2 ms·

Depending on ISP and country this can never be achived. Sometimes there are laws to filter out specific domains. But then again, should the browser be the auth

• tialaramex 5y ago
  What exactly is it that "can never be achived" ? Technically as I explained DoH is content that you can't tell the client about some particular name, it just wants that expressed as an HTTP code (e.g. 403 Forbidden) rather than lying in your DNS answers. But over the longer term this is all irrelevant, the names are just a convention, legislators can write a law about names, but our laws aren't like Mother Nature's, people can just ignore them unless you deliver the will and resources to enforce them. Imagine if your legislature passes a law forbidding you from thinking about cats. Does it work? Do you stop thinking about cats? No? How will they make you? In technical terms the immediate future is Encrypted Client Hello (the names cease to be transported in plain text on the wire so an eavesdropper can't enforce a law about names) and then Oblivious DNS (the popular DNS server you're talking to such as 8.8.8.8 or 1.1.1.1 wouldn't know what question you asked, nor what the answer was, so it can't obey a law about names even if it wanted to).