4 ms·
The article is incorrect. 1. TRR is not turned on by default. To turn it on, you need to go to about:config and set network.trr.mode to something other than 0
by msravi 8y ago
The article is incorrect.
1. TRR is not turned on by default. To turn it on, you need to go to about:config and set network.trr.mode to something other than 0 or 5.
2. Even if trr.mode is turned on, you need to go in and set the DOH server at network.trr.uri. The default is blank. You can set it to any publicly known DOH server (https://github.com/curl/curl/wiki/DNS-over-HTTPS#publicly-available-servers https://github.com/curl/curl/wiki/DNS-over-HTTPS#publicly-av...), or even your own.
3. The article doesn't talk about how your ISP can use DNS to censor your result - very common, for example, in a country like India where the court orders certain sites taken down. Mozilla's DOH solves this.
- orbital-decay 8y agoThe first sentence of the article is about TRR/DOH being turned on by default in the next patch.
- rmdoss 8y agoYes, that's the big issue. Plus, changing to a different resolver is not very simple and most users won't even know.
- teddyfrozevelt 8y agoIt would be a big issue, if it was true.
- msravi 8y agoCan you point to a Mozilla announcement that says they'll turn on DOH by default in a regular non-experimental non-nightly release? This is what Mozilla says in their DOH blog: Our second effort focuses on building a default configuration for DoH servers that puts privacy first. We are running a shield study where some Nightly users will participate in one or more experiments to help us build out a secure, cloud-based service that handles DoH requests. All Nightly users will receive an in-product notification about these studies. Cloudflare is our partner for these experiments. When a shield study is active, Nightly Firefox will automatically use Cloudflare’s secure DNS over HTTPS service (though we aren’t using the famous 1.1.1.1 address). The first study will test whether DoH’s performance is up to the task.
- Pissompons 8y ago> Can you point to a Mozilla announcement that says they'll turn on DOH by default in a regular non-experimental non-nightly release? Right on their blog (https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/ https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-ove...), quoted by the article: "We’d like to turn this on as the default for all of our users. We believe that every one of our users deserves this privacy and security, no matter if they understand DNS leaks or not."
- dblohm7 8y agoThat is not an intent-to-ship email on the dev-platform mailing list.
- dblohm7 8y agoWhich is false.