News for hackers. Stuff that matters.

A comment on Improving DNS Privacy with Oblivious DoH. Parent comment

Re:Improving DNS Privacy with Oblivious DoH by TimWolla on Tuesday December 08, 2020 @08:14AM (#25344626)
Yes, I understand that. But I don't understand what ODoH does better than a run of the mill SOCKS proxy, such as Tor.
[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by landerwust on Tuesday December 08, 2020 @08:17AM (#25344642)
Tor is not a run of the mill SOCKS proxy, not least in that it inserts arbitrarily high latency into the user data path. On the other hand, an actual run of the mill SOCKS proxy would have visibility of the user's queries and their identity, defeating the purpose of the design.
[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by TimWolla on Tuesday December 08, 2020 @08:37AM (#25344809)
> an actual run of the mill SOCKS proxy would have visibility of the user's queries and their identity, defeating the purpose of the design.

Why would it have visibility of the queries? If I send a TLS connection (containing my DoH query) through that SOCKS proxy, then the SOCKS proxy is unable to decrypt that TLS connection without breaking certificate verification and thus can't read my DoH query.

[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by landerwust on Tuesday December 08, 2020 @09:08AM (#25345242)
Very good point! Sorry, I was confusing myself thinking about classic DNS.
[ Parent | on HN ]