Which is better and why?
Is there an indication of superiority based on the fact Android has somewhat implemented DOH whereas they ignore DNSSEC completely? Or are they ignoring it because it’s so good. That said, NextDNS also ignore DNSSEC.
DNSSEC and DoH aren’t the same thing. I feel like this post explains it best.
That’s a pretty good post. Makes sense and sounds like, just ipv6, we’ve got a long time before the internet starts making vast changes.
You can have both. One offers encryption, the other offers verification to avoid spoofing. Most domains have not implemented it with their dns settings and domain registrar though. As a result, NextDNS doesn’t enforce it for compatibility reasons. They would block 99% of the web if they required it.
