Re:Mozilla’s DNS over HTTPs
by ecnahc515 on Tuesday February 25, 2020 @09:01PM
(#22419607)
Then your security strategy definitely needs improvements, since malware often uses hardcoded IPs to bypass DNS proxying/forwarding that corporate networks use. Seriously, this argument could be used to say we should be using HTTP instead of HTTPS, but anyone doing security knows if they really need that level of introspection they need to MITM HTTPS traffic with a MITM proxy. If you care that much, you also need to MITM DoH/DoT traffic.
[ Parent
| on HN ]
Re:Mozilla’s DNS over HTTPs
by throw0101a on Thursday February 27, 2020 @08:07AM
(#22432860)
DNS sniffing takes care of a lot of low-hanging fruit.