4 ms·
Pi-hole can't filter out ads that are embedded into the page though. I think adblockers have to be a browser extension to work conprehensively.
by mantap 7y ago
Pi-hole can't filter out ads that are embedded into the page though. I think adblockers have to be a browser extension to work conprehensively.
- rozab 7y agoI generally don't mind ads that are embedded into the page (at the moment). It would solve a lot of the big problems people have with ads right now. Anyway, this change only prevents extensions from blanket blocking web requests, and will make no difference to adblockers which manipulate DOM content. I think the same thing that happened with popup blockers will happen again. Advertisers will be forced to listen to the consumers and the internet will be better for it. Have you turned off your popup blocker recently? You can surf around even to fairly sketchy sites, and I bet you won't see a pop up. The consumer won. With tracking, we'll win again.
- adrianN 7y agoPi-hole can switch from magicking the DNS to being a proxy that rewrites HTML.
- koolba 7y agoTLS makes that tricky as you need a MITM proxy.
- TeMPOraL 7y agoAnd cert pinning in the browsers blows this out of the water, which is why I'm of two minds about it as a security feature. It seems that a lot of security these days is really about removing people's control over their own devices.
- chopin 7y agoYou can import an own root cert which will be honored. I work in a company where all internal servers have a certificate a non-public root has signed. Works both on Chrome and FF.
- iwalton3 7y agoCertificate Key Pinning is in the process of being removed from browsers. https://developers.google.com/web/updates/2018/04/chrome-67-deps-rems#deprecate_http-based_public_key_pinning https://developers.google.com/web/updates/2018/04/chrome-67-...
- viraptor 7y agoThen you need to manage custom certificates and embedded browsers and updaters may not handle proxied connections well. (And what about your tv where you can't provide custom CA certs?) This way of handling things never ends well. Both in enterprise solutions and consumer ones.
- jtbayly 7y agoReally? I thought recent dns improvements would prevent this sort of thing.
- sbarre 7y agoA lot of ads and sites use complex JS as well, so an extension can lean on the browser's rendering engine to JIT block that stuff.. A proxy that wants to do this before the browser will need to do a lot more work I think?