3 ms·
The tools to administer a home network, such as DNS blocking and DNS sinkholes, are the same tools nations use to administer their populaces. If the default in
by Kalium 5y ago
The tools to administer a home network, such as DNS blocking and DNS sinkholes, are the same tools nations use to administer their populaces. If the default in Firefox is to enable blocking and sinkholes for the home administrator's benefit, it will similarly be to the benefit of oppressive administrations.
Home administrators who control their endpoints can turn DoH off with relative ease. By comparison, most governments cannot.
- swiley 5y agoIt would be nice if it would check the resolver config files (like the hosts file) with it enabled though. That was a really easy way to block harmful stuff or name things without requiring DNS. Having to choose between encryption and easy configuration is pretty poor UX.
- Kalium 5y agoNaively, that seems like something that could be a very useful configuration option to set! Though I can also see why you might default to having it off if you don't trust the host resolver very much in the country-administering-people case.
- swiley 5y agoYou have to trust the local OS config. No amount of clever application programming will ever let you get around that.