8 ms·

> already I have a choice of a couple of DNS-over-HTTPS providers in my preferences Can you please cite that "couple" and also how you believe a typical user

by acqq 7y ago

> already I have a choice of a couple of DNS-over-HTTPS providers in my preferences Can you please cite that "couple" and also how you believe a typical user would ever change the default?

robin_reala 7y ago
The dropdown has CloudFlare, NextDNS and Custom (that opens a text input). As for users changing this, sure, that’s not going to happen. But I can imagine a world where the default is that your requests are fanned out randomly to a choice of hundreds or thousands of providers, with no clear and complete picture of a single user in the event that a single provider is compromised.
- ThePhysicist 7y ago
  Yes, that would be a good option. They should've just waited for more providers switching to DoH before they turned this on by default, IMO.
  - justinclift 7y ago
    Probably a chicken-and-egg thing. As long as we get there? :)
    - deleted 7y ago
      [deleted]
audessuscest 7y ago
> How is concentrating DNS to even less "points of possible collection" of any advantage to user's privacy? Firefox nightly (not sure with other version) propose already NextDNS as an alternative in pref. and an easy way to add a custom one. I can see for example big companies requiring their employees to use a custom one.
Arnt 7y ago
If you disregard the few people who change from the defaults and simplify a little, then moving from plain old DNS to DNS-over-HTTPS is moving from some DSL provider's resolver to Cloudflare's. The DSL provider has your real name and street address, Cloudflare does not.
- acqq 7y ago
  > The DSL provider has your real name and street address, Cloudflare does not. Some readers probably aren’t aware of the fact that even with DNS over TLS to Cloudflare the DSL provider can still collect exact info of which sites one visits. The name of the site is visible in the clear in the TLS communication with the site, independently of DNS.
jakelazaroff 7y ago
How do you think this compares to the present default, "whatever DNS my ISP chose for me"?

by acqq 7y ago

> already I have a choice of a couple of DNS-over-HTTPS providers in my preferences Can you please cite that "couple" and also how you believe a typical user would ever change the default?

robin_reala 7y ago

The dropdown has CloudFlare, NextDNS and Custom (that opens a text input). As for users changing this, sure, that’s not going to happen. But I can imagine a world where the default is that your requests are fanned out randomly to a choice of hundreds or thousands of providers, with no clear and complete picture of a single user in the event that a single provider is compromised.

ThePhysicist 7y ago
Yes, that would be a good option. They should've just waited for more providers switching to DoH before they turned this on by default, IMO.
- justinclift 7y ago
  Probably a chicken-and-egg thing. As long as we get there? :)
  - deleted 7y ago
    [deleted]

audessuscest 7y ago

> How is concentrating DNS to even less "points of possible collection" of any advantage to user's privacy? Firefox nightly (not sure with other version) propose already NextDNS as an alternative in pref. and an easy way to add a custom one. I can see for example big companies requiring their employees to use a custom one.

Arnt 7y ago

If you disregard the few people who change from the defaults and simplify a little, then moving from plain old DNS to DNS-over-HTTPS is moving from some DSL provider's resolver to Cloudflare's. The DSL provider has your real name and street address, Cloudflare does not.

acqq 7y ago
> The DSL provider has your real name and street address, Cloudflare does not. Some readers probably aren’t aware of the fact that even with DNS over TLS to Cloudflare the DSL provider can still collect exact info of which sites one visits. The name of the site is visible in the clear in the TLS communication with the site, independently of DNS.

jakelazaroff 7y ago

How do you think this compares to the present default, "whatever DNS my ISP chose for me"?