News for hackers. Stuff that matters.
Re:On Firefox moving DNS to a third party by brians on Tuesday September 04, 2018 @01:04PM (#17910658)
This seems well-intentioned but incredibly dangerous. There's no promise CF can make that justifies trusting them to receive a stream of every request from every FF browser, with all this trackable metadata.

In particular, I think it would be unsurprising if CF's lines were tapped upstream. CF and Mozilla staff have a history of treating TLS as if it protects all content, rather than as a tool for keeping narrowly defined secrets. I explain further at https://weblog.evenmere.org/posts/2014-05-16-tls-is-not-for-... .

Re:On Firefox moving DNS to a third party by Xylakant on Tuesday September 04, 2018 @01:28PM (#17910914)
At the moment, this is an A/B test to see if DNS over HTTPS can keep up with regular DNS in term of performance in a real-world setting. It’s an opt-in study. That’s about the extend of it.

You can explicitly enable DNS over HTTPs on recent FF versions if you want to, then you need to pick a provider. There are a few available choices out there. There’s a list on the cURL docs IIRC. Due to the standard being finalized right now, the list is understandably quite short, by there’s no particular reason you ISP shouldn’t offer a suitable DNS server in the future.

Re:On Firefox moving DNS to a third party by partiallypro on Tuesday September 04, 2018 @01:07PM (#17910678)
Does Google do this with their own DNS service in Chrome...or would this open the door for them to do so? I don't like the implications.
Re:On Firefox moving DNS to a third party by sp332 on Tuesday September 04, 2018 @01:12PM (#17910732)
But since there's already a high risk of ISPs sniffing or even redirecting this traffic, you'd have to show that the risk for the average user is higher with CF.
Re:On Firefox moving DNS to a third party by Coding_Cat on Tuesday September 04, 2018 @01:16PM (#17910780)
It funnels all _firefox_ requests through CF, as opposed to all _$ISP_ requests. Which one is worse for the user I find hard to say, but they'd definetely generate two completely different datasets. (for example, CF's set would be international).
Re:On Firefox moving DNS to a third party by fasafsafsf on Tuesday September 04, 2018 @01:52PM (#17911183)
>This seems well-intentioned but incredibly dangerous.

Like many of the things the Mozilla Corporation has been doing these last years.