News for hackers. Stuff that matters.

A comment on Improving DNS Privacy with Oblivious DoH. Parent comment

Re:Improving DNS Privacy with Oblivious DoH by eeZah7Ux on Tuesday December 08, 2020 @10:23AM (#25346350)
"""A key component of ODoH working properly is ensuring that the proxy and the DNS resolver never “collude,” in that the two are never controlled by the same entity, otherwise the “separation of knowledge is broken"""

Essentially this is no better than using an HTTP proxy or a VPN.

[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by t0mas88 on Tuesday December 08, 2020 @11:06AM (#25347055)
A HTTP proxy (or VPN) know exactly who you connect to, even with SSL they know the target name since SNI isn't encrypted.

In this proposal the DNS-proxy doesn't know what you've sent to the DNS resolver.

[ Parent | on HN ]