DoH doesn’t even attempt to address DNS tree validation, which is what DNSSEC do... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		topranks on Dec 6, 2019 \| parent \| context \| favorite \| on: Inferring and hijacking VPN-tunneled TCP connectio... DoH doesn’t even attempt to address DNS tree validation, which is what DNSSEC does. The two are complimentary.

tptacek on Dec 6, 2019 [–]

They're complimentary in that one of them does something useful and directly addresses a real ongoing threat, and the other doesn't. It's true, those aren't the same things.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact