Ask HN: Why is Oblivious DoH needed at all? Wouldn't any proxy do the job?

Posted by pcwrt on Thursday December 10, 2020 @10:33AM
from the ask-hn dept.

With DoH, query integrity and confidentiality are already guaranteed. The only additional ask for something like ODoH is to hide the client IP address from the DNS. For which, any proxy will do. Why bother to go through all the complexities to create ODoH?

If you want to see some details, I compared ODoH with a plain HTTP proxy here: https://www.pcwrt.com/2020/12/oblivious-dns-over-https-vs-doh-through-http-proxy/

( 4 comments | 5 points | on HN )

Re:Ask HN: Why is Oblivious DoH needed at all? Wouldn't any ... by collsni on Thursday December 10, 2020 @12:19PM (#25375913)

What I do is dns over tls through a proxy that way my proxy service can't sniff my queries either. And the dns resolver doesn't know the true source.

[ Parent | on HN ]

Re:Ask HN: Why is Oblivious DoH needed at all? Wouldn't any ... by pcwrt on Thursday December 10, 2020 @12:37PM (#25376161)

Exactly what I think. I don't understand why ODoH is such a big splash.

[ Parent | on HN ]

Re:Ask HN: Why is Oblivious DoH needed at all? Wouldn't any ... by alwillis on Monday December 14, 2020 @01:54AM (#25414273)

DoT and DoH are encrypted but the endpoint can still see your DNS query and your IP address, so your info isn't private.

With ODoH, the DNS resolver doesn't get to see your IP address, so that information can't be logged or tracked.

[ Parent | on HN ]

Re:Ask HN: Why is Oblivious DoH needed at all? Wouldn't any ... by yonixw on Thursday December 10, 2020 @11:49AM (#25375579)

Maybe to have an edge over Google free DNS (8.8.8.8).

[ Parent | on HN ]