News for hackers. Stuff that matters.

A comment on DNS-over-HTTPS Policy Requirements for Resolvers. Parent comment

Re:DNS-over-HTTPS Policy Requirements for Resolvers by laHiesh1 on Wednesday April 10, 2019 @12:51PM (#19626523)
Do they bother resolving internal domain names such as example.lan? Otherwise that would be stupid and leaky.
[ Parent | on HN ]
Re:DNS-over-HTTPS Policy Requirements for Resolvers by vetinari on Wednesday April 10, 2019 @02:09PM (#19627285)
Also intranet.mycompany.com. There's not a chance that a resolver would know, which domains are internal and which are not.
[ Parent | on HN ]
Re:DNS-over-HTTPS Policy Requirements for Resolvers by josteink on Wednesday April 10, 2019 @01:18PM (#19626796)
With Windows and AD “internal” names are FQDN, which resolves fine with the DNS server provided with the DHCP settings.

Of course DoH will break this and leak. Enterprises everywhere will hate this and ban Firefox.

[ Parent | on HN ]