6 ms·
Why over HTTPS vs TLS?
by cheez 7y ago
Why over HTTPS vs TLS?
- brians 7y agoApproximately: because browsers already have good HTTP parsers built in, and that seems safer than trying a new fast binary parser.
- cheez 7y agoFair enough.
- mehrdadn 7y agoIs performance really such a big concern here? How slowly can one possibly parse binary DNS responses in a native language?
- jbverschoor 7y agoAlso, why a complete http stack? Before we know it we need to send JSON packets to the cpu to do some multiplication
- eastdakota 7y agoWith HTTP/2, if you open a connection to one HTTPS server then you can pipe additional content down over the same connection without having to reestablish. So DoH can be faster for overall page load times than DoT.
- topranks 7y agoDoT works on port 853, so it’s easy for ISPs to spot/block it. They can’t do the same for HTTPS.
- zzzcpan 7y agoNo, they still can spot and block it. The only way it can be hard to block for an ISP is if DoH used domain fronting style collateral freedom, but that didn't turn out to work in practice as governments found even the largest corporations to be acceptable collateral and just blocked IP ranges of those corporations to pressure them to disallow such thing and of course they all pretty quickly disabled domain fronting. At this point there is no way big tech corporations can get involved in censorship circumvention, but they can and are in censorship both to satisfy all the governments and for their own benefit.