It is not as easy "only running a script", and suggest the following
exercise to prove my point.

Change your DNS on your phone to point to an alternate DNS provider while
on the carriers network.

Yes, you *do* need to be very technical to accomplish this.  If users can't
get to an alternate DNS on all devices they use, it won't be accepted.
Users won't accept a system where they can only send email to X on Wi-Fi,
but can't communicate with X on the carriers or ISP's network.  With the
trend of more smartphones/tablets as the primary internet access device
this will prevent the mass uptake of alternate root DNS.

The existing root DNS has worked acceptably for decades, and with DNSSEC it
has fixed some of the security concerns.  To answer "Why Not?" to the
question of trusting alternative DNS doesn't answer any of the concerns
raised in RFC 2826 <https://tools.ietf.org/html/rfc2826> nor does it
address the lack of financial, political, and technical stability and
longevity that the Alternative DNS systems have exhibited.

On Thu, May 17, 2012 at 9:13 AM, Nuno Garcia <[log in to unmask]> wrote:

> please see inline:
>
> On 17 May 2012 13:42, Michael Haffely <[log in to unmask]> wrote:
>
>> I don't think it is user share so much as fundamental problems with
>> Alternate DNS systems.
>>
>> it is. Unless its run by political (or alike) reazons, its a business
>
>
>> How easy is it to block alternate DNS by governmental, law, or other
>> agencies or actors?  Unlike the existing DNS system, it is quite trivial to
>> flatten an entire alternate DNS and have no appreciable impact to the
>> Internet.
>>
>
> in the Internet its as easy to block as it is to circumvent
>
>
>> How does it work at sites that block outbound DNS requests at the edge?
>>
>
> circumvent, use DNS apps, for instance, use proxies, whatever...
>
>
>> Are you and all those you want to access these resources technical enough
>> to configure all your phones, computers, etc. to implement alternate DNS
>> for all networks?
>>
>
> No one needs to be technical enough, only to run a script and its done.
>
>
>> Why trust an alternate DNS?
>>
>> why not?
>
>