News for hackers. Stuff that matters.

A comment on Why not use DNS over HTTPS (DoH)?. Parent comment

Re:Why not use DNS over HTTPS (DoH)? by WhyNotHugo on Sunday June 08, 2025 @07:00AM (#44216154)
Disabling DoH in your browser’s settings should make it fall back to you system’s resolver.

You’ll only be vulnerable to a MitM attack if your system’s resolver is insecure and also vulnerable to a MitM attack.

[ Parent | on HN ]
Re:Why not use DNS over HTTPS (DoH)? by sammy2255 on Sunday June 08, 2025 @07:01AM (#44216157)
(which all are by default)
[ Parent | on HN ]
Re:Why not use DNS over HTTPS (DoH)? by NewJazz on Sunday June 08, 2025 @11:04AM (#44217441)
No, plenty of OSs ship encrypted DNS resolvers by default.
[ Parent | on HN ]
Re:Why not use DNS over HTTPS (DoH)? by josephcsible on Sunday June 08, 2025 @12:11PM (#44217828)
Zero mainstream OSs ship encrypted DNS resolvers by default, unless you count ones that will automatically fall back to insecure DNS, which defeats the purpose since a network attacker can cause that.
[ Parent | on HN ]
Re:Why not use DNS over HTTPS (DoH)? by WhyNotHugo on Sunday June 08, 2025 @07:41PM (#44220187)
That's a pretty serious security issue, which affects every other process on your host.
[ Parent | on HN ]