On: Mozilla’s DNS over HTTPs

[dheera]

I wonder what the implications will be for TCP-over-DNS, which besides bypassing firewalls, can also provide anonymity in a different way.

[belorn → dheera]

TCP-over-DNS, together with the draft RFC for encrypted resolver to authoritative communication, altolows for more end-to-end style encryption. Clients could do their own secure resolving without relying on a central service.

[coribuci → belorn]

> Clients could do their own secure resolving without relying on a central service.

So in other words: privilege escalation.