Live data from Hacker News

Quad9 Enables DNS over HTTP/3 and DNS over QUIC

quad9.net

1–10 of 20 posts

Re: Quad9 Enables DNS over HTTP/3 and DNS over QUIC

#10
post #4

So many more layers than the original simple DNS protocol.

"Simple" doesn't always mean "better". A car without seatbelts is less complicated than one with, but it definitely doesn't make it a better car.

Similarly, The original DNS protocol doesn't have any form of verification: it is is trivially easy for a MitM attacker to alter the responses - or even for a non-MitM one to send spoofed responses "in the blind". It also doesn't have any form of confidentiality: it is trivially easy for a MitM attacker to log all the requests you make, which essentially means your entire browser history.

It takes an awful lot of hacking to turn classic DNS into something even remotely representing a mature and well-designed protocol. By the time you are done bolting on all the other stuff it really isn't all that simple anymore.

Post reply on HN