Also, it strikes me as breaking the very root if trust that we use domain names, and this plain old DNS, to find the IP address of the DoH server.
-
-
-
Not if you do DNSSEC validation!
- 1 more reply
New conversation -
-
-
People use ISP-provided DoH?! Why???
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Those DNS records are almost certainly being served by an F5 DNS LB. They default TTL is 30 sec to facilitate DNS failover & the CNAME is identical to their deployment guides. High probability the “H” is one of their SSL boxes too, meaning DPI is available.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Huh. They raised it.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.