Sample Header Ad - 728x90

Should DNS queries for the time servers be encrypted?

1 vote
1 answer
149 views
When it comes to encrypting DNS queries using dnscrypt-proxy, people also tend to use dnsmasq on their linux machines. The main goal of this setup in the past was to provide cache for DNS queries, but the DNS cache is now implemented in dnscrypt-proxy itself. So it looks like that dnscrypt-proxy is all people need these days. But I noticed that people usually add the following line (or something similar) to the dnsmasq config: server=/pool.ntp.org/1.1.1.1 The purpose of this line is to send DNS queries for the time server domain directly to the DNS server and hence skip the whole encryption process (it's just a regular DNS query). Some people once told me that these queries should go as fast as possible to provide a better time sync. So, does this approach make any sense?
Asked by Mikhail Morfikov (11049 rep)
Sep 17, 2020, 08:34 PM
Last activity: Sep 18, 2020, 04:56 PM