Skip to content

knot-resolver: enable DoT server (unconditionally)

Vladimír Čunát requested to merge vcunat/turris-os-packages:feature/kresd-enable-DoT into develop

... because why (k)not? For example, Android 9+ should just use it by default (I tried) - at least I think the "Automatic" mode is usually the default.

Of course, in that mode the certificate is not verified (and ATM we don't provide anything verifiable anyway), so the security benefit is small - it only prevents passive attacks.

Edited by Jan Pavlinec

Merge request reports