Join Nostr
2025-04-09 09:28:20 UTC
in reply to

Legitime Eigentümerin des Schlüssels „4“ on Nostr: nprofile1q…5leww TLS can't protect against more things than DNSSEC can: - spoofing ...

TLS can't protect against more things than DNSSEC can:
- spoofing of "real" DNS entries
- spoofing of entries that don't exist
- proof of a NS being authoritative for the domain

the only thing it really does is hide your queries, which, imo, is not the biggest problem? i don't think it constantly warrants the overhead + you have to trust your NS not to tell anyone about your queries (haha lol cloudflare) + your NS might not use it for reverse lookups.