Yet another Quadruple DNS?
alan.buxey at gmail.com
Thu Mar 29 15:56:51 UTC 2018
intercept/inject? why. an ISP can just run its own standard DNS
servers on 126.96.36.199 and 188.8.131.52 and point
their customers to those - they own their routing space, they can just
route to those locally....so anyone thinking they
can avoid their ISP by choosing some other addresses are mistaken....
the only way to avoid is through encrypted lookups
to a known/trusted/and signed endpoint etc
More information about the NANOG