4 ms·

Disagree on DoH though, because it defeats DNS caching and blocking in the subnet. Plus, many people trust their own provider more than yet another US corporati

by tremon 6y ago

Disagree on DoH though, because it defeats DNS caching and blocking in the subnet. Plus, many people trust their own provider more than yet another US corporation.

tptacek 6y ago
It defeats DNS caching and blocking in the "subnet" because for most US users the DNS provider is an adversary, and trusting it would be a mistake.
- sildur 6y ago
  But there is an entire world outside the US. I trust my local ISP way more than a US corporation.
  - tptacek 6y ago
    That's fascinating, but now you know why people in the US are quick to embrace DoH in its default configurations. And, of course, nothing ties DoH to major US corporations. You can DoH to a NUC in your cousin's bedroom closet.
    - SAI_Peregrinus 6y ago
      I run DoH on a raspberry Pi with piHole. And then DoH from it to Quad9's servers. DNS blocking, with DoH.
      - tptacek 6y ago
        You can also just run Pi-Hole directly on something like Fly.io, and DoH to it from your local machine. :P
        musicale 6y ago
        Interesting - I assume their free tier is enough to run this. However, local caching on the Pi might yield faster lookup time.
judge2020 6y ago
They're all only useful in certain circumstances.