3 ms·
Why would you fear ISPs offering an encrypted service? It’s hardly a step backwards? DoT would be preferable to DoH (no additional metadata / cookies,) but ei
by topranks 7y ago
Why would you fear ISPs offering an encrypted service? It’s hardly a step backwards?
DoT would be preferable to DoH (no additional metadata / cookies,) but either way ISPs should adopt encrypted DNS.
You are correct it boils down to “who you trust.” In my country the ISP wins hands down over a foreign mega-corp so I end up making a different decision to you.
The key thing is that is a choice for users, not something software just does without knowledge of what’s going on.
- pornel 7y agoBecause DoH is supposed to hide the DNS traffic from ISPs (among others). Sending the DNS traffic straight to the ISP defeats the purpose of it. That's like MITM on the first hop.
- doikor 7y agoBut the default state is to use the dns provided by your isp so nothing really changes.
- jedimastert 7y ago> Why would you fear ISPs offering an encrypted service? encryption doesn't hide anything from whoever's on the other side, just the people in the middle. If the goal is to not let ISPs in on your DNS history, then DoH to the ISP won't do that.