News for hackers. Stuff that matters.

A comment on What’s Next in Making Encrypted DNS-over-HTTPS the Default. Parent comment

Re:What’s Next in Making Encrypted DNS-over-HTTPS the Default by Ayesh on Saturday September 07, 2019 @11:42PM (#20908473)
I suppose you can block the IP 1.1.1.1, but Google serves THEIR DNS at `google.com` on HTTPS port. One of the design choices of DoH to make it look like HTTPS traffic.

It's gonna be difficult to block DoH traffic.

[ Parent | on HN ]
Re:What’s Next in Making Encrypted DNS-over-HTTPS the Default by throw0101a on Sunday September 08, 2019 @04:36PM (#20913259)
> One of the design choices of DoH to make it look like HTTPS traffic.

Wait until encrypted SNI gets implemented everywhere was well.

[ Parent | on HN ]