News for hackers. Stuff that matters.

A comment on Mozilla VPN. Parent comment

Re:Mozilla VPN by Skunkleton on Thursday June 18, 2020 @02:54PM (#23566342)
DNS is super trivial to redirect. I've been on ISPs that redirect _all_ DNS traffic to their servers regardless of where it was sent. The best solution here is to switch to DoH. Of course then your DoH provider gets to log all of that sweet info instead.
[ Parent | on HN ]
Re:Mozilla VPN by Spivak on Thursday June 18, 2020 @03:35PM (#23566906)
Not if you run your own DoH endpoint on a VPS!
[ Parent | on HN ]
Re:Mozilla VPN by Skunkleton on Thursday June 18, 2020 @04:49PM (#23567847)
I have my own unbound running on a VPS. My network intercepts all port 53 traffic, filters out ad servers, and then forwards over wireguard to my VPS. I should probably enable DoH as well. I'm feeling kind of lazy about it though.
[ Parent | on HN ]
Re:Mozilla VPN by n1try on Friday June 19, 2020 @03:36AM (#23572010)
I think ceasing to use your ISP provider's unencrypted DNS services will already bring quite some boost in privacy for the average internet user. That's why I recently switched to using DNSCrypt (https://github.com/DNSCrypt/dnscrypt-proxy) with one of the public providers listed here: https://dnscrypt.info/public-servers (pick one run by some university or internet activism organization).
[ Parent | on HN ]
Re:Mozilla VPN by Skunkleton on Friday June 19, 2020 @03:01PM (#23577792)
It also brings an increase in recaptcha puzzles lol
[ Parent | on HN ]