News for hackers. Stuff that matters.

A comment on Malaysia started mandating ISPs to redirect DNS queries to local servers. Parent comment

Re:Malaysia started mandating ISPs to redirect DNS queries t... by mcpherrinm on Saturday September 07, 2024 @02:40AM (#41471966)
As an infrasec person, DoH is great because we can config manage all the corp devices to use DoH servers run by the company whether not a device is on VPN. Good visibility into what devices are looking up, easy internal domains, and ensuring malware domains are blocked on and off network.

At least the companies I’ve been working for have a lot more laptops at coffee shops and weworks, and probably not on a VPN half the time either. DoH has been a way bigger win than a hassle for me.

[ Parent | on HN ]
Re:Malaysia started mandating ISPs to redirect DNS queries t... by sidewndr46 on Saturday September 07, 2024 @07:42AM (#41473327)
how would you ever get online at a coffee shop? Almost all of this use a captive portal that redirects DNS to some internal webpage making you click a button that says "I agree to your completely absurd terms and conditions"
[ Parent | on HN ]
Re:Malaysia started mandating ISPs to redirect DNS queries t... by jeremyjh on Saturday September 07, 2024 @10:43AM (#41474192)
I can use a mobile hotspot on my phone basically everywhere I go. Public Wifi is most often garbage throughput compared to 5g.
[ Parent | on HN ]
Re:Malaysia started mandating ISPs to redirect DNS queries t... by SoftTalker on Saturday September 07, 2024 @01:12PM (#41474980)
I have found that fewer places seem to be doing captive portals and are just going back to open wifi or maybe a well-posted password. Maybe they are realizing there's not a lot of value to it as almost all browser traffic is encrypted these days.
[ Parent | on HN ]
Re:Malaysia started mandating ISPs to redirect DNS queries t... by grishka on Saturday September 07, 2024 @03:03PM (#41475706)
A good implementation of DoH/DoT would use regular DNS in these situations.
[ Parent | on HN ]
Re:Malaysia started mandating ISPs to redirect DNS queries t... by chupasaurus on Saturday September 07, 2024 @08:57AM (#41473685)
If you have any Windows devices they are leaking DNS requests no matter the setup as long as they are getting DNS servers from DHCP that aren't yours.
[ Parent | on HN ]