3 ms·
It's amazing that you have such strong opinions about an article you didn't even bother to read. First, they detect split horizon situations and explain how.
by lordlimecat 7y ago
It's amazing that you have such strong opinions about an article you didn't even bother to read.
First, they detect split horizon situations and explain how.
Second, if you as an admin want to force disable DoH across the network, they've provided a DNS-based way to do so.
Third, if this really bothers you, Mozilla provides GPO templates (and JSON based methods for other OSes) to configure all of these settings at an application level.
Maybe focus that outrage energy on reading the article before posting?
- throw0101a 7y agoMozilla may be kind enough to have those settings, but that doesn't mean other software will do the same thing. It's nice that Mozilla may allow setting other DNS servers for DoH, and perhaps will eventually use OS-level settings, but what happens when some dumb ass developer does not? Perhaps if they implemented DNS-over-TLS (DoT) instead/as well, then we could have encrypted DNS that is still monitorable. I'm waiting for the day when malware will start using DoH and use Cloudflare as the DNS server. As someone who works in IT, will I have to block CF to prevent that possibility? How many bots have been taken down over the years because their C&C domains were taken over?
- OBLIQUE_PILLAR 7y agoIt should be Opt-In. Not Opt-Out.
- yencabulator 7y agoThe silly assumption being made here is that "DoH" = "talk HTTPS to Cloudflare". I want DoH, but I need private domains. I would like to talk DoH to a thing I control.