News for hackers. Stuff that matters.

A comment on Turn off DoH, Firefox. Parent comment

Re:Turn off DoH, Firefox by ripdog on Thursday September 12, 2019 @07:05AM (#20950105)
Do you... really care if someone outside you network knows the domain you chose for an internal network service?

That's not sensitive information. Also, there's basically no way for cloudflare, even if they were being malicious about it, to collect and use that information. What would they do with it?

[ Parent | on HN ]
Re:Turn off DoH, Firefox by Tharkun on Thursday September 12, 2019 @01:58PM (#20954375)
Yes, I care. Why don't you? I work for Tier 1 banks. They are paranoid, and rightly so. One of their many paranoid rules is that hostnames can never betray the machine's purpose. You could easily analyze DoH stats and deduce certain machines' functions.

Leaking information is bad.

[ Parent | on HN ]
Re:Turn off DoH, Firefox by userbinator on Thursday September 12, 2019 @07:35AM (#20950282)
It's definitely sensitive information --- useful for attackers to find out the structure of the LAN.
[ Parent | on HN ]