3 ms·
> Unless this feature starts being turned on by default in routers and popular software Firefox has DoH turned on by default for US-based users. Unfortunately
by sirn 6y ago
> Unless this feature starts being turned on by default in routers and popular software
Firefox has DoH turned on by default for US-based users. Unfortunately being US-only, it won't protect Thai users just yet. Especially considering the fact that Thai ISPs have known to be hijacking port 53 and NXDOMAIN since forever[1] with ISP in the article being one of the biggest offender.
It might also worth nothing that PDPA, Thailand's equivalent of GDPR, is to become in effective in two days (May 27th) so this incident will be... interesting.
[1]: Starting in early 2000s, with NIPA (that I never see anybody uses), who aim to provide IDN-enabled Thai domain names by providing NXDOMAIN-hijacking services to ISP
- blitmap 6y agoI recently set up a dns-over-https (doh) proxy on my router to forward dns requests to 5 resolvers, that also use dnssec. I wish Firefox would expose the option from about:config in its user-friendly Preferences page so it will respect the "system default" (the advertised dns server). I am - for no legitimate reasons - avoiding Cloudflare as a resolver. As far as I know Firefox uses Cloudflare.
- encom 6y agoHave you been able to find a trustworthy public DoT resolver? I really want to use uncensoreddns.org, but availability has been a little flaky in the past. I'm not sure about Quad9. Google and CloudFlare are obviously out of the question. What else is there?
- cbg0 6y ago> Have you been able to find a trustworthy public DoT resolver? It really depends what you view as being "trustworthy". Outside of the US good enough? Or do you want non 5/9/14-Eyes? (https://en.wikipedia.org/wiki/UKUSA_Agreement#9_Eyes,_14_Eyes,_and_other_%22third_parties%22 https://en.wikipedia.org/wiki/UKUSA_Agreement#9_Eyes,_14_Eye...)
- encom 6y agoLet's start with "not Google-levels of creepy" and work up from there. I want someone who's not harvesting data, or engaging in censorship.
- fidelramos 6y agoCheck out this list in privacytools.io: https://www.privacytools.io/providers/dns/ https://www.privacytools.io/providers/dns/
- nix23 6y agoYes, well i trust this one: DoT: dns.digitale-gesellschaft.ch DoH: dns.digitale-gesellschaft.ch/dns-query Source: https://de.wikipedia.org/wiki/DNS_over_HTTPS https://de.wikipedia.org/wiki/DNS_over_HTTPS https://de.wikipedia.org/wiki/DNS_over_TLS https://de.wikipedia.org/wiki/DNS_over_TLS https://www.digitale-gesellschaft.ch/dns/ https://www.digitale-gesellschaft.ch/dns/ Sorry, for not being available in the en-wiki
- whoopdedo 6y agoOpenNIC has a few servers supporting either DoH or DoT or both.