News for hackers. Stuff that matters.

A comment on Mozilla’s DNS over HTTPs. Parent comment

Re:Mozilla’s DNS over HTTPs by tbyehl on Tuesday February 25, 2020 @09:54AM (#22413638)
> before DoH, setting a custom DNS via DHCP was enough

That ship had already sailed. You also have to run your own DNS, allow DNS egress only from your own DNS, and DNAT the rest back to yours in order to un-break all the things with hard-coded resolvers.

[ Parent | on HN ]
Re:Mozilla’s DNS over HTTPs by Avamander on Tuesday February 25, 2020 @10:47AM (#22414062)
Same with NTP surprisingly. Literally everything I have talks to a NTP server once in a while, but only Linux machines actually ask the network's NTP servers.
[ Parent | on HN ]
Re:Mozilla’s DNS over HTTPs by tbyehl on Tuesday February 25, 2020 @11:17AM (#22414380)
Lots of embedded Linux devices have hardcoded NTP servers. Was caught by surprise at this after I'd segregated a bunch of stuff to have no Internet access.
[ Parent | on HN ]
Re:Mozilla’s DNS over HTTPs by Avamander on Tuesday February 25, 2020 @11:48AM (#22414683)
Absolutely, but I found it surprising that even my Kindle contacts an NTP server, or that both Android and Apple phones do.

Why don't they ask DHCP for a nice stratum 1 server instead, I don't know, maybe someone here does?

[ Parent | on HN ]