Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS
by Operyl on Tuesday October 01, 2019 @11:32PM
(#21133238)
My ISP’s DNS servers take longer both in round trip and total resolution time compared to both 1.1.1.1 and 8.8.8.8... and I have both Comcast and AT&T in an urban area. While this might have been true in the past, that is definitely no longer the case in a lot of areas.
Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS
by smcameron on Tuesday October 01, 2019 @11:09PM
(#21133159)
> Your ISP, and nobody else, can deliver the lowest latency and quickest path DNS resolution
Ha! Tell that to Verizon, 'cause I'm pretty sure they're not aware of it.
Re:Big ISPs aren’t happy about Google’s plans for encrypted DNS
by kelnos on Wednesday October 02, 2019 @04:02AM
(#21134252)
> Why can’t my ISP support DoT?
They can, and I would be fine using it if it were a) fast, b) reliable, and c) (here's the big one) legally required that they not log or do anything with my queries.
As it stands, Comcast's provided resolver is somehow slower than some of the third-party providers for me, and I don't care to give them the ability to sell my DNS data.
But that also highlights a huge misconception about DoT/DoH: it only provides privacy to the resolver. It does not make your requests private in the eyes of the server or spanning the recursive queries that may be required during resolution. I’m not particularly compelled to trust Cloudflare more than OpenDNS or whatever. It’s the same situation with VPN.
Anyway it’s well known that the actual solution for people concerned with utmost privacy is a round robin resolver selection strategy. It’s super easy to implement... why aren’t browsers providing this type of option?