News for hackers. Stuff that matters.

A comment on Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period.

Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by egberts1 on Thursday November 19, 2020 @10:55AM (#25150727)
DNS-over-HTTPS needs to die in a fire.

There’s absolutely no way for home gateway/DNS to defend against malicious use of DNSSEC proper through DoH at application level.

[ Parent | on HN ]
Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by tptacek on Thursday November 19, 2020 @09:20PM (#25156736)
DNS-over-HTTPS has protected more people in just a couple years than 25+ years of DNSSEC standardization attempts. DNSSEC is moribund; meanwhile, it's not a bad bet that most DNS lookups in 5 years will originate over DoH.
[ Parent | on HN ]
Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by detaro on Thursday November 19, 2020 @10:56AM (#25150734)
> defend against malicious DNSSEC

what does that mean?

[ Parent | on HN ]
Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by egberts1 on Thursday November 19, 2020 @11:22AM (#25151022)
Not so much a faulty DNSSEC protocol but a misuse of DoH embedded maliciously within applications.
[ Parent | on HN ]
Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by mazatta on Thursday November 19, 2020 @01:10PM (#25152379)
This vector has always existed - all that changed is RFC 8484 defines a standard way of doing this.
[ Parent | on HN ]
Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by iso1631 on Thursday November 19, 2020 @01:04PM (#25152288)
> DNS-over-HTTPS needs to die in a fire.

Sadly not going to happen

[ Parent | on HN ]