3 ms·
It is common, but as dns over https becomes standard it won’t be able to be.
by isostatic 8y ago
It is common, but as dns over https becomes standard it won’t be able to be.
- organsnyder 8y agoWhy would that preclude the ability to host certain zones only on internal DNS servers?
- yjftsjthsd-h 8y agoIt appears that some clients just universally query third-party servers, thereby giving out a list of every host name that they're looking for to a third party.
- organsnyder 8y agoNot enterprise devices, though. Some enterprise networks even block third-party DNS servers (yes, even over HTTPS—all traffic must go through the corporate proxy).
- isostatic 8y agoIf the default option allows a fallback then yes, only split dns (where you get different results internal and externally) will be affected. However how long before the default option is via https only.
- organsnyder 8y agoI still don't understand. How does DNS over HTTPS differ from DNS over port 53 in a way that would impact the ability to host internal zones (or even split DNS)?