Matt Nordhoff

> Is DoH3 the same as DoQ (DNS-over-QUIC)? Not exactly. It's analogous to how DoT and DoH (with HTTP/2) both use TLS, and serve similar purposes, but one has an...

It may be useful, but it's a distinctly different feature with different security properties. For example: * If I'm a customer of a DNS hosting service, and have `my-domain.example` `ALIAS`...

I don't know the details, but I think AdGuard has both C++ ([DnsLibs](https://github.com/AdguardTeam/DnsLibs)) and Go (whatever libraries are used by [dnsproxy](https://github.com/AdguardTeam/dnsproxy)) implementations.

For better or worse, I'm pretty sure DNS over HTTP3 has real deployment in browsers (along with 8.8.8.8 and part of 1.1.1.1), so it could be useful.

`zoom.us` doesn't use DNSSEC (and `whois` doesn't show recent changes). There shouldn't be anything bogus.

Obeying the order from `getaddrinfo()` sounds problematic. 1. It harms load balancing. 2. If it's implemented before trying each IP in order if they're failing then you will be completely...

It's not a bug in the resolver, it's an unfortunate feature. :P DNS records are unordered, not guaranteed to be randomly ordered. Yeah, prefix length matching is what concerns me....

I forgot to check at each step. :( After it's done connecting, the original window just shows: ``` 00:54:08 Window : #69 00:54:08 Size : 168x34 00:54:08 Level : NONE...

``` 69 = { items = ( { type = "CHANNEL"; chat_type = "IRC"; name = "#ntppool"; tag = "perl"; } ); }; ```

Before it successfully connects, the window shows the same thing as in "After it's done connecting, the original window just shows".