News for hackers. Stuff that matters.

A comment on Firefox DNS-over-HTTPS. Parent comment

Re:Firefox DNS-over-HTTPS by yrro on Friday April 08, 2022 @07:25AM (#30955644)
ISP-provided CPEs often (usually these days? I wonder if anyone has studied this) allow you to change the recursive DNS servers that they forward queries to. Nor do they let you customize the DNS servers handed out by their DHCP servers.

A while back, Sky Broadband was even intercepting all customer traffic to UDP or TCP port 53, and forcing it to go to their shitty DNS servers, which panic and drop the connection when they see something 'unusual'.

[ Parent | on HN ]
Re:Firefox DNS-over-HTTPS by jrockway on Friday April 08, 2022 @08:56AM (#30956267)
> A while back, Sky Broadband was even intercepting all customer traffic to UDP or TCP port 53, and forcing it to go to their shitty DNS servers, which panic and drop the connection when they see something 'unusual'.

This is exactly why DNS over HTTPS is a thing. Unencrypted services are regularly abused by ISPs and DNS is no exception.

[ Parent | on HN ]