Robert Edmonds <edmonds@debian.org> writes: > The entire DNS root zone is only 1 MB compressed and is updated about > once a day. It would be even better for privacy if the whole root zone > were distributed via HTTPS, as the initiator would not reveal to the > server any information about what TLD is being looked up. Running a local root instance is possible and easy. See https://tools.ietf.org/html/rfc7706 Bjørn