4 ms·

I'm a programmer and I have no idea what OPs comment means. I keep meaning to learn about networking stuff, but there is always so many other things to learn an

I'm a programmer and I have no idea what OPs comment means. I keep meaning to learn about networking stuff, but there is always so many other things to learn and since I don't work with devops or networking stuff it hasn't really been a priority.

vetinari 7y ago
Don't take it in some wrong way, but most programmers have no idea about networking; for them, IP addresses are just some numbers. Yes, are explaining to our colleagues what IP address, subnet, route, or interface are.
swiley 7y ago
Most of that comment is Mozilla BS and not networking stuff. --Someone with a decent understanding of networking
- cmroanirgo 7y ago
  Agreed. Just looked up about trr nonsense and found this 'setting': > network.trr.excluded-domains > Comma separated list of domain names to be resolved using the native resolver instead of TRR. Users may add domains they wish to exclude from TRR to this pref. This pref can be used to make /etc/hosts works with DNS over HTTPS in Firefox. Setting network.trr.excluded-domains to include host names from /etc/hosts will make them fall back to platform DNS, which will use the rules in /etc/hosts. So, rather than using the hosts file, network admins & devs now have to specify 'special sauce' in FF too? I'm not buying DoH for this reason alone, because it throws out a lot of legacy (albeit always regarded as hokey) for no good reason. If FFox is doing it's own DNS stuff is MUST (at least) do hosts file resolution, imho. Otherwise it leaks names, which kinda defeats one of the main the purposes of DoH: which is to maintain critical privacy in places where it's being abused.
  - teknopaul 7y ago
    This is so true. FireFox is terrible at spaffing private info at search engines. Breaking DNS is madness IMHO. Its just more sites that dont work on FF. Broken is not more secure, its just broken.
lagadu 7y ago
Fire up a Linux VM and check out the named howto. Not only will you learn a lot about dns, you'll have a working server by the end of it.
chrisweekly 7y ago
You're not alone. That said, I highly recommend reading and referencing "High Performance Browser Networking" by Ilya Grigorik^1, it's accessible, detailed, accurate, and useful in the extreme. 1 https://hpbn.co/ https://hpbn.co/

vetinari 7y ago

Don't take it in some wrong way, but most programmers have no idea about networking; for them, IP addresses are just some numbers. Yes, are explaining to our colleagues what IP address, subnet, route, or interface are.

swiley 7y ago

Most of that comment is Mozilla BS and not networking stuff. --Someone with a decent understanding of networking

cmroanirgo 7y ago
Agreed. Just looked up about trr nonsense and found this 'setting': > network.trr.excluded-domains > Comma separated list of domain names to be resolved using the native resolver instead of TRR. Users may add domains they wish to exclude from TRR to this pref. This pref can be used to make /etc/hosts works with DNS over HTTPS in Firefox. Setting network.trr.excluded-domains to include host names from /etc/hosts will make them fall back to platform DNS, which will use the rules in /etc/hosts. So, rather than using the hosts file, network admins & devs now have to specify 'special sauce' in FF too? I'm not buying DoH for this reason alone, because it throws out a lot of legacy (albeit always regarded as hokey) for no good reason. If FFox is doing it's own DNS stuff is MUST (at least) do hosts file resolution, imho. Otherwise it leaks names, which kinda defeats one of the main the purposes of DoH: which is to maintain critical privacy in places where it's being abused.
- teknopaul 7y ago
  This is so true. FireFox is terrible at spaffing private info at search engines. Breaking DNS is madness IMHO. Its just more sites that dont work on FF. Broken is not more secure, its just broken.

lagadu 7y ago

Fire up a Linux VM and check out the named howto. Not only will you learn a lot about dns, you'll have a working server by the end of it.

chrisweekly 7y ago

You're not alone. That said, I highly recommend reading and referencing "High Performance Browser Networking" by Ilya Grigorik^1, it's accessible, detailed, accurate, and useful in the extreme. 1 https://hpbn.co/ https://hpbn.co/