News for hackers. Stuff that matters.
Re:Turn off DoH, Firefox by vetinari on Wednesday September 11, 2019 @08:33AM (#20939337)
No. The browser has no business in selecting DNS servers; it is a system-wide setting and it should ask the operating system to resolve names.

How the operating system resolves names, is up to it. It could use tcp-over-pigeons, if the sysadmin configured it so, and no application should be working around that.

If you want to use DoH with Cloudflare, you are free to configure your system to do so. You will also get consistency, all your apps will use the same system, not just the browser. Let the others to have their systems configured as it suits them.

Re:Turn off DoH, Firefox by yuft on Wednesday September 11, 2019 @04:19PM (#20944214)
Maybe if the OS providers were more proactive about DNS over TLS/HTTPS, Mozilla wouldn't have needed to do this to keep users secure.
Re:Turn off DoH, Firefox by vetinari on Thursday September 12, 2019 @07:02AM (#20950081)
Android does support DNS-over-TLS, and it does it in a way that does not break networks - whatever it gets from DHCP, it tries the same server with DoT first. Users can also configure their preferred DoT server.

Linux, or at least the glibc-based distributions, have a concept of nss_modules; you can configure whatever mechanism you want, some people are using DNSCrypt or nss-tls, for example. Systemd-resolved, with all the hate it gets, does support DoT. So do other local caching resolvers, like Knot.

With other systems, you would have to discuss that with the respective vendors. Vendors also discuss these issues with customers, and very few customers are fond of breaking their systems. Activism, as Mozilla has shown, is a good way to irritate a good chunk of your user base. The change would have to be gradual, and allow the local admins to be in control (like Android and Linux distributions do).