It's become common knowledge that running an open resolver is a security risk, because your open resolver will be abused with amplification attacks.

For amplification attacks to succeed, the attacker has to use IP spoofing. This is a lot harder with DoT and DoH, because the protocols require a TLS handshake to be done before queries can be sent.

Knowing this, it seems like running an open DoT/DoH resolver is safer than running an open resolver on port 53, but what are the risks of running an open DoT/DoH server?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.