3 ms·
It is intentional. There are creepy providers out there that really want you to use their DNS so they can surveil/gaslight you, so they block or redirect traffi
by _jal 10y ago
It is intentional. There are creepy providers out there that really want you to use their DNS so they can surveil/gaslight you, so they block or redirect traffic to well-known DNS ports.
Putting it on 443 forces a choice between letting people manage their own DNS or blocking every store on the planet.
- tresni 10y agoDefinitely this. Also lots of weird hardware/software out there that tends to discard packets it can't understand (i.e. this doesn't look like a DNS packet going to port 53, let's drop it.) 443 generally works as it is expected to be encrypted by most middleware. I would also say that most DNSCrypt-capable providers I know of can also do it on port 53.