Why we run our own DNS root

Lorem ipsum dolor sit amet consectetur. Running a resolver is easy. Running the root it resolves against is the part nobody does, and it is the part that decides whether a privacy claim is architectural or contractual.

The upstream problem

Nullam sed tellus pharetra egestas vitae. A resolver with an upstream forwards what it cannot answer, and what it forwards is a complete record of what was asked. The upstream's policy is then your policy, whatever your own documentation says.

What changed

Sed do eiusmod tempor incididunt ut labore et dolore. With the root in the network there is no forward path off it, so the question "who else saw this query" has one answer, and the answer is nobody. That is a smaller feature list and a much shorter threat model.