News for hackers. Stuff that matters.

A comment on Windows 11 Officially Shuts Down Firefox’s Default Browser Workaround. Parent comment

Re:Windows 11 Officially Shuts Down Firefox’s Default Browse... by callamdelaney on Thursday December 16, 2021 @05:09PM (#29584672)
Just setup pihole - you can run it on any server and use it as a local dns server. Probably somebody else has done the work to list these spammy domains.
[ Parent | on HN ]
Re:Windows 11 Officially Shuts Down Firefox’s Default Browse... by paulryanrogers on Thursday December 16, 2021 @05:46PM (#29585025)
What about DNS over HTTPS?
[ Parent | on HN ]
Re:Windows 11 Officially Shuts Down Firefox’s Default Browse... by zamadatix on Thursday December 16, 2021 @10:31PM (#29587356)
If you just want FF to not use it you can block "use-application-dns.net" which acts as a canary domain for it to disable DoH.

If you want to block it from things you don't trust to have such methods (or always listen to them) you'll have to upgrade to a firewall that can filter outbound connections to IPs the client hasn't received a DNS response for or require use of an explicit HTTP proxy for outbound connectivity.

Just blocking DNS can be a good middle ground for reasonable effectiveness without as much effort.

[ Parent | on HN ]