3 ms·
> However, since these servers and their DoH configurations are well known, Windows can automatically upgrade to DoH while using the same server. They are not
by kodablah 7y ago
> However, since these servers and their DoH configurations are well known, Windows can automatically upgrade to DoH while using the same server.
They are not well known. How do they know my DNS server is DoH? It's good that, like Chrome and unlike FF, they plan on using the existing DNS servers but are they also using a known whitelist of DoH servers? How can I get on there?
We need an HSTS/Alt-Svc for DoH...can't I return an EDNS response or something w/ my standard DNS response that says I support DoH and the clients use it henceforth while it remains the same configured server? Maybe even a default domain to check DoH support even on NXDOMAIN so it doesn't leak the first domain requested in clear UDP.
- judge2020 7y agoChrome has an upgrade list[0], last time I checked Firefox allowed you to choose in settings. 0: https://github.com/chromium/chromium/blob/711b1ba2735f8af4bd6359c6292e1875412df74f/net/dns/dns_util.cc#L146-L217 https://github.com/chromium/chromium/blob/711b1ba2735f8af4bd...
- kodablah 7y agoI feared it was hardcoded :-( I am trying not to ask every user of my DNS server to manually configure each of their browsers and their OS.