<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: What&#8217;s Wrong With OpenDNS</title>
	<atom:link href="http://andyleonard.com/2011/12/20/whats-wrong-with-opendns/feed/" rel="self" type="application/rss+xml" />
	<link>http://andyleonard.com/2011/12/20/whats-wrong-with-opendns/</link>
	<description>qstat -u aleonard -s z</description>
	<lastBuildDate>Wed, 05 Jun 2013 11:40:05 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: Krondor</title>
		<link>http://andyleonard.com/2011/12/20/whats-wrong-with-opendns/comment-page-1/#comment-4117</link>
		<dc:creator>Krondor</dc:creator>
		<pubDate>Fri, 22 Jun 2012 14:51:05 +0000</pubDate>
		<guid isPermaLink="false">http://andyleonard.com/?p=703#comment-4117</guid>
		<description><![CDATA[There is always a concern with blacklist/whitelist processes, and this is definitely one of them.  I hope they get this under control (you can override this block, but for a hosted domain this is rather serious).

I also have a problem in that OpenDNS while pushing DNSCrypt, is not supporting DNSSEC.  They say it&#039;s on their roadmap, but right now Google DNS does in fact validate DNSSEC queries.  It&#039;s a shame too as DNSSEC is now seeing large adoption particularly in .org.  It goes a mile against DNS Cache Poisoning.]]></description>
		<content:encoded><![CDATA[<p>There is always a concern with blacklist/whitelist processes, and this is definitely one of them.  I hope they get this under control (you can override this block, but for a hosted domain this is rather serious).</p>
<p>I also have a problem in that OpenDNS while pushing DNSCrypt, is not supporting DNSSEC.  They say it&#8217;s on their roadmap, but right now Google DNS does in fact validate DNSSEC queries.  It&#8217;s a shame too as DNSSEC is now seeing large adoption particularly in .org.  It goes a mile against DNS Cache Poisoning.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: What I&#8217;m Trying to Fix &#124; DNS Washer</title>
		<link>http://andyleonard.com/2011/12/20/whats-wrong-with-opendns/comment-page-1/#comment-3809</link>
		<dc:creator>What I&#8217;m Trying to Fix &#124; DNS Washer</dc:creator>
		<pubDate>Sat, 11 Feb 2012 17:15:44 +0000</pubDate>
		<guid isPermaLink="false">http://andyleonard.com/?p=703#comment-3809</guid>
		<description><![CDATA[[...] http://andyleonard.com/2011/12/20/whats-wrong-with-opendns/ [...]]]></description>
		<content:encoded><![CDATA[<p>[...] <a href="http://andyleonard.com/2011/12/20/whats-wrong-with-opendns/" rel="nofollow">http://andyleonard.com/2011/12/20/whats-wrong-with-opendns/</a> [...]</p>
]]></content:encoded>
	</item>
</channel>
</rss>
