Re: [Resolverless-dns] Paper on Resolver-less DNS

[Paul Vixie <[e-mail]>]

On Wednesday, 21 August 2019 19:53:55 UTC Erik Sy wrote:
> ... Anyway, I think its time to improve the
> data protection of DNS before the engineering department gets involved
> in those advertising programs.

because we have to secure the whole internet system, and not just the subset 
of that system called the web, dns itself has been the subject of massive 
change over the last two decades to improve its data protection.

the idea of having a web object tell my web browser which malware server to go 
to in order to download a bitcoin miner, without being subject to either 
control or monitoring by my private network operator (parental controls, or 
corporate security), should terrify pretty much everybody.

we need the internet system to be secure, including its naming system, and not 
on an app-by-app (such as the web, which to the internet is just an app) 
basis. embedding dns content in web object secures against only one attack, 
and only within the confines of one app. the rest of the problem will remain, 
except, the web as an app wouldn't benefit from the rest of those solutions.

-- 
Paul