4 ms·

It's ironic that the browser that presents the biggest red flag for removing user control of DNS is Firefox, with their push for DNS over HTTPS. It's true that

It's ironic that the browser that presents the biggest red flag for removing user control of DNS is Firefox, with their push for DNS over HTTPS. It's true that you can turn it off (for now), but until Firefox baked DoH in, DNS was a sacrosanct user control switch mostly unimpeachable by corporate meddling.

adrianN 6y ago
I don't know the internals of Firefox, but keeping DNS support alive seems like a fairly small patchset. I'd think that someone would provide a fork if Mozilla decided to drop support.
fpoling 6y ago
Firefox cannot remove that option to use system-provided DNS API instead of own implementation of HTTPS DNS. Doing that will prevent using it with intranets.
- zzo38computer 6y ago
  System DNS should always be used (unless the user configures it otherwise, e.g. by using a proxy for all connections). If you want DNS over HTTPS, this should be implemented as part of the system DNS, so that it can be used with any program that accesses the internet, rather than only the web browser.
int_19h 6y ago
So long as DoH servers are configurable, why is it a problem?
- pmontra 6y ago
  I use /etc/hosts daily to access computers with only an IP address and no DNS entry, or to override them for testing. I don't want to have to self host a DoH server when it's so easy to edit a test file. Furthermore, until every ISP has its own DoH server we are centralizing control of the basic internet infrastructure even more than now.
  - GrayShade 6y ago
    /etc/hosts works in Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=1616252 https://bugzilla.mozilla.org/show_bug.cgi?id=1616252
catlifeonmars 6y ago
DNS also leaks your domain lookups to anyone and everyone. If you make it opt in, then opting in becomes incriminating in some contexts. IDK, this sounds very much like a problem specific to people who don’t need to worry about the state controlling their internet access.

adrianN 6y ago

I don't know the internals of Firefox, but keeping DNS support alive seems like a fairly small patchset. I'd think that someone would provide a fork if Mozilla decided to drop support.

fpoling 6y ago

Firefox cannot remove that option to use system-provided DNS API instead of own implementation of HTTPS DNS. Doing that will prevent using it with intranets.

zzo38computer 6y ago
System DNS should always be used (unless the user configures it otherwise, e.g. by using a proxy for all connections). If you want DNS over HTTPS, this should be implemented as part of the system DNS, so that it can be used with any program that accesses the internet, rather than only the web browser.

int_19h 6y ago

So long as DoH servers are configurable, why is it a problem?

pmontra 6y ago
I use /etc/hosts daily to access computers with only an IP address and no DNS entry, or to override them for testing. I don't want to have to self host a DoH server when it's so easy to edit a test file. Furthermore, until every ISP has its own DoH server we are centralizing control of the basic internet infrastructure even more than now.
- GrayShade 6y ago
  /etc/hosts works in Firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=1616252 https://bugzilla.mozilla.org/show_bug.cgi?id=1616252

catlifeonmars 6y ago

DNS also leaks your domain lookups to anyone and everyone. If you make it opt in, then opting in becomes incriminating in some contexts. IDK, this sounds very much like a problem specific to people who don’t need to worry about the state controlling their internet access.