Hi out there. I was wondering if there is some information gathered
concerning dns safety : how dns & qubes work is part of the doc, but I
miss additional hints on good practice: setup free (like freedom) dns
services, security of dns services (protection against dns poisoning),
probably locally caching of dns answers to avoid too much useless
queries, maybe setting up warnings if certain addresses like debian,
fedora, my-home-bank, etc. should change their IP, maybe
correlation-free cross-checking of the local DNS-cache via TOR ETC.
This seems a complex subject to me and I would be grateful for any help.