Open Rangak opened 9 years ago
DNSSEC doesn't help here. http://sockpuppet.org/blog/2015/01/15/against-dnssec/
I'd rather advocate for a dnschain-like solution to this problem (preferably an EdDSA + scrypt derivative), but good luck fitting a blockchain on a router's storage space :P
I have talked to the DNSchain folks to get it supported for the router. Storage is a challenge but there are some potential solutions for people who are willing to do a little bit extra. If you are interested in helping make this happen let us talk.
Currently the router uses the DNS provided by the ISP. This has privacy and censorship implications. Offer DNS options to users who are concerned about this. Look into
http://www.greycoder.com/list-uncensored-dns-providers/
Also look into DNScrypt, DNSSEC, DNScurve for improved privacy, integrity and DOS protection.