Comment by hsbauauvhabzb

8 months ago

I’ve heard this before. Is there a way to reliably detect if this is occurring or case studies of where this has occurred?

Edit: I assume dns over https prevents this also, right?

DNSSEC would reveal that it's happening straight away, but that doesn't get you the IP address.

Of course, as mentioned putting your recursive DNS server on a cheap VPS somewhere that doesn't hack your connection would.

Yes, DoH prevents that, unless the DoH provider is in on it too, which most of the major ones are now, as this article is about.