Re: [Add] [Ext] Updated charter proposal for ADD

[Ted Lemon <[e-mail]>]

FWIW, for those who aren’t aware of this, the main point of having a DNS Proxy on your home router (at 192.168.1.1, for example), the reason is primarily timing.   The ISP might change the IP address of the DNS server (although it rarely does), but more importantly if there is a power failure, and your home router becomes reachable before the ISP connection comes up, and your host connects to it during that gap, the router won’t have a DNS server IP address to offer your host other than its own.

For the case where we want the home router to support a secure DNS resolver, the proxy could simply be a tunnel to the DNS resolver: before the ISP connection comes up, names can’t be resolved, so there’s no problem, and when it does come up, then the TLS handshake will actually be with the ISP’s resolver, which will have an identity, not with the home router.

Even if the home router offers a value-added resolver service, the same principle would likely apply.   So before we go off and invent solution to this problem, we should make sure we need a solution.