[cs615asa] DoH, DoT, and DNSSEC

Jan Schaumann jschauma at stevens.edu
Tue Mar 10 09:23:45 EDT 2020


All,

Following up on our discussion yesterday, here's a
link to a detailed breakdown of the DNS threat model
and what the different mechanisms help protect
against:
https://www.netmeister.org/blog/doh-dot-dnssec.html

Note in particular the distincting between DoH as a
technology and the application of DoH with a
centralized resolver, as those two are frequently
used interchangeably, although they are quite
different.

-Jan


More information about the cs615asa mailing list