mnot’s blog

Design depends largely on constraints.” — Charles Eames


Tuesday, 11 June 2019

Moving Control to the Endpoints

The introduction of encrypted DNS is a natural step in the process of securing the Internet, but it has brought a considerable amount of controversy, because it removes a means of control for network operators -- including not only enterprises but also schools and parents. The solution is to move control of these services to the endpoints of communication -- for example, the users’ computers -- but doing so has its own challenges.

this entry’s page