News for hackers. Stuff that matters.

A comment on Encrypted Client Hello – the last puzzle piece to privacy. Parent comment

Re:Encrypted Client Hello – the last puzzle piece to privacy by tialaramex on Friday September 29, 2023 @06:35PM (#37710902)
Deployability is what matters. DoH had great deployability because everybody speaks HTTPS.

In my home, lots of technologies would work. I have static v4 and v6, I have complete control over the firewalls, I can do whatever I want. But at my mum's house, who knows what ports work and which protocols work over them and whether you can change any of that.

HTTPS definitely works though, because if it didn't her web browser wouldn't work and she'd yell at the ISP until they fixed it. So that's why DoH.

[ Parent | on HN ]
Re:Encrypted Client Hello – the last puzzle piece to privacy by YeBanKo on Saturday September 30, 2023 @12:58AM (#37712873)
Everybody who speaks HTTPS speaks TLS and the existing DNS-over-TCP. DoT is just DNS-over-TCP tunneled inside TLS. And it can be on any port, not necessarily 853, could be even on 443. What is the point of wrapping it into http request?
[ Parent | on HN ]
Re:Encrypted Client Hello – the last puzzle piece to privacy by tatersolid on Sunday October 01, 2023 @09:32PM (#37732972)
Because ports other than 443 are often blocked on corporate, hotel, and even coffee shop networks.
[ Parent | on HN ]