News for hackers. Stuff that matters.

A comment on Firefox Installs non-free binaries from Cisco and Google again (2018). Parent comment

Re:Firefox Installs non-free binaries from Cisco and Google ... by AnIdiotOnTheNet on Wednesday January 08, 2020 @09:42AM (#21991833)
You can just point to other DNS servers instead of your ISP's. Some providers might intercept and redirect those queries, but I haven't ever run across any.
[ Parent | on HN ]
Re:Firefox Installs non-free binaries from Cisco and Google ... by judge2020 on Wednesday January 08, 2020 @11:23AM (#21992781)
You could, but DoH exists to provide a crypto-based guarantee that they can't even passively monitor the DNS requests you're sending to the alt. resolver.
[ Parent | on HN ]
Re:Firefox Installs non-free binaries from Cisco and Google ... by byuu on Wednesday January 08, 2020 @08:59PM (#21997809)
DoH only hides the domain name lookup. You still connect to the other server by IP. Even $2.50/mo VPS plans offer a unique IP these days, and building a database of IP:hostname is extremely trivial, especially for ISPs that already run DNS resolvers.

But let's be real: the internet is quickly becoming a walled garden, so having access to DNS requests is mostly only going to give you a billion facebook.com + twitter.com + youtube.com + google.com + google-analytics.com lookups anyway.

[ Parent | on HN ]