3 ms·
> Can't you set up your own DoH server with its own domain name, get a Let's Encrypt certificate for it, then point your mobile device at that? Yes. But what’
by topranks 5y ago
> Can't you set up your own DoH server with its own domain name, get a Let's Encrypt certificate for it, then point your mobile device at that?
Yes. But what’s the angle here? You trust “ISP(s) hosting your DoH server” but not “ISP providing phone connection?”
Might be a legitimate reason for that, but ultimately as with all these discussions it’s just a matter of who you’d rather give the data to.
And your ISP will still be able to see from SNI for the most part so… it boils down to “my ISP can see anyway (via SNI), should I also let someone else see (DoH provider)?”
- josephcsible 5y ago> Yes. But what’s the angle here? You trust “ISP(s) hosting your DoH server” but not “ISP providing phone connection?” Your own DoH server could just do the filtering you want and then hand off the work to another real DoH server like Cloudflare's. > Might be a legitimate reason for that, but ultimately as with all these discussions it’s just a matter of who you’d rather give the data to. True, but in most of the USA, your ISP is the least trustworthy choice for who to give your data to. > And your ISP will still be able to see from SNI for the most part so… it boils down to “my ISP can see anyway (via SNI), should I also let someone else see (DoH provider)?” So let's hurry up and deploy eSNI/ECH everywhere.