Mozilla’s DNS over HTTPs

Re:Mozilla’s DNS over HTTPs by throw0101a on Tuesday February 25, 2020 @11:16AM (#22414356)

My passive network sniffers may throw red flags on suspicious traffic which may end up being VPN. By disguising non-web traffic over the (until now) web-mostly HTTPS, it makes the job of someone who wants to be a responsible netizen and monitor their network that much harder.

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by afiori on Tuesday February 25, 2020 @05:54PM (#22418416)

I agree if the point is that this might increase the reach of such technologies. But if you are thinking about traffic coming from sources different than your browser then why would they be unable to open a connection on hardcoded IPs?

Also VPN sniffing can be arbitrarily hard, for example if I remember correctly tools like https://www.softether.org/ are designed to work around the Chinese internet firewall.

From my point of view DoH add nothing outside the browser.

[ Parent | on HN ]