Mozilla’s DNS over HTTPs

Re:Mozilla’s DNS over HTTPs by irrational on Tuesday February 25, 2020 @01:57PM (#22416035)

I'm a programmer and I have no idea what OPs comment means. I keep meaning to learn about networking stuff, but there is always so many other things to learn and since I don't work with devops or networking stuff it hasn't really been a priority.

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by vetinari on Tuesday February 25, 2020 @02:51PM (#22416704)

Don't take it in some wrong way, but most programmers have no idea about networking; for them, IP addresses are just some numbers.

Yes, are explaining to our colleagues what IP address, subnet, route, or interface are.

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by swiley on Tuesday February 25, 2020 @03:14PM (#22416952)

Most of that comment is Mozilla BS and not networking stuff.

--Someone with a decent understanding of networking

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by cmroanirgo on Wednesday February 26, 2020 @04:16AM (#22421569)

Agreed. Just looked up about trr nonsense and found this 'setting':

> network.trr.excluded-domains

> Comma separated list of domain names to be resolved using the native resolver instead of TRR. Users may add domains they wish to exclude from TRR to this pref. This pref can be used to make /etc/hosts works with DNS over HTTPS in Firefox. Setting network.trr.excluded-domains to include host names from /etc/hosts will make them fall back to platform DNS, which will use the rules in /etc/hosts.

So, rather than using the hosts file, network admins & devs now have to specify 'special sauce' in FF too?

I'm not buying DoH for this reason alone, because it throws out a lot of legacy (albeit always regarded as hokey) for no good reason. If FFox is doing it's own DNS stuff is MUST (at least) do hosts file resolution, imho. Otherwise it leaks names, which kinda defeats one of the main the purposes of DoH: which is to maintain critical privacy in places where it's being abused.

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by teknopaul on Wednesday February 26, 2020 @04:31PM (#22427572)

This is so true. FireFox is terrible at spaffing private info at search engines.

Breaking DNS is madness IMHO. Its just more sites that dont work on FF.

Broken is not more secure, its just broken.

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by chrisweekly on Wednesday February 26, 2020 @07:43AM (#22422412)

You're not alone. That said, I highly recommend reading and referencing "High Performance Browser Networking" by Ilya Grigorik^1, it's accessible, detailed, accurate, and useful in the extreme.

1 https://hpbn.co/

[ Parent | on HN ]

Re:Mozilla’s DNS over HTTPs by lagadu on Wednesday February 26, 2020 @04:15AM (#22421563)

Fire up a Linux VM and check out the named howto. Not only will you learn a lot about dns, you'll have a working server by the end of it.

[ Parent | on HN ]