3 ms·
Doesn't DNS over HTTPS and HSTS bypass pihole? (isn't it funny how every single "modern web security" feature, from DNS over HTTPS, to HSTS even to HTTPS itsel
by Crinus 7y ago
Doesn't DNS over HTTPS and HSTS bypass pihole?
(isn't it funny how every single "modern web security" feature, from DNS over HTTPS, to HSTS even to HTTPS itself always ends up with someone giving up control to 3rd parties yet this is always dismissed and pushed through insane amounts of peer pressure - usually by people who have vested interests in those 3rd parties - because 'security'?)
- detaro 7y agoDNS over HTTPS against a server you can't choose would do so, yes.
- fenwick67 7y agoYou could still shut down the initial DNS query for the dns-over-https provider and make it unreachable
- NetBeck 7y agoSome people refuse devices that do not accept DHCP assigned DNS servers.[1] [1] https://mailarchive.ietf.org/arch/msg/dnsop/WCVv57IizUSjNb2RQNP84fBclI0 https://mailarchive.ietf.org/arch/msg/dnsop/WCVv57IizUSjNb2R...
- tracker1 7y agoYou can also reroute port 53 traffic not from your internal dns server to your dns server...
- thedanbob 7y agoSo does simply using a different DNS server than the network supplies, unless you’re blocking port 53.
- kasey_junk 7y agoMy network is setup so local dns goes to the pi-hole which uses dns over https.