Re:Turn off DoH, Firefox
by icebraining on Thursday September 12, 2019 @05:29AM
(#20949603)
> They won't be able to block DNS over HTTPS
Of course they will. The DoH server can be blocked just like any other.
Eh, this is a losing battle for them. In theory any HTTPS server can be a DoH server if set up for it. One key for the future is to have so many DoH servers available for people in countries that filter that there is no way the government can block them all.
Re:Turn off DoH, Firefox
by icebraining on Thursday September 12, 2019 @09:57AM
(#20951473)
My uBlock Origin contains over 100k filter rules, and I pay zero for it. I doubt a company can't sell a list of open DoH servers for a reasonable price.
How they are going to block servers who have DoH url? DNS level block or IP block. May be SNI level block but in few years we will have ESNI.
Re:Turn off DoH, Firefox
by icebraining on Thursday September 12, 2019 @06:25PM
(#20957122)
To access a DNS-over-HTTP server, you need its IP (otherwise it would be a circular problem - must have DNS to access DNS). So they can just block the IP/port.
Why can't they block 1.1.1.1?
They can block but you can make any https page into DoH. What they are going to do? Block every web site?
This is very bad for Erdoğan. They won't be able to block DNS over HTTPS. Thus teir classic DNS blocks will be useless. Last time I've checked there was over 300K blocked domains via DNS. Even 8.8.8.8 doesn't work.