3 ms·
IMO DoH is slithy better since it can more easily traverse proxies, NATs, firewalls. HTTP and HTTPS are probably the only two well implemented protocols that a
by rafaelturk 6y ago
IMO DoH is slithy better since it can more easily traverse proxies, NATs, firewalls.
HTTP and HTTPS are probably the only two well implemented protocols that are universally supported among all routers, proxies, firewalls including the very cheap routes that we often find out there.
- user982 6y agoInteresting that "slithy" passes spellcheck but "toves" doesn't.
- pgl 6y agoI don't know, I'd say that's precisely the reason DoH isn't so great - because it bypasses proxies, NATs, firewalls. If you're the admin that needs to configure DNS a certain way for any reason (corporate policies, parental controls, intranet configurations, malware protection) then having the user be able to work around by default is a massive pain. DoH seems like a great idea at first, until you're in a situation when it's not, and then it gets messy, because it's a moving target and everything has different workarounds.
- akerl_ 6y agoIf you’re the admin that needs to configure DNS a certain way, you need to do it by controlling and modifying endpoints. Otherwise, even if you implement network-level DoT, a user can defeat your controls by running DoH on their own, or by just adding an /etc/hosts file.