News for hackers. Stuff that matters.

A comment on The GNU Name System. Parent comment

Re:The GNU Name System by raverbashing on Monday July 25, 2022 @12:45PM (#32227007)
> but at the same time it hides application requests from the user, renders user's own DNS-based filtering (pihole and such) useless

Can't you proxy it over a local DNS-over-https server that will provide filtering/caching and then have it query the upstream server?

[ Parent | on HN ]
Re:The GNU Name System by hericium on Tuesday July 26, 2022 @12:01AM (#32234108)
I cannot trust non-free software to use OS DNS settings (Chrome taught me that).

I wouldn't want to proxy all HTTPS traffic (may not be possible if software ignores system-wide TLS CAs and uses bundled trust chain).

DoH introduces bunch new problems without solving any that I had.

[ Parent | on HN ]