Re: [tor-relays] Please do not use 9.9.9.9 as your DNS on an exit relay

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256

On 11/23/2017 03:10 AM, Dave Warren wrote:

One note, 9.9.9.10 does no filtering, but sadly also doesn't enforce DNSSEC. It has the same privacy policy and similar.

The former is good, the later not a problem, b/c DNSSEC validation has to be made by the client nevertheless.

I do persoanlly use 9.9.9.10 together with dnsmasq (whihc does the DNSSEC job) at my desktop b/c I couldn't get DNSSEC woring with the DNS servs of my ADSL provider here in Hamburg.

- -- Toralf PGP C4EACDDE 0076E94E