3 ms·

The thing is, DoH doesn't solve either of those problems. Your ISP can still censor your traffic unless you're using a VPN (in which case you don't need DoH to

The thing is, DoH doesn't solve either of those problems. Your ISP can still censor your traffic unless you're using a VPN (in which case you don't need DoH to protect from your ISP), and ``piracy'' happens outside the browser, so again, unless you're using a VPN (in which case you don't need DoH to protect from your ISP--and even if you did, DoH in your browser won't do anything) you'll still have to deal with the absurd fines. And let's not forget, ISPs can just block known DoH hosts, and now that weird browser you were trying doesn't work anyway. Oh well, let's go back to the corporate backed spyware we're all familiar with. This is a Bad Idea, and has the potential to make Firefox unusable to exactly the people it's trying to protect.

cpncrunch 5y ago
You cant ban cloudflare without blocking half the internet. Part of the problem is that many ISPs use Akamai for dns, and they have a broken malware filtering algorithm that causes a lot of false positives, resulting in sites being blocked for no reason, and there is no way to get whitelisted [1][2][3]. DoH has been a lifesaver for us. [1] https://community.spiceworks.com/topic/2331415-hosting-isp-dns-and-blacklisting-oh-my-help?page=1#entry-9420746 https://community.spiceworks.com/topic/2331415-hosting-isp-d... [2] https://webmasters.stackexchange.com/questions/120721/how-to-get-a-domain-unblocked-from-akamais-nominum https://webmasters.stackexchange.com/questions/120721/how-to... [3] https://community.akamai.com/customers/s/question/0D50f00005y5jGyCAI/problem-with-akamais-dga-suppobox-blacklist?language=en_US https://community.akamai.com/customers/s/question/0D50f00005...
- Izkata 5y ago
  > You cant ban cloudflare without blocking half the internet. Wrong stage of the request. The ISP can block the IP addresses the domain resolves to instead of the domain name itself. There'd still be fallout if shared hosting is involved, but nowhere near as bad as blocking Cloudflare.
  - cpncrunch 5y ago
    In the case of a site using cloudflare, the ips will resolve to cloudflare, so impossible to block without blocking all those sites. Dns and the web traffic both use https to a cloudflare ip. As much as Ive complained in the past about cloudflare harbouring spammers, I have now come to the conclusion they are providing a very important service. It certainly saved me a huge amount of stress when our site was blocked as a false positive by akamai’s dodgy dns, which meant customers from a whole raftload of isps couldnt access our site. Not to mention the benefit to users in countries like Russia.

cpncrunch 5y ago

You cant ban cloudflare without blocking half the internet. Part of the problem is that many ISPs use Akamai for dns, and they have a broken malware filtering algorithm that causes a lot of false positives, resulting in sites being blocked for no reason, and there is no way to get whitelisted [1][2][3]. DoH has been a lifesaver for us. [1] https://community.spiceworks.com/topic/2331415-hosting-isp-dns-and-blacklisting-oh-my-help?page=1#entry-9420746 https://community.spiceworks.com/topic/2331415-hosting-isp-d... [2] https://webmasters.stackexchange.com/questions/120721/how-to-get-a-domain-unblocked-from-akamais-nominum https://webmasters.stackexchange.com/questions/120721/how-to... [3] https://community.akamai.com/customers/s/question/0D50f00005y5jGyCAI/problem-with-akamais-dga-suppobox-blacklist?language=en_US https://community.akamai.com/customers/s/question/0D50f00005...

Izkata 5y ago
> You cant ban cloudflare without blocking half the internet. Wrong stage of the request. The ISP can block the IP addresses the domain resolves to instead of the domain name itself. There'd still be fallout if shared hosting is involved, but nowhere near as bad as blocking Cloudflare.
- cpncrunch 5y ago
  In the case of a site using cloudflare, the ips will resolve to cloudflare, so impossible to block without blocking all those sites. Dns and the web traffic both use https to a cloudflare ip. As much as Ive complained in the past about cloudflare harbouring spammers, I have now come to the conclusion they are providing a very important service. It certainly saved me a huge amount of stress when our site was blocked as a false positive by akamai’s dodgy dns, which meant customers from a whole raftload of isps couldnt access our site. Not to mention the benefit to users in countries like Russia.