News for hackers. Stuff that matters.

A comment on Mozilla VPN. Parent comment

Re:Mozilla VPN by Kelamir on Thursday June 18, 2020 @04:16PM (#23567481)
> ISPs can also observer your DNS lookups to Google’s or anyone else’s public DNS servers.

edw, could you elaborate on that, please? I thought changing to public DNS servers like OpenDNS provides some security from ISP tracking.

[ Parent | on HN ]
Re:Mozilla VPN by _jal on Thursday June 18, 2020 @04:48PM (#23567844)
In addition to the lack of encryption mentioned, some ISPs transparently intercept DNS requests and reply to them with their own.

Test your own ISP: try something like

nslookup news.ycombinator.com 1.2.3.4

If you get a response, your ISP is gaslighting you.

[ Parent | on HN ]
Re:Mozilla VPN by lifthrasiir on Friday June 19, 2020 @12:39AM (#23571013)
Some ISPs even tried to replace NXDOMAIN replies with their own "services". That was particularly popular in the last decade, though I haven't seen any recently.
[ Parent | on HN ]
Re:Mozilla VPN by stuuuuuuuuu on Thursday June 18, 2020 @04:29PM (#23567626)
Traffic between you and the public DNS servers isn't encrypted, so your ISP can still read it.

(I suppose this is one of the problems that DNS-over-HTTPS is designed to fix.)

[ Parent | on HN ]
Re:Mozilla VPN by Kelamir on Thursday June 18, 2020 @04:31PM (#23567653)
Thank you for the answer, stuuuuuuuuu! I'll look into it.

...

DNS-over-HTTPS can be enabled in Firefox via Network settings, turns out.

[ Parent | on HN ]