Re: Fedora 33 System-Wide Change proposal: systemd-resolved

[Petr Menšík]

DNS over TLS is offered already by package called stubby. But DNS over
TLS does not bring you more privacy usually. It only allows moving
(some) queries away from your ISP to somewhere else, but always someone
can read them.

On 4/14/20 9:33 PM, Michael Cronenworth wrote:
> On 4/14/20 2:23 PM, Ben Cotton wrote:
> > === DNS over TLS ===
> >
> > systemd-resolved supports DNS over TLS (different from DNS over
> > HTTPS). Although this feature will not initially be enabled by
> > default, using systemd-resolved will enable us to turn on DNS over TLS
> > in a future Fedora release, providing improved security if the user's
> > DNS server supports DNS over TLS.
>
> Why wait?
>
> This is something I've been interested in and was interested in
> implementing in Fedora.