News for hackers. Stuff that matters.

A comment on Encrypted Client Hello – the last puzzle piece to privacy. Parent comment

Re:Encrypted Client Hello – the last puzzle piece to privacy by hkt on Friday September 29, 2023 @05:48PM (#37710503)
As jeremiads go, this is golden. I for one and persuaded and am grateful you wrote it.

I hadn't considered before that DoH effectively takes an avenue away from people who want to block advertising and trackers. This makes it a fiercely unpleasant thing working against users.

Personally, I'm switching to DNS over TLS instead.

[ Parent | on HN ]
Re:Encrypted Client Hello – the last puzzle piece to privacy by josephcsible on Friday September 29, 2023 @07:34PM (#37711352)
There are ad-blocking DoH servers available. How is DoT any better than DoH in that respect?
[ Parent | on HN ]
Re:Encrypted Client Hello – the last puzzle piece to privacy by briHass on Friday September 29, 2023 @11:40PM (#37712599)
Because, at least with plain ol UDP DNS, I can masquerade my adblocking DNS server to any IoT junk that ignores my DHCP provided DNS servers and uses its own hardcoded one.

DoT is obviously immune to that, as is DoH, but at least for DoT, that seemes to never have become popular, likely due to the fear of aggressive firewalls not allowing that port.

[ Parent | on HN ]
Re:Encrypted Client Hello – the last puzzle piece to privacy by growse on Saturday September 30, 2023 @04:05AM (#37713529)
> Because, at least with plain ol UDP DNS, I can masquerade my adblocking DNS server to any IoT junk that ignores my DHCP provided DNS servers and uses its own hardcoded one.

> DoT is obviously immune to that, as is DoH, but at least for DoT, that seemes to never have become popular, likely due to the fear of aggressive firewalls not allowing that port.

What happens when your junky hostile devices start doing name resolution over a protocol that doesn't look like DNS? Like, say, HTTPS!

[ Parent | on HN ]