3 ms·
> The DNS-over-HTTPS model favors those who run the servers (because they get exclusive access to monetizable end user name resolution data) Hold up. You are
by dralley 6y ago
> The DNS-over-HTTPS model favors those who run the servers (because they get exclusive access to monetizable end user name resolution data)
Hold up. You are claiming that the fact that DoH prevents DNS requests from being visible in cleartext network traffic is a bad thing?
...what? In a world where the choice is between one party (the DNS provider) having access to my DNS requests and everyone on the network including my DNS provider having access to my DNS requests, I'll choose "DNS provider having exclusive access" every single time.
- dec0dedab0de 6y agoHold up. You are claiming that the fact that DoH prevents DNS requests from being visible in cleartext network traffic is a bad thing? It is when its my network. If they cared about people sniffing they would use DNSSEC, but still use the network DNS server. DNS over HTTPS is just a way for shady companies to hide what they're doing.
- _-___________-_ 6y agoDNSSEC provides authenticity, not confidentiality.
- theamk 6y agoUh, DNSSEC is only signatures, it has no encryption.