Dear EU: Please Don't Ruin the Root

Re:Dear EU: Please Don't Ruin the Root by Skunkleton on Monday May 10, 2021 @03:08PM (#27109605)

There is less and less choice over your DNS provider. With the classic DNS protocol, requests were routinely hijacked by ISPs. With new protocols like DOH, you now have to go manually configure every application and cross your fingers it does what you want. Not everything can be configured to a specific DOH gateway.

As it stands today, I can no longer reliably block hosts by domain name on my own network thanks to DOH.

[ Parent | on HN ]

Re:Dear EU: Please Don't Ruin the Root by readams on Monday May 10, 2021 @03:43PM (#27110014)

This is a completely separate problem and not related to the root DNS servers. As an individual user, you do not contact the roots.

[ Parent | on HN ]

Re:Dear EU: Please Don't Ruin the Root by Aeolun on Monday May 10, 2021 @07:29PM (#27112213)

> As it stands today, I can no longer reliably block hosts by domain name on my own network thanks to DOH.

You should be able to mitm all your own https traffic right? Not sure if that’s worth it though.

[ Parent | on HN ]

Re:Dear EU: Please Don't Ruin the Root by Skunkleton on Tuesday May 11, 2021 @02:36PM (#27121773)

If you were to MITM, that would mean all HTTPS connections, not just DOH.

[ Parent | on HN ]

Re:Dear EU: Please Don't Ruin the Root by Aeolun on Tuesday May 11, 2021 @07:24PM (#27124882)

Well yeah, but you’re not really afraid of knowing your own traffic right?

[ Parent | on HN ]

Re:Dear EU: Please Don't Ruin the Root by Skunkleton on Sunday May 16, 2021 @06:17PM (#27177546)

No, but I am a little afraid of doing a bad job with my MITM server and exposing myself to vulnerabilities.

[ Parent | on HN ]

Re:Dear EU: Please Don't Ruin the Root by setBoolean on Monday May 10, 2021 @03:56PM (#27110168)

This really rubs me the wrong way about DoH. At the moment I mitigate this by outright blocking the Top 10 public DNS servers network wide.

[ Parent | on HN ]