undefined | Better HN

0 pointsprogval4y ago0 comments

> nothing about DNSSEC prevents a DNS server (or middlebox) from denying results to a disfavored domain

But at least it is detectable thanks to NSEC and NSEC3 records.

0 comments

2 comments · 2 top-level

Kind of. An intermediary can drop packets and the client will never get the response.

It's detectable when the site that the DNS provider is censoring falls off the Internet!

j / k navigate · click thread line to collapse