Discuss mailing list

[the-old-p <the-old-p AT proton.me>]

Hello,

I use opennic with my android phones.

For this i use the "Private DNS" Setting.

Algorithm is as follows:

• Resolve the DNS Server in Private DNS-Settings ( with normal DNS )
• Connect via TLS
• Certificate validity check
• Use private DNS Server

An official DNS Entry is needed with a valid Certificate ( eg letsencrypt ) outside of opennic

I made a POC for this under the-old-p.gotdns.org and ns.the-old-p.pirate

What do you think about making an Record like dot.opennic.org, doh.opennic.org

and set the A Records to IP Address of some tier2 servers that want to support this.
DOH and DOT  ćan be made multi domain capable with help of nginx.

I can provide the setup as used in my POC.

CU

Gerd