Writing

Opsec

What a device or an operator reveals just by being observed, and how to keep it from adding up to something identifying.

1 post

8 Sept 2026
From plaintext DNS to DNS over TLS: watching a query disappear inside TLS
One DNS query, captured plain and then over DNS over TLS, read back in termshark: github.com legible in the hex pane, then ciphertext. Plus what a router does when asked for DoT, and what an observer can still read either way.
DNSDNS over TLS