Re: [DNSOP] extension of DoH to authoritative servers

[Paul Wouters <[e-mail]>]

On Tue, 12 Feb 2019, Paul Vixie wrote:

> this is especially vital for IoT, whose makers will 
> never be profitable other than from data they collect.

I hope those makes will be unprofitable and close shop.

IoT devices should be designed to be accessed through secure VPN or TLS
connections, without going through vulnerable large scale server farms
in unknown or unpleasant countries invading my human privacy rights.

For example, I'm using my hue lights with or without VPN, without telling
Philips when I turn the lights on or off and without telling philips
when I am near or not near by house.

That said, software circumventing the system's resolver is bad, and is
not the layer this should be happening on, and it should really be a
last ditch effort requiring user exception. But browsers think they are
the DNS police now :(

Paul