<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi Emre,<div><div><br></div><div><blockquote type="cite">@Greg: Is a similar case valid for DNSchain when DNS queries are<br>blocked/manipulated or just a few pre-defined DNS servers are allowed to<br>be used?</blockquote><div><br></div>Those are two questions, so I'll answer them separately:</div><div><br></div><div><blockquote type="cite">Is a similar case valid for DNSchain when DNS queries are blocked/manipulated</blockquote><div><br></div><div>DNS queries cannot be manipulated (meaning there is nothing that allows them to be, technically speaking).</div><div><br></div><div>To prevent queries from being manipulated, you can use existing software like DNSCrypt, and combine it with DNSChain (this is what a couple of servers currently do).</div><div><br></div><div>Alternatively, if DNSCrypt isn't used, and queries are sent in the clear, then an extra record can be sent along with them (one of the DNSSEC records, RSIG I think) that can be used to verify the correctness of the response.</div><div><br></div><div>As far as them being blocked... well, I think that's the same as your other question (feel free to clarify if I'm misunderstanding you):</div><div><br></div><div><blockquote type="cite">or just a few pre-defined DNS servers are allowed to be used?</blockquote><br></div><div>DNSChain (and any system) only works if you can get your data from someone or something that you have reason to trust.</div><div><br></div><div>If you connection is 100% censored, nothing will help you (except to take a trip outside of North Korea).</div><div><br></div><div>Thanks for the questions!</div><div><br></div><div>Kind regards,</div><div>Greg Slepak</div><div> <br class="Apple-interchange-newline"><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;">--</span><br style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;">Please do not email me anything that you are not comfortable also sharing</span><span style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !important; float: none;"> with the NSA.</span> </div> <br></div></div></body></html>