News for hackers. Stuff that matters.

A comment on Manifest V3 now available on M88 Beta. Parent comment

Re:Manifest V3 now available on M88 Beta by wvenable on Wednesday December 09, 2020 @11:20PM (#25369658)
> DNS over HTTPS isn't a tool to block users from reconfiguring their own machines.

Yes it is. Effectively it takes the "machine" out of the equation entirely. DNS resolution happens between the app and the server without you have any say over it at all.

[ Parent | on HN ]
Re:Manifest V3 now available on M88 Beta by netheril96 on Thursday December 10, 2020 @12:19AM (#25370058)
I guess you can run your local DNS server and point the browser to that. The local DNS server can do all the filtering you want, and forward the filtered out requests to the outside DNS server.
[ Parent | on HN ]
Re:Manifest V3 now available on M88 Beta by zelly on Thursday December 10, 2020 @01:09AM (#25370365)
the doomsday scenario the top-level comment mentioned is if they disabled that option. it's possible but very unlikely because it would make that browser unusable for many corporate networks.
[ Parent | on HN ]
Re:Manifest V3 now available on M88 Beta by wvenable on Thursday December 10, 2020 @12:03PM (#25375759)
What corporate networks don't allow outbound HTTPS?
[ Parent | on HN ]
Re:Manifest V3 now available on M88 Beta by zelly on Friday December 11, 2020 @12:27PM (#25388221)
they run their own internal DNS resolvers
[ Parent | on HN ]
Re:Manifest V3 now available on M88 Beta by wvenable on Friday December 11, 2020 @01:49PM (#25389180)
Yes, but DNS over HTTPS by passes internal DNS resolvers and because it's HTTPS the corporate firewall would have no idea this is happening.
[ Parent | on HN ]
Re:Manifest V3 now available on M88 Beta by AgentME on Thursday December 10, 2020 @12:25AM (#25370096)
And the application, the browser, is configurable by the user. There's no OS standard for DoH configurability so it can't just rely on the OS for that.
[ Parent | on HN ]
Re:Manifest V3 now available on M88 Beta by sa1 on Thursday December 10, 2020 @12:24AM (#25370088)
Apps that do that could always have used their own hardcoded IPs or local resolvers.
[ Parent | on HN ]