Turn off DoH, Firefox

Re:Turn off DoH, Firefox by lima on Wednesday September 11, 2019 @08:10AM (#20939107)

There aren't many intermediaries if you use your ISP's internal resolvers.

[ Parent | on HN ]

Re:Turn off DoH, Firefox by vetinari on Wednesday September 11, 2019 @08:23AM (#20939241)

And there are intermediaries between Cloudflare/other DoH providers and the respective authoritative nameservers anyway.

[ Parent | on HN ]

Re:Turn off DoH, Firefox by ti_ranger on Thursday September 12, 2019 @08:30AM (#20950655)

My ISP is subject to specific regulations for licensed network providers, which Cloudflare isn't.

Thus, Cloudflare is the problematic intermediary.

[ Parent | on HN ]

Re:Turn off DoH, Firefox by m-p-3 on Wednesday September 11, 2019 @09:30AM (#20939913)

But unless they have the private key for CloudFlare certs, they can't snoop in so it doesn't matter if there are intermediaries in between.

[ Parent | on HN ]

Re:Turn off DoH, Firefox by vetinari on Wednesday September 11, 2019 @09:34AM (#20939965)

The traffic between Clouflare and the authoritative nameservers will be good old 53/udp.

The only thing the snooper won't be sure with is, which Cloudflare client asked for that record.

[ Parent | on HN ]