DNS Security, Part IV: Transport security for DNS (DoT, DoH, DoQ)

from blog Educated Guesswork, | ↗ original
This is Part IV of my series on DNS Security (parts I, II, III). In this part I cover transport security for DNS. For years most of the DNS security effort went into DNSSEC, which provides authenticity for DNS data by signing the DNS records themselves. This left two big gaps. First, DNSSEC has seen fairly low levels of deployment, leaving the...