Re:Mozilla’s DNS over HTTPs
by JoshTriplett on Tuesday February 25, 2020 @10:43AM
(#22414026)
Or in other words, DoH works better on hostile networks because it looks like just one more HTTPS connection.
That's an intentional design feature. You're attempting to intercept traffic, and any mechanism you could use to do so "transparently" could be used by any hostile network to do so.
You can still intercept traffic from cooperating devices if you want, just not transparently. That's a feature, not a bug, and the Internet will be better for it.
Re:Mozilla’s DNS over HTTPs
by Legogris on Tuesday February 25, 2020 @12:38PM
(#22415209)
Right, but I do think this is better handled at the OS layer. Hardcoding everyone to route through Cloudflare is a hardly a net win, and might be better or worse than your ISP depending on who and where you are.
That's an intentional design feature. You're attempting to intercept traffic, and any mechanism you could use to do so "transparently" could be used by any hostile network to do so.
You can still intercept traffic from cooperating devices if you want, just not transparently. That's a feature, not a bug, and the Internet will be better for it.