3 ms·
So far I'm using NextDns.io at home, which is DoH and also applies ad-filtering. I haven't heard of any security concerns yet Disclaimer: I do not work or have
by m-p-3 7y ago
So far I'm using NextDns.io at home, which is DoH and also applies ad-filtering. I haven't heard of any security concerns yet
Disclaimer: I do not work or have any financial connection to that service
- dwdz 7y agoI tried NextDns but it's extremely slow for me. (I live in central Europe.)
- telmich 7y agoIt will actually not be used anymore, because firefox avoids your local DoH setup.
- m-p-3 7y ago> For starters, Mozilla said that after it turns on DoH by default for US users, Firefox will contain a mechanism to detect the presence of any local parental control software or enterprise configurations. > Additionally, Mozilla is also working with ISPs to make sure users won't use DoH as a way to bypass legally-set blocklists. > The organization said it's been asking ISPs and providers of network-based parental control solutions to add a "canary domain" to their blocklists. When Firefox will detect that this canary domain is blocked, it will disable DoH to prevent the feature to be used as a filter-bypassing solution. https://www.zdnet.com/article/mozilla-to-gradually-enable-dns-over-https-for-firefox-us-users-later-this-month/ https://www.zdnet.com/article/mozilla-to-gradually-enable-dn... And I'm already set for the DoH switch https://i.imgur.com/GuP5a8F.png https://i.imgur.com/GuP5a8F.png
- caf 7y agoDoesn't this completely defeat the whole thing? Anyone upstream that wants to start censoring or logging can just add this canary domain and continue business as usual.