3 ms·
> to see a genuinely technical disadvantage of DoH Lack of privacy issue aside, there are a bunch of technical disadvantages compared to alternatives. Like usi
by zzzcpan 7y ago
> to see a genuinely technical disadvantage of DoH
Lack of privacy issue aside, there are a bunch of technical disadvantages compared to alternatives. Like using encryption to a local resolver or to a resolver over trusted or encrypted network is unnecessary overhead and complexity, including operational complexity that you really want to avoid. And if there is a case to use encrypted communications with a recursive resolver (i.e. non local), it could be done by simply tunneling DNS protocol over any of existing crypto protocols, no need for yet another complex protocol tunneled over https that still has to be converted to a native DNS protocol down the line.
- xref 7y agoI’d prefer not to “trust” any network, even my local home network, and encrypt all the traffic traveling over it I can. especially in an age where a security camera or even your fridge can be compromised by non-targeted automated scripts and then all plaintext traffic on your network is exposed. As for not using TLS/http to wrap the dns queries for secure transport across the net, what “existing crypto protocol” do you suggest they should have implemented instead?