Page 1 of 1

DNSCript ?

Posted: Thu Jun 28, 2012 12:30 pm
by thewolfe
I've used opendns for a long time and now I got this announcement. What say you about dnscript?

https://www.opendns.com/technology/dnscrypt/

Re: DNSCript ?

Posted: Sat Jun 30, 2012 3:07 pm
by TigerRaptor
All it does it encrypt the connection between OpenDNS and your computer to help prevent of DNS poisoning. Nothing major really.

If you had no problems then. Do you really need it now?

Re: DNSCript ?

Posted: Sat Jun 30, 2012 7:57 pm
by Jeff250
DNSSEC is sufficient to prevent poisoning, so it's not giving you any extra security on top of DNSSEC. It tries to give you privacy by encrypting your DNS request so that a man in the middle cannot see which name you're requesting, but it's an incomplete solution, since a man in the middle could get a pretty good idea of what name you've requested by looking at whatever IP address you connect to immediately afterwards.