A cartoon intro to DNS over HTTPS (2018)

Re:A cartoon intro to DNS over HTTPS (2018) by xg15 on Sunday October 20, 2019 @04:09AM (#21302824)

All this assumes though that the devices can be configured to do that. While that's likely for browsers, it's less likely for smart TVs or other IoT devices, especially if you don't trust the devices in the first place.

(Edit: removed bit about root CA certs because I misunderstood)

[ Parent | on HN ]

Re:A cartoon intro to DNS over HTTPS (2018) by KozmoNau7 on Sunday October 20, 2019 @06:14AM (#21303260)

The Chromecast in particular defaults to 8.8.8.8, ignoring your DHCP-assigned DNS servers.

I've completely blocked any outbound traffic to 8.8.8.8 and 8.8.4.4 from my network.

[ Parent | on HN ]

Re:A cartoon intro to DNS over HTTPS (2018) by ytch on Sunday October 20, 2019 @05:31AM (#21303102)

how about setup iptables to forward all DNS traffic to self-hosted Pi-hole?

[ Parent | on HN ]

Re:A cartoon intro to DNS over HTTPS (2018) by arpa on Sunday October 20, 2019 @05:35AM (#21303119)

if the certificates are pinned, you're screwed. Even if they aren't, it's a matter of luck if your smart$thing accepts self-signed certificates for $thingsdomain.

[ Parent | on HN ]

Re:A cartoon intro to DNS over HTTPS (2018) by canofbars on Monday October 21, 2019 @04:55AM (#21310371)

This is why you don't buy proprietary spyware hardware.

[ Parent | on HN ]