News for hackers. Stuff that matters.

A comment on Tell HN: Archive.is inaccessible via Cloudflare DNS (1.1.1.1). Parent comment

Re:Tell HN: Archive.is inaccessible via Cloudflare DNS (1.1.... by DaniloDias on Saturday May 04, 2019 @06:24PM (#19829769)
Encrypting dns is bad for end users. Please cut this shit out. You are acting like you are defending against the NSA, but in reality we will have a bunch of shitty IoT phoning data to indecipherable IP addresses without any meaningful defense of consumer privacy.

It is hostile to customers who want to troubleshoot wtf apps are doing.

[ Parent | on HN ]
Re:Tell HN: Archive.is inaccessible via Cloudflare DNS (1.1.... by celsoazevedo on Saturday May 04, 2019 @07:31PM (#19830064)
Normal DNS queries aren't encrypted. It's normal queries on port 53.

Users/programs/IoT can choose to use DNS-over-TLS or DNS-over-HTTPS, but that's not Cloudflare's fault.

[ Parent | on HN ]
Re:Tell HN: Archive.is inaccessible via Cloudflare DNS (1.1.... by dagenix on Saturday May 04, 2019 @08:39PM (#19830347)
Nothing in his response is about encrypting DNS. Go grind your axe elsewhere.
[ Parent | on HN ]
Re:Tell HN: Archive.is inaccessible via Cloudflare DNS (1.1.... by sercand on Sunday May 05, 2019 @02:18AM (#19831452)
In my country, government/ISP blocks websites and changes the DNS results of 8.8.8.8 since it is not encrypted. If ISP can create a valid certificate, that browsers trust [1], they may be able to access my Gmail or Github account.

[1] https://www.zdnet.com/article/mozilla-to-chinas-wosign-well-...

[ Parent | on HN ]