Mozilla’s DNS over HTTPs

Re:Mozilla’s DNS over HTTPs by afiori on Tuesday February 25, 2020 @09:44AM (#22413565)

That is a good point, but it is also mostly independent from DoH, a VPN with an hardcoded IP would have worked in the same way (if you look into elusive VPNs you can also find some that work by injecting traffic into padding of another connection).

The only difference is if you are worrying about the traffic leaving your own browser and in that case you can just not enable DoH

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by throw0101a on Tuesday February 25, 2020 @11:16AM (#22414356)

My passive network sniffers may throw red flags on suspicious traffic which may end up being VPN. By disguising non-web traffic over the (until now) web-mostly HTTPS, it makes the job of someone who wants to be a responsible netizen and monitor their network that much harder.

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by afiori on Tuesday February 25, 2020 @05:54PM (#22418416)

I agree if the point is that this might increase the reach of such technologies. But if you are thinking about traffic coming from sources different than your browser then why would they be unable to open a connection on hardcoded IPs?

Also VPN sniffing can be arbitrarily hard, for example if I remember correctly tools like https://www.softether.org/ are designed to work around the Chinese internet firewall.

From my point of view DoH add nothing outside the browser.

[ Parent | on HN ]