3 ms·
I'm confused, how would this make blocking ads harder? You can still make domains not resolve by changing your DNS resolver (which you control), but it stop my
by Anunayj 5y ago
I'm confused, how would this make blocking ads harder? You can still make domains not resolve by changing your DNS resolver (which you control), but it stop my pesky ISP from blocking my access to a site.
- kreetx 5y agoYup, don't see any downsides either. I bet many technical people don't even know that https does actually leak domains via SNI, great that they finally patch it up! Regarding parent's comment: is ad blocking based on domains listed in SNI really a thing?
- deleted 5y ago[deleted]
- donmcronald 5y agoI think apps on mobile will start using DoH instead of respecting local network settings. The next logical step would be to sniff SNI on a proxy, but this will remove that ability too. Unless Google/Apple ban apps from ignoring system DNS settings, I think it's reasonable to assume most apps will start querying DoH servers directly.