Centralised DoH is bad for privacy

Re:Centralised DoH is bad for privacy by zajio1am on Wednesday September 25, 2019 @01:32PM (#21073026)

In Czechia, ISPs are forced to block certain websites, but exact method is not speficied. Today, they just block it on DNS level, as that is simplest and effective enough (although easy to circumvent). If ordinary users were using DoH, then ISPs would be forced to use IP based blocking

[ Parent | on HN ]

Re:Centralised DoH is bad for privacy by throw0101a on Wednesday September 25, 2019 @03:22PM (#21074325)

This was one of the concerns brought up at the UKNOG panel:

Currently there is DNS blocking (e.g. gambling sites in Poland), and it handles most cases. If (too many?) people start circumventing that, will a government start insisting on more invasive measure (e.g., DPI)?

[ Parent | on HN ]

Re:Centralised DoH is bad for privacy by tialaramex on Wednesday September 25, 2019 @06:20PM (#21076217)

The government wrote a white paper about this because they proposed yet more blocking (for the whole anti-pornography thing where they want you to go buy a "pass" to look at porn) back in 2018.

The ISPs are not inclined to pay for DPI or whatever other nonsense, even if they believe it could be effective, which it probably can't be. Government does not want to take on a major budgetary extra to pay for something that's already unpopular. So that leaves it not getting done. Much hand-wringing.

The government already acknowledges that Tor completely defeats all existing attempts to censor the Network, but they supposed that DNS blocking is affordable and good enough. So, we make it no longer "good enough" and then too bad for their stupid policy.

[ Parent | on HN ]