3 ms·

For the uninitiated, what is DoH and what is its relation to DNS? I can see this is comes from a DNS-focused blog, but a little background info on the subject

by ssalka 7y ago

For the uninitiated, what is DoH and what is its relation to DNS? I can see this is comes from a DNS-focused blog, but a little background info on the subject would really improve the quality of the article.

ssalka 7y ago
Clicked more links; it's "DNS over HTTPS". Acronyms getting crazy these days
mchristen 7y ago
The article includes a summary of what DoH is at the top and also has links to more information. Not sure what else could be done before the article is about DoH itself.
- bpt3 7y ago
  It's standard practice to define acronyms prior to first use, such as DNS over HTTPS (DoH), rather than assuming people have a priori knowledge or that they'll click on the right links in the content to figure it out.
  - michaelt 7y ago
    I think you meant to say Domain Name System (DNS) over Hypertext Transport Protocol with Secure Socket Layer (SSL) (HTTPS) (DoH)
cabaalis 7y ago
From my understanding, it uses HTTPS to perform dns lookups. This has the benefit of encrypting your dns lookups so that people reading packets can't read them. However, your pc and the DOH provider still can read/store/analyze/sell your dns lookups. Your isp is probably selling your dns lookup data. So do you trust cloudflare more than your isp? The primary issue is that this bypasses the normal dns mechanisms built into your local network. No more blocking sites using DNS. Presumably, ad block in your browser will still work. But things like pi-hole will suffer.
- ocdtrekkie 7y ago
  As a note, I believe Pi-hole is implementing the Canary domain to automatically disable Firefox's DoH support: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet https://support.mozilla.org/en-US/kb/canary-domain-use-appli... Though one wonders if ISPs and countries can use the same strategy to mitigate any benefit of Firefox's strategy here.
sybercecurity 7y ago
Not only that, but get ready to hear some more: DoH - DNS over HTTP(S) DoT - DNS over TLS. Often meaning DTLS ADD - Applications doing DNS, where the application is sending DNS queries instead of asking the OS resolver. Usually implied to be HTTPS as well.
craftyguy 7y ago
It's right there in the article... which you read... right? > DNS over HTTPS meanwhile encrypts DNS queries going over the network, which means that no one between you and the DoH server can see your DNS queries or modify the DNS responses.

by ssalka 7y ago

ssalka 7y ago

Clicked more links; it's "DNS over HTTPS". Acronyms getting crazy these days

mchristen 7y ago

The article includes a summary of what DoH is at the top and also has links to more information. Not sure what else could be done before the article is about DoH itself.

bpt3 7y ago
It's standard practice to define acronyms prior to first use, such as DNS over HTTPS (DoH), rather than assuming people have a priori knowledge or that they'll click on the right links in the content to figure it out.
- michaelt 7y ago
  I think you meant to say Domain Name System (DNS) over Hypertext Transport Protocol with Secure Socket Layer (SSL) (HTTPS) (DoH)

cabaalis 7y ago

From my understanding, it uses HTTPS to perform dns lookups. This has the benefit of encrypting your dns lookups so that people reading packets can't read them. However, your pc and the DOH provider still can read/store/analyze/sell your dns lookups. Your isp is probably selling your dns lookup data. So do you trust cloudflare more than your isp? The primary issue is that this bypasses the normal dns mechanisms built into your local network. No more blocking sites using DNS. Presumably, ad block in your browser will still work. But things like pi-hole will suffer.

ocdtrekkie 7y ago
As a note, I believe Pi-hole is implementing the Canary domain to automatically disable Firefox's DoH support: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet https://support.mozilla.org/en-US/kb/canary-domain-use-appli... Though one wonders if ISPs and countries can use the same strategy to mitigate any benefit of Firefox's strategy here.

sybercecurity 7y ago

Not only that, but get ready to hear some more: DoH - DNS over HTTP(S) DoT - DNS over TLS. Often meaning DTLS ADD - Applications doing DNS, where the application is sending DNS queries instead of asking the OS resolver. Usually implied to be HTTPS as well.

craftyguy 7y ago

It's right there in the article... which you read... right? > DNS over HTTPS meanwhile encrypts DNS queries going over the network, which means that no one between you and the DoH server can see your DNS queries or modify the DNS responses.