Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse code

Change the blurb to something closer to the awesome summary by sthen@

  • Loading branch information...
commit ab379019f81f8eddf06a906b5f5a7f04091776b7 1 parent d9d5d60
Frank Denis jedisct1 authored

Showing 1 changed file with 10 additions and 17 deletions. Show diff stats Hide diff stats

  1. +10 17 README.markdown
27 README.markdown
Source Rendered
@@ -6,29 +6,22 @@ A tool for securing communications between a client and a DNS resolver.
6 6 Description
7 7 -----------
8 8
9   -DNSCrypt is a slight variation on [DNSCurve](http://www.dnscurve.org/).
  9 +dnscrypt-proxy provides local service which can be used directly as
  10 +your local resolver or as a DNS forwarder, encrypting and
  11 +authenticating requests using the DNSCrypt protocol and passing them
  12 +to an upstream server, by default OpenDNS who run this on their
  13 +resolvers.
10 14
11   -DNSCurve improves the confidentiality and integrity of DNS requests using
12   -high-speed high-security elliptic-curve cryptography. Best of all,
13   -DNSCurve has very low overhead and adds virtually no latency to
14   -queries.
  15 +The DNSCrypt protocol uses high-speed high-security elliptic-curve
  16 +cryptography and is very similar to [DNSCurve](http://dnscurve.org/),
  17 +but focuses on securing communications between a client and its first-level
  18 +resolver.
15 19
16   -DNSCurve aims at securing the entire chain down to authoritative
17   -servers. However, it only works with authoritative servers that explicitly
18   -support the protocol. And unfortunately, DNSCurve hasn't received much
19   -adoption yet.
20   -
21   -The DNSCrypt protocol is very similar to DNSCurve, but focuses on
22   -securing communications between a client and its first-level resolver.
23 20 While not providing end-to-end security, it protects the local
24   -network (which is often the weakest link in the chain) against
  21 +network, which is often the weakest point of the chain, against
25 22 man-in-the-middle attacks. It also provides some confidentiality to
26 23 DNS queries.
27 24
28   -The DNSCrypt daemon acts as a DNS proxy between a regular client, like
29   -a DNS cache or an operating system stub resolver, and a DNSCrypt-aware
30   -resolver, like OpenDNS.
31   -
32 25 Installation
33 26 ------------
34 27

0 comments on commit ab37901

Please sign in to comment.
Something went wrong with that request. Please try again.