Setting Up an Ad-Blocking VPN with WireGuard and Pihole

Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by ignoramous on Thursday April 25, 2019 @01:09PM (#19750230)

If these increase in popularity [0], I'm pretty sure DoH will be the goto workaround for web apps and native apps, alike, which would be unfortunate because DNS based ad-blocking is all encompassing and takes very little effort to setup [1]. That makes me wonder why DoH was even conceived, if not for the benefit of ad-networks [2]?

Thinking along similar lines, can't help but wonder if cert-pinning does more harm than good.

[0] Folks have been doing this since atleast 2002 http://sam.zoy.org/writings/internet/doubleclick.html

[1] https://adguard.com/en/blog/adguard-dns-announcement.html

[2] OpenDNS founder, davidu, has been crying foul about it too https://news.ycombinator.com/item?id=18257318

[ Parent | on HN ]

Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by monochromatic on Thursday April 25, 2019 @02:04PM (#19750862)

Probably an ignorant question, but is there a way of disabling DoH at the firewall level?

[ Parent | on HN ]

Re:Setting Up an Ad-Blocking VPN with WireGuard and Pihole by ignoramous on Thursday April 25, 2019 @02:45PM (#19751271)

I don't see how DoH can be filtered at the firewall at request-level, since it looks like regular HTTPS traffic. Of course, MITMing HTTPS and then blocking particular DoH reqs and letting rest through would work, but apps that pin certificates might make MITMing an uncomfortable ordeal.

Blocking a DoH provider altogether might not be feasible.

[ Parent | on HN ]