4 ms·

This! This is very bad for Erdoğan. They won't be able to block DNS over HTTPS. Thus teir classic DNS blocks will be useless. Last time I've checked there was

This! This is very bad for Erdoğan. They won't be able to block DNS over HTTPS. Thus teir classic DNS blocks will be useless. Last time I've checked there was over 300K blocked domains via DNS. Even 8.8.8.8 doesn't work.

okasaki 7y ago
Why can't they block 1.1.1.1?
- darkhorn 7y ago
  They can block but you can make any https page into DoH. What they are going to do? Block every web site?
  - okasaki 7y ago
    No, just the ones that run DoH.
icebraining 7y ago
> They won't be able to block DNS over HTTPS Of course they will. The DoH server can be blocked just like any other.
- pixl97 7y ago
  Eh, this is a losing battle for them. In theory any HTTPS server can be a DoH server if set up for it. One key for the future is to have so many DoH servers available for people in countries that filter that there is no way the government can block them all.
  - icebraining 7y ago
    My uBlock Origin contains over 100k filter rules, and I pay zero for it. I doubt a company can't sell a list of open DoH servers for a reasonable price.
    - darkhorn 7y ago
      How they are going to block servers who have DoH url? DNS level block or IP block. May be SNI level block but in few years we will have ESNI.
      - icebraining 7y ago
        To access a DNS-over-HTTP server, you need its IP (otherwise it would be a circular problem - must have DNS to access DNS). So they can just block the IP/port.