News for hackers. Stuff that matters.

A comment on Improving DNS Privacy with Oblivious DoH. Parent comment

Re:Improving DNS Privacy with Oblivious DoH by rsync on Tuesday December 08, 2020 @03:44PM (#25351104)
"If so, I foresee blocks on DoH/etc to common resolvers like 8.8.8.8 and 1.1.1.1. I'll be blocking them at home on the assumption that I only want regular DNS lookups so I can point them to my own DNS server etc."

I wish it were that easy but it's very predictable that google will start resolving DoH on plain old "google.com".

So will everyone else ... it's not going to be malicious.userhostile.resolver.samsung.com, it's just going to be samsung.com ... so you can block it but you'll be blocking more than just the resolver ...

[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by hkt on Tuesday December 08, 2020 @06:08PM (#25352817)
Grim thought, but surely they'd have to be serving from the same IPs?
[ Parent | on HN ]
Re:Improving DNS Privacy with Oblivious DoH by rsync on Tuesday December 08, 2020 @06:19PM (#25352941)
Right, but do you want to block all access to google.com ?

I, and many users on my home network, use that site a lot :)

[ Parent | on HN ]