7 ms·
>Indeed. The problem is that a lot of operating systems still don't support it at all yet. Which one exactly? Android has it called "Private DNS", Linux suppor
by gsich 5y ago
>Indeed. The problem is that a lot of operating systems still don't support it at all yet.
Which one exactly? Android has it called "Private DNS", Linux supports it with systemd-resolved, Windows 10 too (don't know the build number at which it starts). Apple with OS 11 and iOS 14.
The main issue I see is that there is no support for both in every OS. "Private DNS" is DoT, while Windows 10 support is DoH. Apple has both.
- josephcsible 5y agoDoT is worthless since it's so easy to block at the network level, so I'm not counting Android. And doesn't Windows 10 only support it if you're in the insider program?
- gsich 5y agoDoesn't matter if you count DoT or not. It's still encrypted DNS. You didn't make a distinction in your previous post anyway.
- josephcsible 5y ago> It's still encrypted DNS. Does that really matter if censoring connections to the DoT server causes your device to silently fall back to insecure DNS?
- gsich 5y agoDepends on the client. You can construct any viable scenario here, won't matter. Right now you can block DoH too, simply by blocking Cloudflare, Quad9 and Google.