News for hackers. Stuff that matters.

A comment on A cartoon intro to DNS over HTTPS (2018). Parent comment

Re:A cartoon intro to DNS over HTTPS (2018) by josteink on Sunday October 20, 2019 @09:40AM (#21304067)
> But with DoH, you have just lost control of your network. (Unless block 443 and force everything to go through a (Squid) proxy?)

Expect “enterprise” network equipment using an approach like this to provide a “DOH firewall” in the near future.

Net privacy gained: negative.

[ Parent | on HN ]
Re:A cartoon intro to DNS over HTTPS (2018) by throw0101a on Sunday October 20, 2019 @11:39AM (#21304781)
I've been on networks where everything had to go through a proxy, where browsers were told how to act via WPAD/proxy.pac and you set an HTTPS_PROXY env for wget/cURL to work.
[ Parent | on HN ]
Re:A cartoon intro to DNS over HTTPS (2018) by akerl_ on Sunday October 20, 2019 @01:49PM (#21305722)
The goal isn’t adding privacy on enterprise networks. Enterprise networks should already be accounting for the existence of HTTPS, and either allowing, blocking, or proxying employee/device connections based on their threat model.

The goal for DoH is to improve privacy for individual humans, and it does that.

[ Parent | on HN ]