Re:A cartoon intro to DNS over HTTPS (2018)
by judge2020 on Sunday October 20, 2019 @08:29AM
(#21303705)
The ISP is trying to block other DNS traffic, they're not necessarily trying to block certain websites (or if they are, they wouldn't want to block [for example] all of Cloudflare or the GCP load balancers to block porn hosted on either of those services). DoH solves that problem as directly as possible without going to solutions that have other side-effects.
[ Parent
| on HN ]
Re:A cartoon intro to DNS over HTTPS (2018)
by teddyh on Sunday October 20, 2019 @08:43AM
(#21303771)
The ISP do most certainly want to block web sites. The currently most common method is to block DNS, but they could, and will, switch to IP blocking in a heartbeat if they have to.
> they wouldn't want to block [for example] all of Cloudflare or the GCP load balancers
If your only defense against blocking by your ISP is to centralize web server hosting, then you’re just moving the problem to there instead. Cloudflare also blocks, or “deplatforms”, those they deem unseemly. And once someone is taken off the centralized web server hosts, they can be blocked by your ISP again. You’re not solving the problem in the long term.
DoH is fighting yesterday’s war.