4 ms·
> But with DoH, you have just lost control of your network. (Unless block 443 and force everything to go through a (Squid) proxy?) Expect “enterprise” network
by josteink 7y ago
> But with DoH, you have just lost control of your network. (Unless block 443 and force everything to go through a (Squid) proxy?)
Expect “enterprise” network equipment using an approach like this to provide a “DOH firewall” in the near future.
Net privacy gained: negative.
- throw0101a 7y agoI've been on networks where everything had to go through a proxy, where browsers were told how to act via WPAD/proxy.pac and you set an HTTPS_PROXY env for wget/cURL to work.
- akerl_ 7y agoThe goal isn’t adding privacy on enterprise networks. Enterprise networks should already be accounting for the existence of HTTPS, and either allowing, blocking, or proxying employee/device connections based on their threat model. The goal for DoH is to improve privacy for individual humans, and it does that.