3 ms·
From my understanding, it uses HTTPS to perform dns lookups. This has the benefit of encrypting your dns lookups so that people reading packets can't read them
by cabaalis 7y ago
From my understanding, it uses HTTPS to perform dns lookups.
This has the benefit of encrypting your dns lookups so that people reading packets can't read them.
However, your pc and the DOH provider still can read/store/analyze/sell your dns lookups.
Your isp is probably selling your dns lookup data. So do you trust cloudflare more than your isp?
The primary issue is that this bypasses the normal dns mechanisms built into your local network. No more blocking sites using DNS. Presumably, ad block in your browser will still work. But things like pi-hole will suffer.
- ocdtrekkie 7y agoAs a note, I believe Pi-hole is implementing the Canary domain to automatically disable Firefox's DoH support: https://support.mozilla.org/en-US/kb/canary-domain-use-application-dnsnet https://support.mozilla.org/en-US/kb/canary-domain-use-appli... Though one wonders if ISPs and countries can use the same strategy to mitigate any benefit of Firefox's strategy here.