5 ms·

I didn't see it mentioned in the article. Has Mozilla said whose servers they will be sending unsuspecting users queries to by default? (IIRC, it was Cloudflar

I didn't see it mentioned in the article. Has Mozilla said whose servers they will be sending unsuspecting users queries to by default? (IIRC, it was Cloudflare previously. Any reason to believe this has changed?) --- If, like me, you already have a solution in place you are happy with and don't like the idea of others (deciding they know what's best for you and) circumventing it, simply ensure that your existing resolvers are configured as described in [0]: > Network administrators may configure their networks as follows to signal that their local DNS resolver implemented special features that make the network unsuitable for DoH: > DNS queries for the A and AAAA records for the domain “use-application-dns.net” must respond with NXDOMAIN rather than the IP address retrieved from the authoritative nameserver. [0]: https://support.mozilla.org/en-US/kb/configuring-networks-disable-dns-over-https https://support.mozilla.org/en-US/kb/configuring-networks-di...

josteink 7y ago
If true that DoH can be disabled at network level, ad-blocking solutions like pihole should probably implement it by default. Anyone have any idea if this is the case? That would at least save me a lot of trouble and work.
- Dylan16807 7y ago
  Pihole is great because it can do all your non-browser activity. But for a browser, an ad-blocking extension works better and is less than a minute to set up. Why force it to use the same DNS blocking?
  - josteink 7y ago
    Most mobile-browsers don’t support ad-blocking, especially on iOS.
    - Dylan16807 7y ago
      They're not threatening to use DNS-over-HTTPS either. But didn't iOS get browser adblocking capability in the last couple years?
      - josteink 7y ago
        Not for third-party browsers like Chrome or Firefox. In a classic Apple-move, it’s for Safari only.
        Dylan16807 7y ago
        Even though those browsers have to use a safari core anyway? How strange.
        josteink 7y ago
        Technically speaking they are not using Safari, but a WebView.
- EvanAnderson 7y ago
  Already proposed: https://discourse.pi-hole.net/t/support-for-returning-nxdomain-for-use-application-dns-net-to-disable-firefox-doh/23243 https://discourse.pi-hole.net/t/support-for-returning-nxdoma...
  - josteink 7y ago
    Make that already merged: https://github.com/pi-hole/pi-hole/pull/2915 https://github.com/pi-hole/pi-hole/pull/2915 Pi-hole is awesome.
- jedisct1 7y ago
  Already implemented in the latest dnscrypt-proxy version.
TazeTSchnitzel 7y ago
I wonder if UK ISPs that complained about DoH will block use-application-dns.net network-wide.

josteink 7y ago

If true that DoH can be disabled at network level, ad-blocking solutions like pihole should probably implement it by default. Anyone have any idea if this is the case? That would at least save me a lot of trouble and work.

Dylan16807 7y ago
Pihole is great because it can do all your non-browser activity. But for a browser, an ad-blocking extension works better and is less than a minute to set up. Why force it to use the same DNS blocking?
- josteink 7y ago
  Most mobile-browsers don’t support ad-blocking, especially on iOS.
  - Dylan16807 7y ago
    They're not threatening to use DNS-over-HTTPS either. But didn't iOS get browser adblocking capability in the last couple years?
    - josteink 7y ago
      Not for third-party browsers like Chrome or Firefox. In a classic Apple-move, it’s for Safari only.
      - Dylan16807 7y ago
        Even though those browsers have to use a safari core anyway? How strange.
        josteink 7y ago
        Technically speaking they are not using Safari, but a WebView.
EvanAnderson 7y ago
Already proposed: https://discourse.pi-hole.net/t/support-for-returning-nxdomain-for-use-application-dns-net-to-disable-firefox-doh/23243 https://discourse.pi-hole.net/t/support-for-returning-nxdoma...
- josteink 7y ago
  Make that already merged: https://github.com/pi-hole/pi-hole/pull/2915 https://github.com/pi-hole/pi-hole/pull/2915 Pi-hole is awesome.
jedisct1 7y ago
Already implemented in the latest dnscrypt-proxy version.

TazeTSchnitzel 7y ago

I wonder if UK ISPs that complained about DoH will block use-application-dns.net network-wide.