5 ms·

Does anyone knows why does mozilla think this is a good idea? Between each user sharing dns queries with their isps and everyone sharing dns queries with cloudf

Does anyone knows why does mozilla think this is a good idea? Between each user sharing dns queries with their isps and everyone sharing dns queries with cloudflare it appears that it's obviously more secure the first approach even if none of them is really that great.

Avamander 7y ago
ISPs have proven themselves untrustworthy repeatedly, CloudFlare yet really hasn't. Not that I like the control they have, but it's honestly the fault of ISP's this has happened.
- userbinator 7y ago
  some ISPs. The problem is that Mozilla is taking a very US-centric view of a product that is used worldwide.
  - gsnedders 7y ago
    …and DNS over HTTPS, using CloudFlare, is only being enabled in the US. A US-centric view for a US-only decision seems fair to me?
  - magashna 7y ago
    The change is only being rolled out to the US.
  - Avamander 7y ago
    True, I don't think it's ideal, but non-US entities are in slumber, there's still basically no deployment of more secure standards by ISPs. I'd send my ISP an e-mail about providing DoH but they can't even give me IPv6.
- falcolas 7y ago
  Cloudflare has taken sites offline before, in response to legal requests (CP) and social pressure (8ch). Whether it’s right to do it or not, Cloudflare has proven that it is not a neutral party.
  - comex 7y ago
    CloudFlare has stopped hosting particular websites; they haven't censored DNS requests. There's a huge difference between the two.
dralley 7y ago
I don't see why the first approach is obviously more secure - especially considering the ISP knows your name and address.
diffeomorphism 7y ago
https://support.mozilla.org/en-US/kb/firefox-dns-over-https https://support.mozilla.org/en-US/kb/firefox-dns-over-https > Mozilla has a strong Trusted Recursive Resolver (TRR) policy in place that forbids CloudFlare or any other DoH partner from collecting personal identifying information. To mitigate this risk, our partners are contractually bound to adhere to this policy. So, the "obvious" view seems to be wrong.

Avamander 7y ago

ISPs have proven themselves untrustworthy repeatedly, CloudFlare yet really hasn't. Not that I like the control they have, but it's honestly the fault of ISP's this has happened.

userbinator 7y ago
some ISPs. The problem is that Mozilla is taking a very US-centric view of a product that is used worldwide.
- gsnedders 7y ago
  …and DNS over HTTPS, using CloudFlare, is only being enabled in the US. A US-centric view for a US-only decision seems fair to me?
- magashna 7y ago
  The change is only being rolled out to the US.
- Avamander 7y ago
  True, I don't think it's ideal, but non-US entities are in slumber, there's still basically no deployment of more secure standards by ISPs. I'd send my ISP an e-mail about providing DoH but they can't even give me IPv6.
falcolas 7y ago
Cloudflare has taken sites offline before, in response to legal requests (CP) and social pressure (8ch). Whether it’s right to do it or not, Cloudflare has proven that it is not a neutral party.
- comex 7y ago
  CloudFlare has stopped hosting particular websites; they haven't censored DNS requests. There's a huge difference between the two.

dralley 7y ago

I don't see why the first approach is obviously more secure - especially considering the ISP knows your name and address.

diffeomorphism 7y ago

https://support.mozilla.org/en-US/kb/firefox-dns-over-https https://support.mozilla.org/en-US/kb/firefox-dns-over-https > Mozilla has a strong Trusted Recursive Resolver (TRR) policy in place that forbids CloudFlare or any other DoH partner from collecting personal identifying information. To mitigate this risk, our partners are contractually bound to adhere to this policy. So, the "obvious" view seems to be wrong.