2 ms·
Yes but many such active adversarial networks prevent most traffic besides http/tls leaving the network. DoH solves this problem.
by thatfunkymunki 7y ago
Yes but many such active adversarial networks prevent most traffic besides http/tls leaving the network. DoH solves this problem.
- zrm 7y ago> Yes but many such active adversarial networks prevent most traffic besides http/tls leaving the network. DoH solves this problem. So do VPN tunnels over HTTPS/TLS. There is also happy eyeballs. Use DNSCurve and DoH at the same time and accept whichever answers first, which will be DNSCurve whenever it isn't blocked. Then in a few years when middleboxes have given up trying to block DNSCurve because the alternative is no advantage to them, we can deprecate inefficient DoH to a strict fallback and eventually be rid of it entirely (because they couldn't block DNSCurve anymore if it was 95% of DNS traffic).