4 ms·
I can use a VPN when browsing on those kind of networks.
by jp_sc 7y ago
I can use a VPN when browsing on those kind of networks.
- raesene9 7y agoThat's fine for more technical users who are aware of how to mitigate this kind of issue, but then those same more technical users will also likely know how to disable DoH. For the majority of users who may not understand the risks around plain text DNS, there are advantages to it being encrypted.
- syshum 7y agoThis has always been a poor argument. Especially for FF which is mainly used by Technical people Chrome a d IE are used by people that do not understand the risks around DNS I use FF because I am / was tried of IE and Chrome telling me how I should use thier software, now Mozilla is making the same moronic choices for me instead of empowering users DoH should be Opt-In, not Opt-Out
- raesene9 7y agoYou using FFox because you're technical, doesn't mean a majority of FFox's user base is technical. Technical users (like yourself) can just easily disable DoH, problem, for you, solved :)
- ethagnawl 7y ago"Good" VPNs also aren't usually/ever? free.
- the8472 7y agoYou can operate one on your home router, which can be negative-cost if you're also saving the rent on the ISP hardware.
- ethagnawl 7y agoWell, sure. However, my comment was within the context of the parent's, which was talking about how this feature is beneficial to non-technical users; some of which may not be able to afford to pay for a VPN that (probably doesn't ...) MITM or log traffic.
- the8472 7y agoIdeally this would be a standard component of home routers, especially some easy wireguard QR-code setup. But yes, until this happens it's something for more tech-savy users.
- the8472 7y ago> will also likely know how to disable DoH. Not once DoH-in-the-browser becomes a default, percolates down to electron and then gets baked into a dozen mobile and desktop applications with little control or insight for the user or admin.
- nullc 7y agoI've already had a lot of issues with embedded devices that have hardcoded resolution against 1.1.1.1 not working correctly against my local names.