Encrypted resolution.
WHAT THE PROBLEM IS
Traditional DNS queries are sent unencrypted and visible to anyone on the path.
WHAT THAT DISCLOSES
Every domain a user visits.
WHAT ENCRYPTED TRANSPORTS EXIST
DNS over an encrypted transport on a dedicated port DNS over standard web protocol traffic
WHAT THE SECOND ONE MAKES DIFFICULT
Distinguishing DNS traffic from other web traffic, deliberately.
WHAT THAT ACHIEVES
Resistance to blocking and interception.
WHAT IT COMPLICATES
Network-level filtering and monitoring that organisations rely on.
WHAT THE DEBATE IS ABOUT
Centralisation, since browsers and systems may default to a small number of large resolvers.
WHAT THAT MEANS FOR A LOCAL PROVIDER
Queries that would have come to you going elsewhere, including out of the country.
WHAT TO CONSIDER OFFERING
Encrypted resolution yourself, so users have a local encrypted option.
WHAT ELSE ENCRYPTION DOES NOT HIDE
The address connected to afterwards, and the server name in the connection, unless that is also encrypted.
WHAT TO UNDERSTAND
Encrypted resolution improves privacy; it does not provide anonymity.
