3 ms·
This! Just like https encrypting website that anyone can visit is not about privacy, DoH is also not about privacy. Anyone can visit the same https website yo
by krupan 7y ago
This! Just like https encrypting website that anyone can visit is not about privacy, DoH is also not about privacy. Anyone can visit the same https website you visit and see what you are reading. Anyone can resolve the same hostnames that you are resolving (or reverse IPs you are visiting to determine hostnames).
The benefit they do provide is authentication (ensure that google.com is really google.com) and protection against man-in-middle.
And those are great benefits!!
But it doesn't help anyone to misstate and/oversell the benefits of a new service/protocol.
- bzbarsky 7y ago> Anyone can resolve the same hostnames that you are resolving Yes, but your ISP (including "that coffee shop whose wifi you're using" in ISP here) can't necessarily tell which hostnames you are resolving, if you use DoH (subject to some limitations about what happens after you've resolved the hostname). This is in fact a privacy feature