4 ms·
The default (which the majority of people will be using) is not Google, it's their ISP. And in the vast majority of cases, their ISP is under the jurisdiction o
by cesarb 7y ago
The default (which the majority of people will be using) is not Google, it's their ISP. And in the vast majority of cases, their ISP is under the jurisdiction of their country, while Google and Cloudflare have to obey the laws of a foreign country. Said foreign country might one day decide that for instance Google and Cloudflare now have to log the IP address of everyone who does a DNS lookup for news.ycombinator.com, even if the laws in the user's country forbid it.
- magashna 7y agoMozilla is only applying this in the US.
- bennyp101 7y agoTo start with
- southerntofu 7y agoAccording to a CCC talk about DNS security, Mozilla is going to enable providers on a regional-basis by partnering with privacy-friendly non-profits. DigitalCourage was one of the names mentioned as a potential EU-based DoH provider.
- darkhorn 7y agoThis! This is very bad for Erdoğan. They won't be able to block DNS over HTTPS. Thus teir classic DNS blocks will be useless. Last time I've checked there was over 300K blocked domains via DNS. Even 8.8.8.8 doesn't work.
- okasaki 7y agoWhy can't they block 1.1.1.1?
- icebraining 7y ago> They won't be able to block DNS over HTTPS Of course they will. The DoH server can be blocked just like any other.
- pixl97 7y agoEh, this is a losing battle for them. In theory any HTTPS server can be a DoH server if set up for it. One key for the future is to have so many DoH servers available for people in countries that filter that there is no way the government can block them all.
- icebraining 7y agoMy uBlock Origin contains over 100k filter rules, and I pay zero for it. I doubt a company can't sell a list of open DoH servers for a reasonable price.
- darkhorn 7y agoHow they are going to block servers who have DoH url? DNS level block or IP block. May be SNI level block but in few years we will have ESNI.
- icebraining 7y agoTo access a DNS-over-HTTP server, you need its IP (otherwise it would be a circular problem - must have DNS to access DNS). So they can just block the IP/port.
- diffeomorphism 7y agoWrong way around. Said own country might one day decide to restrict access/log visits to controversial site X (e.g. Tibet, government critical news, piratebay etc.), which does not affect your DNS based in foreign country
- icebraining 7y agoSaid country will just block the Cloudflare DoH server as well, forcing users to switch to a controlled DNS server.