I was previously using OpenDNS on my internal network. I found out today that comcast has switched over to DNSSec:Comcast DNSSec.
I've did a little research on DNSSec and its benefits. I understand the basics of DNSSec. Pretty much DNSSec signs your dns request so you won't have man-in the middle situation happen to your dns queries. Does a lot of malware use dns man-in-the middle attacks?
So then i found out OpenDNS doesn't think DNSSec is the ideal solution: OpenDNS opinion on DNSSec. They use something i've never heard before called DNSCurve. Sounds pretty similar to DNSSec. With comcast's solution you seem to be automatically protected if you use their DNS Servers. Not sure if this is true with OpenDNS or not. They also have a cool tool which i would love to use: DNSCrypt which encrypts your dns requests unfortunately right now its only for MACS.
So the overall question i should make the switch or is OpenDNS with its technology just as secure as DNSSec on comcast