Re: Securing DNS traffic

2020-05-24 Thread Sad Clouds
On Sun, 24 May 2020 20:55:29 +0200 Jörn Clausen wrote: > I simply don't get how this is a use case for DoT or DoH. Even if you > disguise the DNS lookup, the next packet you send will be directed to > the address you just looked up. Unless this happens to be a virtual > hosting service, it is qui

Re: NetBSD Jails

2020-05-24 Thread Rhialto
On Tue 19 May 2020 at 08:10:00 +0930, Brett Lymn wrote: > On Sat, May 16, 2020 at 09:51:42AM +0100, Sad Clouds wrote: > > > > Just look at how Solaris does it - it has Zones (aka Jails) and LDOMs > > (Logical Domains) on SPARC. LDOMs seem to be a much better way of > > partitioning OS instances ve

Re: Securing DNS traffic

2020-05-24 Thread Jörn Clausen
Hi! I'm also worried about this, but also fear datamining by my ISP. So I > completely ditched Google, and split my queries between Cloudflare and > Quad9 - neither gets the complete picture. > I simply don't get how this is a use case for DoT or DoH. Even if you disguise the DNS lookup, the next

Re: Securing DNS traffic

2020-05-24 Thread Aaron B.
On Sat, 23 May 2020 11:38:18 +0200 (CEST) Havard Eidnes wrote: > If you desire to protect your lookup history from prying eyes, it's > one thing to protect the communication itself. However, I would > personally shy away from all of Google, Cloudflare and Mozilla > recursors, DoH or not. I'm al

Re: [Partually SOLVED] Small artifacts in intel video driver and uxa mode

2020-05-24 Thread Salil Wadnerkar
On Sun, May 24, 2020 at 12:10 PM Dmitrii Postolov wrote: > With next xorg.conf settings no small artifacts: > > Option "Accel" "false" > Option "AccelMethod" "uxa" > AccelMethod is redundant when you are not using any acceleration. You can also try: Option "TearFree" "true" Option "DRI" "2" # de

Re: [Partually SOLVED] Small artifacts in intel video driver and uxa mode

2020-05-24 Thread Dmitrii Postolov
With next xorg.conf settings no small artifacts: Option "Accel" "false" Option "AccelMethod" "uxa" ... Driver "intel" [Partually SOLVED] without Accel. 24.05.2020, 14:48, "Dmitrii Postolov" : > Hi to all NetBSD users! Sorry for my bad English... > > Hardware: Intel NUC5PPYH CPU Intel N3700 Brasw

Re: Securing DNS traffic

2020-05-24 Thread Sad Clouds
On Sun, 24 May 2020 11:00:00 +0200 (CEST) Havard Eidnes wrote: > Nope. There is no specified protocol to direct recursive > resolution to use TLS towards specific authoritative servers. > There has been talk about this on the DNSOP IETF working group, > but nothing has been agreed. This means t

Small artifacts in intel video driver and uxa mode

2020-05-24 Thread Dmitrii Postolov
Hi to all NetBSD users! Sorry for my bad English... Hardware: Intel NUC5PPYH CPU Intel N3700 Braswell Intel HD Graphics NetBSD 9.0 (RELEASE) amd64 uefi image. I use the "wsfb" driver in /etc/X11/xorg.conf, all OK, but it performance is not the highest. Very large artifacts are observed with th

Re: Securing DNS traffic

2020-05-24 Thread Havard Eidnes
>> Plus, of course, the outgoing queries from your recursor will >> be in cleartext. > > OK, so I understand that root servers probably won't support > TLS, but some authoritative servers may support TLS (aka > ADoT). But I don't seem to find a way to tell unbound "use TLS > opportunistically, wher

Re: Securing DNS traffic

2020-05-24 Thread Sad Clouds
On Sat, 23 May 2020 11:38:18 +0200 (CEST) Havard Eidnes wrote: > With your own recursor which implements query minimization, and by > having multiple clients actively using it, you leak far less about > your lookup history than by forwarding all your full DNS client > queries to one of the above.