News for hackers. Stuff that matters.

A comment on Comcast Is Lobbying Against DNS Encryption. Parent comment

Re:Comcast Is Lobbying Against DNS Encryption by gormandizer on Wednesday October 23, 2019 @02:53PM (#21337639)
I've been doing DNS over TLS with pfSense for over a year now.

The problem as I understand it is that Firefox and Chrome will soon default to DoH. Now I have to remember to go in and change default app settings. Ok not a huge deal with just two apps but yet something else I shouldn't have to do.

[ Parent | on HN ]
Re:Comcast Is Lobbying Against DNS Encryption by growse on Wednesday October 23, 2019 @03:05PM (#21337752)
Just set your network resolver to return NXDOMAIN for the canary domain use-application-dns.net. (https://support.mozilla.org/en-US/kb/canary-domain-use-appli...)

That will signal to firefox (at least) to disable DoH and use the system resolver.

[ Parent | on HN ]