Once ReThinkDNS is ready, this could be done to a home router at least. But setting up DynDNS or even a domain is not scaleable at all, to normie people.

[–] Lifter@discuss.tchncs.de 2 points 2 months ago (1 children)

There are many problems with VPN on public networks. Here's an example https://www.fortiguard.com/psirt/FG-IR-24-170

[–] boredsquirrel@slrpnk.net 2 points 2 months ago

That one can be bypassed by using an own DNSSEC or DOT DNS provider I think.

This makes "compliance" captive portals even more annoying... in Germany, every public network has one, so that people accept that they are not responsible for whatever and log MAC addresses and whatever.

This requires to use DHCP advertised insecure DNS, great!