It's become common knowledge that running an open resolver is a security risk, because your open resolver will be abused with amplification attacks.

For amplification attacks to succeed, the attacker has to use IP spoofing. This is a lot harder with DoT and DoH, because the protocols require a TLS handshake to be done before queries can be sent.

Knowing this, it seems like running an open DoT/DoH resolver is safer than running an open resolver on port 53, but what are the risks of running an open DoT/DoH server?

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.