Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period

Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by hannob on Thursday November 19, 2020 @09:20AM (#25149688)

Some do, some don't. For example the captive portal issue, browsers can try to connect without DoH to a captive portal test page and provide a special non-DoH login tab. You can't do that on the OS level. You could create some interaction between the browser and the OS, but that's nontrivial and needs a solution.

[ Parent | on HN ]

Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by Spivak on Thursday November 19, 2020 @09:33AM (#25149855)

Sure you can! iOS, Android, and GNOME/NetworkManager just open up a webview to handle the portal.

I’m sure others do too I just can’t say for certain.

[ Parent | on HN ]

Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by zinekeller on Thursday November 19, 2020 @09:48AM (#25150040)

Windows: Network Connectivity Status Indicator (NCSI) will ping www.msftncsi.com on older versions (8.1 and lower) or www.msftconnecttest.com on newer versions (10), and then prompts to open the web browser. Since IE/Edge will be always there, it works.

macOS: same as iOS (a dedicated window pinging www.apple.com).

Firefox: Detects detectportal.firefox.com and asks the user if the want to access the captive portal.

Android: Detects connectivitycheck.android.com on Android 5 and connectivitycheck.gstatic.com on Android 6+. I don't know if it applies to all phones, but I'm sure (that except for phones on Android One or Nexus/Pixel) Samsung also does this for phones outside of China.

[ Parent | on HN ]

Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by detaro on Thursday November 19, 2020 @09:34AM (#25149870)

OSes do at least some captive portal detection and prompting already too, but true, that might need additional work, I'm not familiar enough with the details.

[ Parent | on HN ]