunks@lemmy.ml
1119
My name is Guy Incognito (feddit.de)
submitted 9 months ago by Oiconomia@feddit.de to c/memes@lemmy.ml
75 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] nightwatch_admin@feddit.nl 2 points 9 months ago* (last edited 9 months ago)

Correct, DNSSEC is like a signature, you can be reasonably sure that DNS wasn’t poisoned. If you’re looking for encrypted DNS, use DoH (DNS over HTTPS) or DoT (DNS over TLS).
While I have great confidence in my ISP, I use Quad9 as they also provide the above plus don’t do ECS (optional) and block malicious domains.