News for hackers. Stuff that matters.
Re:A cartoon intro to DNS over HTTPS (2018) by atomi on Sunday October 20, 2019 @08:51AM (#21303803)
Chromecast for example forces it's device to bypass local resolution and use Google's DNS. Bad Google, but that would still be an issue even without DoH. With DoH you just won't be able to port block ":53" which no one really does anyway. If you want device manufacturers to behave you're going to have to do it through regulation.
Re:A cartoon intro to DNS over HTTPS (2018) by xg15 on Sunday October 20, 2019 @09:13AM (#21303900)
> Bad Google, but that would still be an issue even without DoH.

Well, with regular DNS, you can force-route 8.8.8.8 to pi-hole and regain control relatively easily.

That's not possible with DoH due to TLS.

Re:A cartoon intro to DNS over HTTPS (2018) by atomi on Sunday October 20, 2019 @09:25AM (#21303969)
> force-route 8.8.8.8

Yeah static IP routing is an option - for both nameservers and nefarious servers. That is, we may just have to resort to using IP blocks.

Re:A cartoon intro to DNS over HTTPS (2018) by user927272 on Sunday October 20, 2019 @09:02AM (#21303842)
Yes but today one need to build and sell a device to take control of DNS. With DoH any app can do that