Firefox’s Trusted Recursive Resolver DNS feature is dangerous

Re:Firefox’s Trusted Recursive Resolver DNS feature is dange... by trumped on Sunday August 05, 2018 @12:47PM (#17692136)

that's great, but are you coming for the ip addresses too (probably the bigger challenge)?

[ Parent | on HN ]

Re:Firefox’s Trusted Recursive Resolver DNS feature is dange... by patrickmcmanus on Sunday August 05, 2018 @02:56PM (#17692838)

wrt esni the anonymity pool is definitely the set of content that can share the same address pool. In a world with lots of CDNS (and several multi-CDN switching services) this covers a huge amount of content - but I agree - not everything.

[ Parent | on HN ]

Re:Firefox’s Trusted Recursive Resolver DNS feature is dange... by trumped on Sunday August 05, 2018 @03:12PM (#17692913)

If you think about the best/worst case scenario, would you be happy if one CDN would deliver everything? I think that we would be in a worst situation... ideally, I think that everyone would have their own servers and that your ISP would not even be able to see which IP addresses you are talking too (completely decentralized)

[ Parent | on HN ]

Re:Firefox’s Trusted Recursive Resolver DNS feature is dange... by patrickmcmanus on Sunday August 05, 2018 @03:18PM (#17692948)

cdn switchers/sharers are very interesting here. e.g. cedexis

[ Parent | on HN ]

Re:Firefox’s Trusted Recursive Resolver DNS feature is dange... by eastdakota on Sunday August 05, 2018 @05:30PM (#17693640)

Yes, we are. After ESNI we’re working on DNS IP address randomization.

[ Parent | on HN ]

Re:Firefox’s Trusted Recursive Resolver DNS feature is dange... by trumped on Sunday August 05, 2018 @09:42PM (#17694614)

is that a joke? sorry I don't see how that would help... where could I get more info?

[ Parent | on HN ]