3 ms·
They already stated in the article that if the canary domain will be abused they will disable that check.
by GTP 7y ago
They already stated in the article that if the canary domain will be abused they will disable that check.
- josteink 7y agoYeah. Sounds like another do-not-track then. I’ll keep my firewall-rules banning all DoH-traffic to Cloudflare, just in case.
- mtsr 7y agoNot a bad call, I guess.
- Ayesh 7y agoI suppose you can block the IP 1.1.1.1, but Google serves THEIR DNS at `google.com` on HTTPS port. One of the design choices of DoH to make it look like HTTPS traffic. It's gonna be difficult to block DoH traffic.
- throw0101a 7y ago> One of the design choices of DoH to make it look like HTTPS traffic. Wait until encrypted SNI gets implemented everywhere was well.