3 ms·
Sure, but then you're blocking the user's DNS server, rendering the entire internet unusable for them, not just one specific site. That was always possible with
by Ajedi32 4y ago
Sure, but then you're blocking the user's DNS server, rendering the entire internet unusable for them, not just one specific site. That was always possible with or without deep packet inspection.
- sofixa 4y agoMost DNS over HTTPS compatible clients would gracefully downgrade to regular DNS.
- Ajedi32 4y agoThen most DNS-over-HTTPS clients are vulnerable to active attackers. That's the trade-off you make when falling back to an unsecured protocol. If clients aren't using some sort of encrypted DNS, then they're vulnerable to domain censorship anyway regardless of whether they're using QUIC.