FRESH

Hacker News

Can I use HTTPS RRs?

34 points by zdw

by gucci-on-fleek

1 subcomments

> you end up with no clear picture of which browsers support these records to which end.
> Unfortunately even the otherwise ever so useful https://caniuse.com/ does not provide that information
Not quite the same, but Cloudflare's statistics show that 8.1% of all DNS requests to its public resolver are for HTTPS RRs [0], and the statistics on the authoritative DNS server that I run [1] show that only 1.11% of requests were for an HTTPS RR.
[0]: https://radar.cloudflare.com/dns#dns-query-type
[1]: https://ns.maxchernoff.ca/

by esbranson

0 subcomment

As for Encrypted Client Hello (ECH), the next step in privacy, I think the issue has been with the web servers. NGINX began supporting it a few days ago? Chromium and even Cloudflare supported it since 2023.

by esbranson

0 subcomment

And even with alpn="h3" in my HTTPS RR, Chromium will still refuse without serving over TCP with a Alt-Svc header.

by TZubiri

0 subcomment

by rokoss21

1 subcomments