Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolver (TRR) Comment Period

Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by CarelessExpert on Thursday November 19, 2020 @12:32PM (#25151918)

> I am inclined to think most users use client-side content blocking, and not DNS-based content blocking,

I think you're missing the point, here.

A lot of enterprises run their own delegating DNS server for a variety of reasons that have nothing to do with ad blocking.

DoH breaks that en masse.

Firefox has always struggled to gain adoption in corporate settings, and this looks like a nail in the coffin .

[ Parent | on HN ]

Re:Mozilla DNS over HTTPS (DoH) and Trusted Recursive Resolv... by shawnz on Thursday November 19, 2020 @12:48PM (#25152106)

If you control the workstation, you could just set your DNS server by a policy. See: https://github.com/mozilla/policy-templates/blob/master/READ...

Of course that could be easily bypassed, but such a restriction could be easily bypassed by determined employees regardless of whether Firefox natively supports DoH or not.

Local intranet sites will still continue to work without any changes because by default it will fall back to the native resolver if DoH can't resolve the domain. So there should be no breakage by default besides for content blocking use cases.

[ Parent | on HN ]