Big ISPs aren’t happy about Google’s plans for encrypted DNS

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by tptacek on Tuesday October 01, 2019 @08:55PM (#21132514)

Google's design doesn't ask you to trust Google more than you already do if you use Chrome. It doesn't default you to Google's DNS servers, will honor your current nameservers, and will upgrade you to DoH at any of those servers who support it. I'm honestly not sure what more you could ask for from Google on this particular issue.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by rgbrenner on Tuesday October 01, 2019 @09:30PM (#21132691)

Yes, Google used the right approach here. They honor your DNS settings, and upgrade it if it's available. Firefox, on the other hand, plans to force all of their users to trust Cloudflare by default.. and most users won't even know they made that change.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by GeekyBear on Tuesday October 01, 2019 @09:50PM (#21132790)

>Firefox, on the other hand, plans to force all of their users to trust Cloudflare by default.. and most users won't even know they made that change.

Mozilla has explicitly stated on their blog that they don't intend to make any change to a user's DNS settings without getting the user's consent.

>When DoH is enabled, users will be notified and given the opportunity to opt out

https://blog.mozilla.org/futurereleases/2019/09/06/whats-nex...

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by topranks on Wednesday October 02, 2019 @03:37AM (#21134131)

The problem is it’s just a banner with “ok” at the top, which clearly says “we’ve increased your privacy by (insert technical jumbo jumbo here).”

As Bert Hubert pointed out, to most users it ends up looking like this:

https://twitter.com/powerdns_bert/status/1123666707279695874...

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by hvis on Wednesday October 02, 2019 @09:46AM (#21136339)

So? It's clearly beneficial for the average user.

As long as the people who don't want it can easily opt out, I'm not seeing the problem.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by judge2020 on Tuesday October 01, 2019 @10:51PM (#21133098)

This is something I really think should be opt-in, even if it's via a notification toast.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by gruez on Tuesday October 01, 2019 @09:32PM (#21132703)

[deleted]

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by nuclear_eclipse on Tuesday October 01, 2019 @09:40PM (#21132739)

The article itself says this.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by bsimpson on Tuesday October 01, 2019 @09:42PM (#21132750)

The article?

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by daedalus_j on Tuesday October 01, 2019 @09:38PM (#21132731)

So it's more like HSTS for DNS? Auto-switch to encryption if our chosen target supports encryption?

Because that seems MUCH more sensible than a lot of the stories/comments about this recently make it seem.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by topranks on Wednesday October 02, 2019 @03:39AM (#21134142)

Yes, as Google plan you implement it, which is fine.

Most of the hulaboo is about Mozilla who are moving customers DNS queries to Cloudflare en mass, regardless of what DNS server they have already configured.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by tptacek on Tuesday October 01, 2019 @09:44PM (#21132763)

No. The HSTS security model is per-site; the DoH model covers all sites. If you get DoH working anywhere, it's working for you everywhere.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by judge2020 on Tuesday October 01, 2019 @09:02PM (#21132550)

The UI bug tracker is private so we don't know if there might also be a "select DNS resolver" option and/or a checkbox for "encrypt DNS" in Settings.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by colordrops on Tuesday October 01, 2019 @09:08PM (#21132582)

> Google's design doesn't ask you to trust Google more than you already do if you use Chrome.

So in other words trust them with everything.

[ Parent | on HN ]

[dead]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by damq on Tuesday October 01, 2019 @09:23PM (#21132661)

A whole bunch of irrelevant retorts + a personal attack. I've never seen a comment more deserving of getting flagged than this one.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by nickodell on Tuesday October 01, 2019 @10:44PM (#21133050)

That's true, but Google has made no commitment to keep it that way.

[ Parent | on HN ]

Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS by olliej on Tuesday October 01, 2019 @09:15PM (#21132624)

I also don’t use chrome :p

Google has promoted its own DNS service over others in the past, including for non-chrome users, and presumably would do the same when DoH (in whatever form) is the norm.

I was simply saying we already know that ISPs misbehave, but presuming that Google wouldn’t is not necessarily a clear cut decision.

[ Parent | on HN ]