News for hackers. Stuff that matters.

A comment on Mozilla’s DNS over HTTPs. Parent comment

Re:Mozilla’s DNS over HTTPs by buran77 on Tuesday February 25, 2020 @11:07AM (#22414262)
The problem is that the device (or website) also treats the owner and legitimate user as untrusted and obfuscates the content of the traffic in a way that makes everything completely opaque for them. The device/site only trusts its manufacturer which makes any device that completely obscures its traffic from its owner feel more like a Trojan horse. This is how you end up with questionable telemetry and data leaks for example.

What's a "trustworthy" device in this circumstance? If you can never verify then it's not trust it's faith and hope.

[ Parent | on HN ]
Re:Mozilla’s DNS over HTTPs by JoshTriplett on Tuesday February 25, 2020 @11:10AM (#22414298)
In what way does this argument not also suggest that the device should use plaintext HTTP so that you can intercept all its other traffic?
[ Parent | on HN ]
Re:Mozilla’s DNS over HTTPs by buran77 on Tuesday February 25, 2020 @01:44PM (#22415918)
What I want is a key to my own house, not an open door. Right now using a lot of software and IoT devices feels like buying a house but the builders keep the only key.
[ Parent | on HN ]